Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB787FD8F44C11EFA485E99E762E951A.roa
File: BB787FD8F44C11EFA485E99E762E951A.roa (raw, json)
Hash identifier: XDz7T1Iu4mQqPXzch23N010bvWs+5ZVYLa/mTHmgpLI=
Subject key identifier: BD:DE:06:DA:B3:DD:E1:75:39:74:D6:D4:22:30:69:A8:E7:AE:5A:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016439
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB787FD8F44C11EFA485E99E762E951A.roa
Signing time: Wed 26 Feb 2025 14:19:47 +0000
ROA not before: Wed 26 Feb 2025 14:19:43 +0000
ROA not after: Thu 19 Feb 2026 14:19:43 +0000
asID: 984
IP address blocks: 154.210.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91193 (0x16439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:19:43 2025 GMT
Not After : Feb 19 14:19:43 2026 GMT
Subject: CN=67bf2303-996a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:61:f0:c8:ed:7b:4c:68:47:3e:9a:87:33:
5b:2c:bc:dc:02:be:22:a5:4f:e1:5f:f2:e4:69:e0:
eb:57:d0:10:48:6b:26:7d:59:d2:e0:d3:1b:ae:42:
38:c4:9f:ef:e9:2e:29:65:93:f2:4f:50:1f:0a:2c:
3a:06:59:8e:00:20:72:2c:af:b5:d7:27:e4:98:86:
d8:0a:54:47:c8:9a:64:e1:83:93:23:6a:1b:c5:34:
f9:cb:3f:58:f6:1b:52:cb:48:0a:1b:19:15:e8:39:
cf:0e:ae:87:52:a6:20:b8:91:29:99:2e:f3:8e:df:
51:d2:fb:da:6c:87:ee:e1:a8:34:74:e0:42:c2:41:
4d:73:53:e7:72:c7:fb:6f:f3:dc:ea:0e:f6:02:7a:
29:f6:f6:31:45:2f:21:4e:f3:df:d8:4a:60:d0:77:
fa:52:fa:18:7e:d0:99:9f:68:a3:f6:3a:2a:0e:73:
3b:92:77:6f:05:64:9c:1e:d6:ac:da:d9:d9:3d:7e:
c9:4e:d4:29:f6:a3:0a:d9:04:b8:7b:0d:43:e1:0a:
a7:37:74:3b:a0:42:ee:4b:3a:1d:b3:fb:ae:88:d5:
89:81:19:6b:f8:69:51:0d:bc:cc:ed:d0:3a:4b:57:
0e:b6:5c:2c:b8:1b:36:65:c1:b0:8c:2e:15:1f:d2:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DE:06:DA:B3:DD:E1:75:39:74:D6:D4:22:30:69:A8:E7:AE:5A:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB787FD8F44C11EFA485E99E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:13:7e:70:36:9c:e1:18:01:2e:65:42:e5:6d:8d:ba:68:08:
e1:af:98:06:5d:60:5b:ad:d7:27:62:81:d8:f6:d5:47:59:3e:
93:ba:84:68:bb:32:c8:bf:9a:be:e6:c5:69:6b:cb:b0:97:87:
7f:02:d9:6a:dc:13:a9:31:f3:2a:0e:ae:79:b8:0a:8d:e3:fe:
8a:dc:ee:bb:aa:2b:12:a5:46:e4:37:2d:bc:f7:6a:cd:c6:d9:
c0:63:8f:85:bc:81:05:46:10:3a:2f:0c:f8:71:a4:22:60:39:
89:2f:27:3b:1a:03:e0:9d:fd:2b:81:b2:71:f4:ab:be:bb:6e:
9d:8d:34:1b:fb:06:61:59:c4:70:eb:c3:75:a8:ee:4e:18:41:
de:f2:3c:c4:33:2b:63:ce:7d:20:eb:a4:b7:76:fa:85:44:8c:
50:02:80:38:74:ad:76:95:80:19:dc:2b:85:38:03:a9:b7:a6:
14:9d:fc:84:46:72:d2:8e:a8:c9:e1:e8:1e:00:f4:0c:e9:43:
7e:bb:03:89:0a:5b:f5:45:18:13:41:06:3f:d4:d2:e8:6d:f7:
96:40:31:e5:7f:c1:ce:19:30:22:33:50:db:31:be:95:75:d6:
73:c3:d8:83:d9:ec:80:7e:f7:a8:1d:43:ab:9c:3b:a4:81:66:
01:ad:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:37 2025 by rpki-client