Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D38B71D6F42711EF8EF0639A762E951A.roa
File: D38B71D6F42711EF8EF0639A762E951A.roa (raw, json)
Hash identifier: x245qloHZlBqrU4+EUIhwG4LPOmYSS6BVJeEA8wq8O8=
Subject key identifier: 12:F9:1E:20:F1:66:96:8F:85:1A:63:FF:ED:1F:90:09:B0:44:9C:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01620E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D38B71D6F42711EF8EF0639A762E951A.roa
Signing time: Wed 26 Feb 2025 09:55:36 +0000
ROA not before: Wed 26 Feb 2025 09:55:32 +0000
ROA not after: Thu 19 Feb 2026 09:55:32 +0000
asID: 984
IP address blocks: 154.206.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90638 (0x1620e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:55:32 2025 GMT
Not After : Feb 19 09:55:32 2026 GMT
Subject: CN=67bee518-a8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:62:0f:99:8c:60:e4:3b:b7:7c:bd:01:ed:
94:74:3a:fd:2e:f0:f3:f1:e6:dc:c2:8d:4c:89:ca:
ce:05:81:bd:ff:5a:10:c6:6c:9b:26:f6:38:c3:7c:
fb:45:de:9b:b7:54:69:c5:65:85:6c:48:eb:99:e6:
b5:e8:3b:c5:49:ab:58:2d:fb:a6:2c:2a:3f:35:58:
d3:02:4b:32:71:96:a2:12:36:12:4e:59:65:fe:ba:
7b:cc:e5:dd:4f:b8:3b:69:70:c3:bf:a4:96:b1:e1:
8c:2a:8f:4f:07:4e:ee:24:93:28:68:9f:ae:ff:f3:
d4:54:c9:6a:83:6e:81:52:d6:0d:05:32:e8:0a:a4:
f9:16:95:ce:83:c3:b9:c2:05:58:bf:4b:c2:04:d8:
0e:09:b6:74:aa:0d:b0:53:3e:dc:da:a0:01:9e:a2:
50:82:de:6b:39:70:f1:7e:d2:89:5e:10:c0:fc:75:
9a:74:28:2f:d9:4c:ca:98:83:e3:bc:01:b4:c5:90:
5d:b9:79:d3:a3:c8:79:51:cb:ee:5b:be:c6:a0:85:
37:4b:27:97:0e:43:1a:46:79:ec:94:37:c9:c9:82:
ee:ef:10:0f:60:8d:d8:e8:6c:f4:3c:c0:65:2e:a7:
c8:8c:ca:31:6c:94:a3:3b:57:7a:fa:bb:7a:c4:d7:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:1E:20:F1:66:96:8F:85:1A:63:FF:ED:1F:90:09:B0:44:9C:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D38B71D6F42711EF8EF0639A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.254.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1b:1c:a6:7f:89:ea:d1:96:aa:c3:c7:1f:8a:8d:94:33:ab:
d5:d6:d6:24:fe:85:b1:83:c3:9c:06:24:a8:1b:73:14:7f:26:
16:6b:97:f8:b3:51:26:87:22:2f:6a:14:ac:bd:88:ae:3c:c6:
e9:77:e1:f5:f3:ac:f8:74:82:50:39:01:1b:04:19:9a:2c:8a:
77:b7:2f:ec:75:70:8a:cd:a8:b6:6d:f4:79:92:ac:7d:42:4e:
60:dc:2a:30:0a:47:eb:d1:f5:35:3e:9b:a6:d8:f0:d9:a0:28:
a2:57:f8:46:1c:fb:4d:f3:e3:26:01:bb:12:c9:ae:44:62:95:
f8:7c:f5:c6:90:3e:83:80:cd:14:94:a7:b4:95:07:46:cc:08:
7b:61:dc:ea:97:ae:4f:a4:04:23:6d:d6:5c:ca:53:72:f0:ce:
c4:53:e0:3d:1a:71:08:4a:8e:63:71:e3:b4:04:2b:db:90:bf:
32:02:e1:73:b8:ec:6d:11:70:d8:85:22:40:52:87:9a:db:c5:
f5:ac:bc:54:4e:30:07:87:87:9f:37:b2:f6:b9:12:78:28:fe:
aa:f2:34:54:06:26:6c:99:6e:ef:71:e5:f8:55:64:64:0f:71:
ba:5b:e9:6c:b0:67:10:25:6d:23:20:bb:c2:24:a1:44:6d:98:
e3:5c:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:38 2025 by rpki-client