Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF3CA96F4A011EFB6B3815E762E951A.roa
File: ABF3CA96F4A011EFB6B3815E762E951A.roa (raw, json)
Hash identifier: WP7sTn5COMUsdtKSgqiOzZ+ATB2e98YRyKh+FV8KC3U=
Subject key identifier: 1D:BD:BF:6B:9E:8A:EC:9E:77:56:48:6D:BE:49:0B:44:DC:72:29:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF3CA96F4A011EFB6B3815E762E951A.roa
Signing time: Thu 27 Feb 2025 00:20:39 +0000
ROA not before: Thu 27 Feb 2025 00:00:35 +0000
ROA not after: Sat 19 Feb 2028 00:00:35 +0000
asID: 17561
IP address blocks: 154.94.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91647 (0x165ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 00:00:35 2025 GMT
Not After : Feb 19 00:00:35 2028 GMT
Subject: CN=67bfafd7-b7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:3c:88:34:6e:b7:11:6c:3f:b5:1b:bf:13:
e5:f5:ac:d9:d4:af:53:4f:dc:75:bd:e7:dc:78:2f:
18:84:19:7d:c5:a4:02:0b:bb:58:d6:c0:cc:e3:64:
e0:c7:26:c1:2d:a8:c5:0e:29:00:a4:c8:8c:55:f7:
01:6a:bd:d2:ef:3e:dc:28:07:2a:df:f3:46:b5:86:
89:79:f4:74:20:68:f5:85:5f:a1:10:c9:04:36:10:
41:7e:7d:fc:4f:7e:99:75:35:0c:fb:7e:d3:3e:35:
df:fc:0f:fd:22:2d:43:62:5b:39:9e:7a:04:cc:85:
5c:e5:e0:94:cd:1b:2b:22:68:7e:9c:f7:2a:c6:4e:
34:a8:80:c0:5e:ae:8d:fe:34:89:da:ab:36:c2:e0:
a3:d6:08:15:5c:60:92:13:81:a4:45:eb:8b:8b:57:
06:aa:4c:e8:7a:72:b3:a4:c8:3a:1b:24:0e:57:7d:
62:84:98:d7:85:51:f5:11:fc:f6:be:7d:ca:64:d4:
26:59:f3:d2:5e:48:33:fe:63:dc:4e:3f:ff:d1:15:
31:b5:ab:3c:cc:86:60:c4:31:86:7e:f6:12:ae:7d:
81:fc:0f:63:f9:41:7c:ca:4e:af:a8:fd:e3:e8:31:
2c:18:4a:74:73:84:ae:1f:51:53:43:36:16:d0:0c:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BD:BF:6B:9E:8A:EC:9E:77:56:48:6D:BE:49:0B:44:DC:72:29:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF3CA96F4A011EFB6B3815E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:17:16:96:a7:78:89:d2:94:86:ad:ea:64:39:19:ee:8d:3b:
ce:30:64:49:e8:aa:ef:35:0f:05:1b:a3:88:27:67:c9:2b:14:
c8:d3:be:cf:b6:bf:f9:27:32:8f:9f:16:a1:ea:00:3f:78:25:
5a:4b:81:8f:97:ee:bf:f2:45:47:2f:5e:35:2f:d6:3c:4d:c8:
13:9e:d4:90:12:8b:3e:d2:a5:92:9e:be:7e:db:b9:33:ee:d2:
e0:96:77:96:9e:2b:58:3e:19:72:79:36:81:7c:1c:76:a3:0b:
47:b2:b0:1c:4c:14:89:d0:27:d3:fc:83:2f:8e:24:e7:75:78:
f7:18:fa:72:7e:5a:b5:6b:af:75:90:33:43:87:aa:85:57:38:
70:58:7f:ae:12:67:0e:2c:70:a7:c4:5a:09:c8:2a:9e:c7:12:
7a:cf:f8:a9:f7:90:3b:d1:ba:fa:8a:ba:10:cf:6b:10:70:6c:
e9:00:80:cb:e5:f8:dc:bf:0f:f5:b0:3a:65:ab:20:79:8d:e2:
27:91:1d:36:1b:b6:ba:70:2d:77:80:b9:ad:c6:e6:be:b7:57:
e2:48:bd:b9:09:50:71:4c:77:5c:55:16:6f:78:11:4e:ab:b2:
ae:10:3c:07:2b:8d:bf:89:7a:de:87:82:58:f0:e3:04:f3:99:
84:2d:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:48 2025 by rpki-client