Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E273CCF44911EFB2AA908B762E951A.roa
File: C1E273CCF44911EFB2AA908B762E951A.roa (raw, json)
Hash identifier: jL667SrN3/PopIdNeD6XBUfawCHtJbk8m2NA/RZn7yw=
Subject key identifier: EF:AD:00:BD:A6:AF:D3:E9:11:0F:11:E0:61:8E:E8:4A:4C:8D:1F:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016409
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E273CCF44911EFB2AA908B762E951A.roa
Signing time: Wed 26 Feb 2025 13:58:29 +0000
ROA not before: Wed 26 Feb 2025 13:58:26 +0000
ROA not after: Thu 19 Feb 2026 13:58:26 +0000
asID: 984
IP address blocks: 154.210.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91145 (0x16409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:58:26 2025 GMT
Not After : Feb 19 13:58:26 2026 GMT
Subject: CN=67bf1e05-133e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:ec:b6:d7:07:3f:2c:08:ab:56:78:b4:be:
cb:58:71:1f:b2:d2:b1:d4:17:01:78:17:2c:94:ac:
a7:27:f0:90:53:1d:5b:2d:f6:a5:8f:14:56:30:f2:
1b:0c:7e:d5:ee:0b:62:04:aa:ee:c6:ec:02:34:a9:
1c:69:0e:94:02:f0:b0:c1:d2:60:cc:45:a7:18:10:
f9:0c:89:ad:0f:b9:57:d8:ec:c4:7a:e9:08:de:2b:
e7:4c:de:34:1b:1f:3d:e6:d9:fc:62:2d:51:d3:bb:
8f:21:70:a4:01:05:ee:d8:5d:dc:60:82:83:74:45:
b1:47:08:c1:79:f0:37:95:8f:db:d5:ec:d9:eb:1a:
b3:57:d8:1a:72:af:71:4a:fc:6f:5e:0e:57:32:a2:
be:a1:7b:85:60:67:d2:c8:e3:17:92:85:78:e8:91:
43:ab:6e:9a:e5:53:27:01:c9:29:79:15:d6:3b:d3:
66:f5:7a:4f:7a:dd:07:a7:64:5c:77:d4:ba:62:02:
b2:76:da:62:ce:38:09:b9:42:bc:64:1b:b0:23:e4:
ac:50:b5:61:eb:e4:92:28:2e:11:09:a1:4c:d4:bb:
27:09:0f:aa:0b:52:b7:e7:15:9f:aa:ec:5b:8c:ca:
c6:ed:a0:7f:a4:1f:b6:be:17:81:a7:d2:e8:f2:22:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AD:00:BD:A6:AF:D3:E9:11:0F:11:E0:61:8E:E8:4A:4C:8D:1F:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E273CCF44911EFB2AA908B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.41.0/24
Signature Algorithm: sha256WithRSAEncryption
76:77:28:83:5d:dd:e2:15:e7:70:18:ab:f3:ed:d8:40:cb:ba:
68:19:8b:af:99:44:b7:c9:65:77:50:da:23:f2:fc:bf:fe:19:
bd:59:47:a5:b0:23:9c:8d:0d:b8:d9:74:63:60:16:d0:c2:b9:
e7:03:0b:5f:c5:55:97:5b:e4:26:3f:18:89:85:a2:22:25:ed:
39:04:69:20:f6:03:3b:ea:4c:ee:bb:c0:b1:9d:94:28:9d:7e:
b8:57:5c:62:71:df:26:a5:aa:50:79:1a:8d:67:88:68:25:25:
a3:ea:a9:3c:56:4b:a8:3f:00:cc:d8:6a:72:a9:01:33:6a:d8:
c1:49:40:36:24:9c:a1:70:21:c8:c8:8b:b8:89:5a:5d:50:a3:
12:28:c9:db:44:68:e8:f9:c7:4a:06:22:13:f8:b4:2d:81:70:
a3:36:20:63:e7:c9:df:8a:b6:a9:ec:ff:63:88:03:87:09:03:
2e:b0:13:1e:c4:1f:06:f9:06:3d:59:96:50:14:12:c7:6c:9f:
d6:9f:60:3a:91:13:bc:72:1b:5a:43:a8:32:0e:c5:f6:ea:08:
cb:4f:f4:13:92:34:c6:65:39:fd:ea:a7:7f:b3:a8:54:44:7d:
bb:22:0d:7f:8e:69:ef:6a:35:62:53:a6:a5:67:22:bc:95:4e:
5c:4f:19:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:24 2025 by rpki-client