Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6026E96F45711EF9AD83A6D762E951A.roa
File: B6026E96F45711EF9AD83A6D762E951A.roa (raw, json)
Hash identifier: 5gRAdPn5zOCyI0dr6s7YrRH4kXIO6KJ3Gu3mhmV+YK0=
Subject key identifier: 78:89:76:EE:2C:65:99:16:2C:71:D4:C8:38:49:EA:54:B9:60:6A:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6026E96F45711EF9AD83A6D762E951A.roa
Signing time: Wed 26 Feb 2025 15:38:23 +0000
ROA not before: Wed 26 Feb 2025 15:37:56 +0000
ROA not after: Thu 19 Feb 2026 15:37:56 +0000
asID: 984
IP address blocks: 154.210.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91362 (0x164e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:37:56 2025 GMT
Not After : Feb 19 15:37:56 2026 GMT
Subject: CN=67bf356f-2d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:a0:7f:e4:12:d7:d3:e1:71:b4:8c:b4:a4:
09:3e:26:46:62:da:8f:26:6c:24:2d:64:4a:c9:81:
08:d0:e9:5f:79:7c:6a:99:bb:ab:4f:47:8f:0c:50:
13:53:b9:9f:44:52:c0:d7:c2:31:78:fd:26:75:22:
95:5f:1d:a2:19:01:51:c9:ce:41:e6:76:ee:c4:39:
1e:70:94:6e:25:62:8d:a0:c9:df:a6:5e:08:a1:15:
6a:de:02:91:e9:09:aa:da:11:6b:0c:05:55:26:9a:
1e:56:89:f5:c7:12:d6:03:2b:e1:d6:77:2c:cb:d2:
26:3c:ec:c6:ee:ad:c0:4f:cc:54:ed:97:0e:ad:43:
61:29:7f:cb:52:50:e6:c8:f7:64:96:b9:51:75:c1:
a1:17:ee:c8:2d:ff:a0:2c:6a:7e:5a:5b:63:77:61:
f4:30:6a:10:8d:10:94:13:ba:41:0e:3d:6d:3e:ce:
5b:10:47:ee:ce:c3:cd:0d:10:65:0e:60:b6:5f:6d:
74:1a:a1:03:3c:47:e8:41:02:ec:09:32:2b:5b:cf:
24:34:bc:94:78:f3:0e:6d:00:92:05:f7:81:d2:e0:
d8:01:d1:d1:48:4c:af:f2:73:8c:7f:24:f9:d5:91:
39:f2:c6:06:60:72:33:06:9a:c9:b4:4f:69:3c:8a:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:89:76:EE:2C:65:99:16:2C:71:D4:C8:38:49:EA:54:B9:60:6A:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6026E96F45711EF9AD83A6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.97.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a0:63:d4:e3:af:7f:c8:32:7d:6a:85:51:53:ba:51:50:1c:
2d:91:b9:cf:b0:ae:39:38:5e:28:df:28:13:b0:bc:86:b8:0a:
e5:ab:27:8d:27:16:a6:38:b6:4c:53:25:bf:bc:94:38:37:ea:
df:5b:be:51:99:76:b1:ae:c9:39:66:03:c5:d9:02:3a:b7:33:
bd:b5:40:a8:9c:e9:3b:a3:c4:e9:35:26:e3:43:09:f7:cc:75:
5a:3e:be:a3:80:77:bb:b9:98:9c:22:b9:d6:6d:a7:9f:60:9e:
26:bd:ef:c2:ff:86:dd:2d:5b:72:93:1d:c2:1b:83:12:89:69:
fa:9c:26:f4:e5:cb:84:45:e1:e7:b9:01:ce:86:4b:98:24:9e:
d7:83:eb:1b:f1:fc:ba:2e:ee:e1:3b:a1:0a:1c:40:bd:d2:ea:
2c:4d:7e:94:64:5e:57:06:18:3e:0e:2b:77:d5:17:0c:cf:38:
fb:b6:9a:1e:e1:bd:f3:6a:e3:91:82:51:60:cf:99:49:47:cf:
58:b2:4d:02:74:62:13:06:30:a6:4b:f0:47:bd:ee:bf:5b:56:
fa:3d:b7:78:d0:19:76:59:38:46:e8:8e:a9:c9:c2:71:95:2c:
b2:b6:47:0d:b2:16:57:cf:bb:fc:24:9d:d0:87:c4:5d:c1:db:
ed:99:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:01 2025 by rpki-client