Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7638E94F45911EFAFFE597C762E951A.roa
File: B7638E94F45911EFAFFE597C762E951A.roa (raw, json)
Hash identifier: TuWuIELGRUU/vPOBbv0hFSdb56I8t4S3/3un+7+oENM=
Subject key identifier: 75:FF:B7:24:37:91:AD:C6:5B:9C:41:78:7F:99:15:67:1F:37:5A:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7638E94F45911EFAFFE597C762E951A.roa
Signing time: Wed 26 Feb 2025 15:52:45 +0000
ROA not before: Wed 26 Feb 2025 15:52:36 +0000
ROA not after: Thu 19 Feb 2026 15:52:36 +0000
asID: 984
IP address blocks: 154.210.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91385 (0x164f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:52:36 2025 GMT
Not After : Feb 19 15:52:36 2026 GMT
Subject: CN=67bf38cc-0304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:32:d0:e0:23:73:59:ab:7b:4f:0e:45:f6:
e9:39:12:d4:b4:9e:08:0b:f7:63:49:2d:45:16:ef:
31:a5:fe:58:14:63:36:24:f9:82:d9:5e:0d:f5:c0:
ec:0e:c5:f7:83:2e:12:7f:b3:82:b1:e5:7f:25:ff:
e4:32:1d:fb:f5:ce:d6:3e:53:21:18:ab:a0:1b:9b:
4c:6a:fb:f7:89:76:77:9e:51:61:6c:c1:11:89:6a:
de:49:00:d7:c6:13:de:13:eb:08:a0:ca:e6:41:c8:
0e:43:a6:fd:6f:4c:b0:48:6c:b6:cb:77:8d:ad:fc:
19:2e:92:24:73:df:97:8a:4f:6f:75:7f:9d:27:ea:
8f:f6:46:d0:a9:91:0a:2e:ce:99:be:3f:12:77:6f:
8f:6e:0d:c3:18:4d:14:3a:43:9f:f6:8d:7e:c0:b4:
a1:25:49:1c:0d:cc:9a:63:a4:ff:6b:5a:a9:5c:2b:
a5:61:08:b1:0f:4c:91:ea:fe:e2:68:83:14:a6:d1:
8c:f1:78:0d:2f:c3:cc:95:f7:07:da:f9:f0:f9:3e:
fb:af:00:82:20:eb:85:8b:5c:02:44:0e:95:28:80:
b6:9d:f5:c6:d5:12:ab:4e:35:d3:07:40:cf:4d:89:
79:d0:0e:42:2c:d5:f2:31:19:0e:43:47:c2:be:58:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FF:B7:24:37:91:AD:C6:5B:9C:41:78:7F:99:15:67:1F:37:5A:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7638E94F45911EFAFFE597C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.105.0/24
Signature Algorithm: sha256WithRSAEncryption
53:35:fa:f2:85:29:a1:e2:52:72:2a:c7:96:1d:3e:39:98:fb:
9f:96:1c:54:8c:92:1a:1b:05:9e:d1:51:f1:6c:5a:4c:e5:94:
6b:b7:c9:32:e5:8c:bf:4e:d1:44:ed:71:fe:3a:dc:ee:e3:13:
5f:f4:2c:dd:b1:3e:dd:a2:20:15:28:6e:29:c3:9a:2e:24:7c:
91:bf:7b:85:c2:72:e6:b1:9e:fa:ac:db:8c:0e:0a:ff:8a:67:
2f:95:67:ee:1d:c4:22:19:86:55:93:f9:c4:ce:1b:bc:b1:70:
76:62:7d:09:0c:84:63:32:e2:89:b0:50:cb:66:f0:b5:9f:0b:
8b:80:3b:e5:f2:5c:98:f7:2a:38:7b:9e:2a:a0:ec:ed:c2:2c:
3a:2e:be:67:13:78:d9:9a:90:94:80:cc:6f:4d:68:6b:22:f4:
86:db:f6:cd:d2:f2:7b:b5:8e:a7:02:66:a3:ce:82:90:55:55:
fc:de:aa:8d:0d:c7:ff:f3:5a:35:20:ba:6b:d6:64:6f:22:46:
f8:ba:2f:d8:6b:f0:fb:b9:1c:81:57:30:22:af:1e:6c:97:63:
70:43:a4:fd:d8:3a:31:09:a2:b9:2e:bd:35:68:8b:42:ec:cf:
e0:48:02:98:66:dd:66:a4:9b:76:b2:44:ca:7c:bc:97:f4:24:
6e:95:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:40:13 2025 by rpki-client