Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDA16704CDBF11EFB0365578762E951A.roa
File: DDA16704CDBF11EFB0365578762E951A.roa (raw, json)
Hash identifier: hUcOI3LjCtB1MzP7QbO1tUOLnDHutFLqQnaMlv+dIg0=
Subject key identifier: AB:D9:20:59:6C:86:C4:9C:FE:EA:FA:F8:96:05:85:C4:62:42:FB:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013708
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDA16704CDBF11EFB0365578762E951A.roa
Signing time: Wed 08 Jan 2025 12:55:41 +0000
ROA not before: Wed 08 Jan 2025 12:55:38 +0000
ROA not after: Tue 16 Dec 2025 12:55:38 +0000
asID: 984
IP address blocks: 154.200.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79624 (0x13708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:55:38 2025 GMT
Not After : Dec 16 12:55:38 2025 GMT
Subject: CN=677e75cd-f0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:7f:5f:96:83:2d:32:b5:b7:c7:aa:a0:41:
59:99:e1:69:00:fc:c3:48:48:ff:9f:60:bb:9f:8d:
5b:70:3d:bb:6a:fa:76:ab:68:59:59:67:03:3f:47:
98:dc:9f:f2:8a:e3:f2:38:a2:3a:f9:a3:72:46:f9:
7a:f2:ba:18:cc:21:69:2e:e4:a8:80:d8:1e:24:52:
0c:06:9a:af:dd:e3:b4:d1:9a:59:8d:42:57:f3:e6:
b1:c0:42:58:12:6a:db:26:c1:5d:7b:43:7b:82:60:
83:99:96:d9:51:9b:93:f5:de:4a:46:46:74:3f:4f:
bd:bf:dd:f8:03:f4:c6:7f:dc:6d:3e:97:11:0e:a2:
de:5e:2c:32:fb:61:0a:e1:af:86:ce:be:f4:fc:14:
22:32:19:02:78:a2:1b:cc:cb:f8:6e:91:9b:a0:e0:
86:97:91:4a:df:ca:f1:d5:5f:f5:c8:ad:90:96:d8:
37:b2:54:f9:d0:b4:1d:1c:bc:41:cb:66:f5:6a:98:
10:66:68:c6:b0:de:f9:60:57:da:6d:e2:aa:99:5f:
fa:10:09:73:6a:81:e9:f6:5a:3a:98:6c:96:4d:a3:
63:f6:a1:72:64:14:fe:d2:93:da:8d:19:2a:36:a3:
da:d8:59:cc:11:b0:98:88:60:95:95:8e:ef:78:8d:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D9:20:59:6C:86:C4:9C:FE:EA:FA:F8:96:05:85:C4:62:42:FB:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDA16704CDBF11EFB0365578762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.226.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2b:a3:ba:88:d4:de:d0:0c:9b:5e:1b:d3:af:df:71:a3:58:
ca:9e:47:de:3c:6d:01:63:dc:fb:3f:b5:27:92:e9:2f:d2:f4:
30:3e:c3:6c:dc:ef:51:98:b6:ed:3d:e7:d2:28:82:7b:ab:62:
bd:78:a9:ff:fd:4e:92:1a:fe:ad:ed:35:10:c3:f2:0e:c7:23:
3a:38:fb:a4:0d:ce:dc:ff:76:f8:01:51:13:a7:d4:3a:e9:9a:
a5:e6:0e:56:b3:5c:e4:25:17:09:e2:a4:53:17:9a:40:c3:cc:
53:84:de:80:bd:e5:9f:db:f4:22:bd:d1:16:68:e1:a4:37:31:
ce:93:63:c9:ae:0b:59:28:63:bd:12:9a:33:5b:13:90:f5:02:
3f:46:4b:5c:95:b8:2f:c2:be:ef:bd:fc:21:2a:e7:68:5d:cd:
24:7e:a8:fc:8b:2b:dd:12:42:ff:89:be:36:b8:12:0b:23:ca:
e2:8c:b0:fe:ce:2b:19:dd:b6:6b:f4:bc:90:eb:61:61:f2:16:
9a:ba:0b:1a:7f:cd:97:33:ab:11:91:b9:fd:69:2b:61:fe:db:
4d:be:ed:95:1e:10:81:5e:a3:27:6e:43:1e:9a:3f:ad:f7:06:
71:ee:7b:8a:c4:77:3d:52:99:a9:b0:f5:5a:54:0d:b4:b0:11:
6e:83:43:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:45:50 2025 by rpki-client