Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D907BBAAF43711EFB948118B762E951A.roa
File: D907BBAAF43711EFB948118B762E951A.roa (raw, json)
Hash identifier: xkV4uql4hReDvarCdb4ZR3mcgqWDJo23+Rqfztjs2Nw=
Subject key identifier: DF:E6:1D:B9:1B:26:2D:E3:A7:D8:1B:6F:25:70:21:BB:C4:ED:F0:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D907BBAAF43711EFB948118B762E951A.roa
Signing time: Wed 26 Feb 2025 11:50:17 +0000
ROA not before: Wed 26 Feb 2025 11:50:14 +0000
ROA not after: Thu 19 Feb 2026 11:50:14 +0000
asID: 984
IP address blocks: 154.207.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90822 (0x162c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:50:14 2025 GMT
Not After : Feb 19 11:50:14 2026 GMT
Subject: CN=67befff9-0357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:b7:77:fb:ee:ad:c4:03:dd:de:27:55:84:
52:e4:bb:eb:7f:ad:a3:f5:fd:71:47:60:f5:bf:50:
f7:cc:66:8c:cc:a2:90:1a:46:14:10:d9:8c:7f:91:
de:2c:b6:98:90:2a:c1:84:aa:90:ff:2c:1e:30:ab:
d8:3c:f6:44:9e:e7:27:23:1c:82:03:68:9f:49:da:
25:fa:ab:b7:66:5f:7a:fa:d8:b5:17:35:88:2f:1e:
a0:dc:6e:f3:94:2b:d1:e3:7c:14:cd:18:2b:cc:ca:
2a:62:7f:3a:cb:00:e8:a7:97:ed:40:28:d0:6a:08:
ea:b6:5e:43:54:a4:4f:19:3f:72:52:54:4c:48:70:
59:44:4e:98:68:18:a8:52:d9:e1:95:2a:70:bd:db:
aa:f7:24:a4:cb:df:9c:df:00:20:f4:f8:ad:98:24:
fe:4a:d6:43:a3:0b:ee:fa:11:04:10:d1:45:83:28:
19:b1:aa:6e:9c:ce:78:08:29:9f:e4:2a:17:62:16:
f4:bc:c4:55:38:d3:c0:bc:46:f6:18:10:fe:8a:92:
58:6a:4a:83:79:82:e0:c7:53:ab:de:0a:88:8a:26:
7e:01:e7:59:6c:e7:c0:4b:b3:3e:37:70:52:d3:72:
4a:96:af:95:c1:2b:4d:db:0d:8c:1f:c6:50:df:e1:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E6:1D:B9:1B:26:2D:E3:A7:D8:1B:6F:25:70:21:BB:C4:ED:F0:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D907BBAAF43711EFB948118B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.110.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:e2:74:39:bf:87:2c:b9:aa:1f:46:a4:fa:73:a6:0a:b8:06:
32:22:1f:76:33:a0:6d:d2:97:27:0e:2d:ed:f6:29:a8:de:8f:
e4:85:4a:aa:2a:af:06:4c:38:95:94:06:33:3c:3e:91:b8:1d:
79:37:ba:41:d5:cb:99:ec:e3:36:c2:ae:0d:c7:b9:e5:7d:68:
2a:5b:0c:f4:0d:06:18:f3:14:7a:a4:a8:67:68:d3:e2:e9:23:
21:0c:fc:df:a6:92:dd:3c:4a:07:63:e6:59:ab:a8:4c:d0:ac:
4b:8a:ed:29:e2:f7:f2:ac:1f:4b:64:e5:f9:97:e7:43:68:0e:
03:0b:44:9f:a6:44:72:1f:1c:09:7e:2c:77:e7:bd:c4:de:ca:
53:f2:80:88:53:37:52:05:63:1a:dd:bc:ac:52:63:bd:62:8a:
80:5e:84:93:d4:ee:2f:95:0a:a9:ed:f0:46:3b:74:f7:ca:6c:
f7:82:8f:47:1e:47:55:5d:8b:bd:9f:1e:31:2c:c8:bf:73:89:
f1:94:cf:9f:fe:bb:07:f8:57:29:40:e7:8c:ec:1f:78:9c:eb:
0e:d7:86:40:62:e0:0e:89:e0:f0:2c:fe:ea:0c:34:d2:7c:23:
85:8c:51:11:ce:41:cc:ad:34:5f:84:cd:8b:fc:51:9b:27:87:
03:ba:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:13 2025 by rpki-client