Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3BA53C2F43411EF93496676762E951A.roa
File: D3BA53C2F43411EF93496676762E951A.roa (raw, json)
Hash identifier: m9Mlqk8u9Uq9aeQhaeXJtId3hNsi18IdNSaXrYb3rb8=
Subject key identifier: 95:C5:DF:12:77:06:AF:27:C0:3F:3E:FC:76:CD:9C:B0:0F:37:F8:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016299
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3BA53C2F43411EF93496676762E951A.roa
Signing time: Wed 26 Feb 2025 11:28:40 +0000
ROA not before: Wed 26 Feb 2025 11:28:36 +0000
ROA not after: Fri 20 Feb 2026 11:28:36 +0000
asID: 984
IP address blocks: 154.199.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90777 (0x16299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:28:36 2025 GMT
Not After : Feb 20 11:28:36 2026 GMT
Subject: CN=67befae8-9f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:08:98:27:7a:81:15:42:0e:67:bf:d4:f9:
a0:87:3c:8a:7f:64:0d:f3:cc:39:b2:3d:20:5e:b0:
1c:30:e4:00:52:40:86:5d:e5:63:0b:16:f3:27:a8:
22:44:7d:19:22:cf:e4:de:32:c1:51:f4:0d:09:bf:
dc:9f:97:ca:4d:86:96:06:ae:8d:25:54:59:6f:8c:
ae:47:2a:e9:cf:45:96:a1:4f:e9:36:42:d2:66:3c:
a4:24:de:ce:4f:6d:01:43:29:48:ca:72:78:fc:99:
fa:49:ac:64:1f:9f:e5:c9:7f:68:19:2f:17:77:82:
95:4c:60:93:b8:92:10:c7:22:b8:d9:6e:25:74:48:
92:ce:8f:12:95:2d:a7:c7:fa:83:da:5e:df:fe:b8:
cd:f8:c1:c2:9c:ab:f9:48:b7:39:0f:9c:d2:d9:71:
6b:cf:3b:dc:8a:50:18:5f:5b:6e:7d:36:cb:9d:b0:
d3:45:76:e8:65:59:00:66:cf:f1:c9:e6:89:bb:8a:
77:b2:79:7a:63:26:23:5d:7e:46:c2:f8:6f:eb:82:
20:d6:87:5e:e5:dc:d1:09:3f:f0:6c:e2:d0:56:55:
89:f7:f6:b3:c2:a2:4c:83:7a:a8:fd:81:5f:ca:49:
3f:0e:09:d5:be:66:d0:03:e9:ba:2e:2e:3e:32:53:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C5:DF:12:77:06:AF:27:C0:3F:3E:FC:76:CD:9C:B0:0F:37:F8:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3BA53C2F43411EF93496676762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.133.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:e5:48:ce:77:55:0e:a8:fa:70:5e:78:30:7d:6d:f4:c6:fc:
f5:f4:5d:8f:f6:e3:f3:8f:87:ac:f3:14:72:1f:8b:ce:85:82:
aa:2d:57:6b:4a:a8:3d:2d:fb:0f:bf:a2:a8:67:2c:83:30:bf:
9a:64:2c:41:bb:b7:b0:db:c9:b5:b4:f9:4a:a0:e5:2b:f8:6c:
c1:da:ff:b9:df:18:a9:27:08:a1:30:f9:7b:d2:72:77:ad:eb:
8c:89:b5:4a:4e:af:9f:8a:77:49:88:0a:a5:8a:54:d0:41:04:
74:13:d5:f2:dd:b2:5d:c4:6c:ef:e1:4d:90:a4:b8:32:f6:f2:
9e:36:99:fd:8d:bc:06:f8:76:8d:95:e7:e9:45:44:1c:ec:64:
a7:e2:0c:c5:10:dc:4d:5e:da:43:6b:d1:73:c3:81:aa:71:06:
2a:be:c4:cd:b4:f7:ff:f2:2e:56:19:cf:5d:2a:33:01:b6:73:
c2:09:28:b5:99:bf:f6:8f:fb:95:d3:f7:c2:88:6f:c7:4e:9a:
08:43:25:ea:13:3c:5c:74:bd:8d:74:26:d5:5f:70:50:8b:30:
dc:75:02:7a:bd:52:e8:11:5f:c7:d0:e1:6c:db:3a:6e:0d:97:
4e:c3:81:3c:c2:0a:7c:a4:5e:69:93:45:69:38:e7:e3:e1:41:
a2:e9:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:55:14 2025 by rpki-client