Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCF7C500F3DB11EF89FED47F762E951A.roa
File: CCF7C500F3DB11EF89FED47F762E951A.roa (raw, json)
Hash identifier: //UlXn+NrEEugLr7a0jDqJcyvUaxta4aWhMJc2sY5js=
Subject key identifier: A9:B5:55:82:33:75:63:AA:D2:C6:C9:26:DC:FE:06:84:42:81:72:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01604D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCF7C500F3DB11EF89FED47F762E951A.roa
Signing time: Wed 26 Feb 2025 00:51:23 +0000
ROA not before: Wed 26 Feb 2025 00:00:20 +0000
ROA not after: Thu 19 Feb 2026 00:00:20 +0000
asID: 984
IP address blocks: 154.92.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90189 (0x1604d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:20 2025 GMT
Not After : Feb 19 00:00:20 2026 GMT
Subject: CN=67be658b-fae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:b6:af:c2:b5:f8:59:35:90:c3:e8:3b:ce:
7d:17:3c:93:c4:37:3f:df:3c:03:85:c3:89:ed:b6:
50:71:60:3b:88:7c:a9:f8:a0:a5:08:ef:ce:04:ab:
13:64:af:05:f4:83:87:40:5a:e7:89:b1:49:06:bd:
4b:ec:68:e4:6e:e6:92:47:00:b3:62:43:a2:e2:53:
9c:e6:3d:32:dd:77:d4:02:2d:ba:08:bd:4c:c1:b9:
17:4c:bf:1c:c8:04:58:83:f4:85:6e:b6:3e:9b:ea:
0f:f5:e2:8b:83:0a:93:9f:a4:4d:c9:1c:95:e5:8d:
51:95:aa:67:26:33:f9:68:33:28:20:9c:3f:24:f0:
e9:0c:74:4d:d7:65:60:00:41:c6:79:e8:29:d7:c9:
e4:0b:2a:4b:38:83:0a:75:4f:7b:61:63:f0:ab:61:
b3:fd:cc:b6:bb:36:b5:9c:9d:c9:87:b4:11:83:d8:
5e:67:ad:cd:26:de:80:4b:41:fd:cf:2e:fe:7c:e5:
8c:26:b2:0f:12:d3:7a:eb:16:25:0c:d7:9b:9e:a0:
4b:51:42:16:d5:f2:ba:5f:45:ca:98:0a:f2:e4:d0:
0a:39:04:cb:f1:b7:01:63:b4:8c:b8:a0:cf:9a:4c:
c8:e5:64:cb:65:92:9e:23:59:0f:44:22:05:be:40:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B5:55:82:33:75:63:AA:D2:C6:C9:26:DC:FE:06:84:42:81:72:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCF7C500F3DB11EF89FED47F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.228.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a4:a7:09:21:ab:07:ae:5d:da:44:64:68:01:8d:34:f7:1b:
dc:e5:a1:1c:38:03:95:d2:5c:ac:05:d3:d9:c0:2f:b6:cb:88:
b5:c3:e0:2a:0a:66:16:da:71:15:26:cb:94:f7:5c:40:0c:64:
dd:a5:98:60:6c:cf:26:35:09:bb:dc:97:ed:ae:af:40:ea:67:
e7:4c:7e:e8:a7:9a:9a:88:f4:df:99:32:b4:26:3f:a8:db:91:
1b:80:89:b0:16:87:f2:30:ab:4a:9e:00:84:af:d6:3f:7d:9d:
0d:da:36:63:fd:7d:c2:dd:98:cf:8e:ed:bf:01:23:77:d3:b4:
31:4f:40:9a:66:56:3c:31:46:26:a5:af:96:93:ad:db:5a:91:
86:3f:a9:7c:f4:ee:95:e2:f1:5d:fc:0d:1f:e8:36:38:a6:60:
cd:bd:cc:4e:72:47:58:5a:bb:41:2a:0e:7f:2e:11:87:5c:d8:
0b:52:dd:49:58:81:50:2b:fc:82:94:32:e7:7d:52:b7:2e:66:
5d:0d:66:fc:b4:58:82:9a:86:f8:18:fb:70:3f:51:d0:9d:d3:
4f:10:86:70:94:17:ab:18:2f:43:f1:3d:5f:16:ba:d8:07:49:
a2:0a:cc:56:c9:22:42:82:25:9d:e1:98:01:06:61:76:73:de:
58:ce:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:09 2025 by rpki-client