Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE3E544AF41A11EF91C6FCBE762E951A.roa
File: BE3E544AF41A11EF91C6FCBE762E951A.roa (raw, json)
Hash identifier: fS0IFuRH+a4jIUpLqqymgfvKXxOzKs8up6qDQJ28QZo=
Subject key identifier: 4A:8A:55:1B:B8:1E:A1:35:DB:BE:8C:36:78:F7:8F:3A:60:EB:F4:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016149
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE3E544AF41A11EF91C6FCBE762E951A.roa
Signing time: Wed 26 Feb 2025 08:21:57 +0000
ROA not before: Wed 26 Feb 2025 08:21:53 +0000
ROA not after: Thu 19 Feb 2026 08:21:53 +0000
asID: 984
IP address blocks: 154.206.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90441 (0x16149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:21:53 2025 GMT
Not After : Feb 19 08:21:53 2026 GMT
Subject: CN=67becf25-5ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:97:93:1a:f9:fe:c2:84:bc:da:30:26:4e:
44:91:e6:25:e8:ae:78:ad:0d:42:e2:97:93:66:09:
cc:ab:c0:5a:dc:d5:d4:5e:2a:4f:08:0e:2c:83:ac:
39:85:0b:0f:03:c2:d5:fb:39:25:33:a6:77:2b:27:
85:24:9b:65:e1:a6:b5:65:08:5d:14:35:9f:5c:31:
12:8d:36:6c:b1:ce:3e:1a:69:25:66:c9:b7:9e:05:
b1:f5:c8:5d:31:5e:7f:15:b6:06:66:15:52:e3:81:
c6:e7:8b:5c:f8:f5:10:91:b9:b1:bf:2c:43:dd:cb:
7d:c5:4b:9b:9d:ab:a9:ca:d6:39:7c:f8:40:18:62:
67:c1:2d:8a:3e:e5:f4:9d:16:05:aa:96:c5:37:20:
bb:79:36:c9:85:03:ab:bd:94:da:72:35:bf:36:b2:
40:d5:90:c9:14:84:08:b7:b1:66:91:8c:6f:2c:af:
42:ba:66:06:ab:27:ce:72:08:61:6d:95:ee:fe:e2:
f0:ab:a4:e7:a5:ac:e8:52:8c:5a:23:89:fb:a1:a4:
06:10:76:6d:0d:c1:d4:4f:32:e8:c0:20:cd:b2:65:
58:3b:04:cb:fa:f3:07:67:f8:da:96:98:e7:d2:d9:
d4:e5:d4:1a:0e:57:af:9b:6b:cf:50:ae:3f:a5:6e:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8A:55:1B:B8:1E:A1:35:DB:BE:8C:36:78:F7:8F:3A:60:EB:F4:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE3E544AF41A11EF91C6FCBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.209.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ae:bd:27:88:9b:9a:e1:2d:09:81:b6:96:1b:62:93:8b:95:
36:63:4f:2a:e4:26:34:d6:f2:54:a5:27:5d:76:b4:41:7f:e2:
de:07:91:72:dc:be:0a:24:cd:56:bb:8c:69:f3:dc:c9:cb:87:
b6:c1:a7:56:1d:83:48:b3:a0:19:e4:80:2c:78:85:1d:3c:7b:
92:e0:1b:5d:99:80:b0:5a:9a:76:81:c9:58:4b:b4:c7:51:e6:
52:73:1e:51:58:f2:67:52:7b:c4:b3:81:92:28:5c:6d:38:ac:
44:22:3b:b6:d8:8b:3c:fa:08:65:f7:72:ad:dc:4e:77:93:2a:
c8:04:6a:9d:77:1e:e0:12:f5:5d:e1:ef:0e:09:f2:32:6c:a1:
b2:3b:ae:18:d3:5d:2b:ef:92:c0:56:ec:37:92:52:c3:10:0b:
d3:5d:26:9a:17:1c:80:05:ae:61:6c:48:13:d4:a7:ec:60:1d:
e1:56:31:36:3f:96:26:ba:62:1a:35:8e:fa:ea:df:c9:61:76:
88:7a:49:64:90:fe:0b:c6:0a:34:61:b8:c5:5f:30:e9:45:7e:
f1:dc:d6:3a:18:31:ae:7b:a9:48:26:8f:f9:4d:6b:08:f1:3a:
47:0b:93:ef:5e:7b:41:84:d2:96:11:2e:5d:c5:bf:a9:f8:06:
ca:02:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:44 2025 by rpki-client