Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D98B68F3F911EFA4849F61762E951A.roa
File: C1D98B68F3F911EFA4849F61762E951A.roa (raw, json)
Hash identifier: 8s95NT2E87x+5bt6/nEzRGkH+iShvC5WMeAuyBiH1Co=
Subject key identifier: 98:7F:BC:81:15:EC:13:0E:3D:6D:F1:CD:13:85:CB:66:76:28:53:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D98B68F3F911EFA4849F61762E951A.roa
Signing time: Wed 26 Feb 2025 04:25:50 +0000
ROA not before: Wed 26 Feb 2025 04:25:46 +0000
ROA not after: Thu 19 Feb 2026 04:25:46 +0000
asID: 984
IP address blocks: 154.203.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90323 (0x160d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 04:25:46 2025 GMT
Not After : Feb 19 04:25:46 2026 GMT
Subject: CN=67be97ce-202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:52:8e:68:d5:9d:d8:b8:2a:07:0b:c9:79:f4:
4d:1d:ca:32:d6:6f:a7:59:45:05:21:33:86:ac:eb:
25:8a:05:2a:16:f2:ae:23:5c:af:ba:88:70:87:8d:
94:ac:f6:cd:03:40:c2:c4:30:a9:fd:e0:4e:05:90:
a7:f2:44:fe:59:5a:c8:e8:7c:58:38:4c:56:d5:a2:
99:8f:59:92:b8:c2:11:e2:e5:43:9d:f7:26:71:4a:
0f:33:15:3a:8a:bd:e5:24:35:d5:f0:1f:25:fa:50:
2e:94:e8:d2:a0:f0:97:89:b1:73:2d:7c:9c:8b:11:
57:28:9f:00:16:a0:27:f5:b5:c8:18:44:95:0f:1d:
ef:e0:1f:b1:ff:9f:f5:c3:3a:92:38:c4:fe:76:a8:
d5:8c:a8:21:cf:0b:ae:22:c9:c7:66:f0:7f:dc:9c:
66:4e:cc:60:fb:1a:b7:cf:cf:48:87:a6:7e:22:c4:
d9:44:8e:cb:ce:35:fb:c6:47:ab:7f:dd:11:b1:e6:
14:ce:b4:fe:0d:73:7f:de:f6:04:e1:45:85:41:04:
c2:89:13:96:53:83:d1:92:7d:c3:d3:e3:bd:b2:0e:
50:ce:cc:ab:62:26:0d:ef:cc:d3:bb:a2:90:a5:97:
0a:05:15:19:1e:cb:87:3e:bf:9e:d8:db:6d:40:47:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:BC:81:15:EC:13:0E:3D:6D:F1:CD:13:85:CB:66:76:28:53:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D98B68F3F911EFA4849F61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.197.0/24
Signature Algorithm: sha256WithRSAEncryption
46:91:65:4d:11:3a:c8:3a:d2:28:5d:e2:99:b8:f0:74:51:88:
64:02:30:5d:85:9e:61:dd:d2:ff:40:1f:e7:a0:81:5d:37:53:
63:b2:08:c6:dd:b6:a2:b5:fa:87:9a:14:5b:c1:c3:a5:a3:7d:
fe:98:b6:d2:2c:97:b4:9c:54:53:06:83:ad:cd:2e:6e:80:a7:
ad:c4:33:32:ad:ba:6e:f2:fd:42:dd:cb:f3:0f:2e:6d:d9:17:
52:84:dd:53:51:eb:2b:72:d7:cc:c9:3e:de:88:f4:c0:29:e8:
6a:84:3f:68:82:0f:68:db:d4:ec:c5:8c:7b:42:80:74:74:91:
32:c1:b6:ae:88:d7:d7:19:38:e0:a8:57:40:ff:c1:c8:61:3e:
44:69:64:4e:d7:48:84:41:3b:7b:7c:85:2e:40:a7:db:f7:0d:
36:2b:0f:65:0c:6d:54:28:53:7e:d0:95:58:ad:5a:fe:7d:0a:
58:2a:bf:4e:05:3c:11:a7:71:bb:18:53:f9:14:60:a1:a7:0d:
fe:04:25:23:2d:92:5f:9f:50:13:71:5a:e2:ef:6c:fb:49:a8:
5c:4c:39:f5:2f:7c:5f:bd:a8:2d:34:ef:75:40:a3:b9:e8:a8:
b5:2d:cf:df:d7:6d:b8:34:3e:5b:b3:a6:f9:47:bd:53:8c:cf:
2f:30:d8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:36 2025 by rpki-client