Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3257722F44011EFAE25694B762E951A.roa
File: E3257722F44011EFAE25694B762E951A.roa (raw, json)
Hash identifier: dI28ZTVMMdWmPqgi0hiNk9YY49MCIi7GA7QwYyL7eFU=
Subject key identifier: 0C:7B:51:EE:5B:C9:87:F3:A6:0C:49:9B:4C:28:08:FA:DF:FC:1B:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016360
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3257722F44011EFAE25694B762E951A.roa
Signing time: Wed 26 Feb 2025 12:55:00 +0000
ROA not before: Wed 26 Feb 2025 12:54:56 +0000
ROA not after: Thu 19 Feb 2026 12:54:56 +0000
asID: 984
IP address blocks: 154.208.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90976 (0x16360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:54:56 2025 GMT
Not After : Feb 19 12:54:56 2026 GMT
Subject: CN=67bf0f24-1110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:f7:3b:40:0e:c3:5b:06:2e:54:7f:7b:3f:
76:d5:a1:bd:bf:62:07:72:3c:6d:58:a9:23:92:f6:
18:01:a6:9d:07:0b:26:02:c2:32:ab:9d:ee:5a:0f:
76:22:0d:f4:bf:a1:82:a3:63:4d:cb:39:86:8f:d5:
9d:eb:4b:40:a4:60:8c:6b:d2:91:1e:4d:e4:0c:c3:
85:94:c1:94:20:e3:15:7d:da:8f:80:3a:e5:4a:41:
fc:06:60:a2:04:3e:cb:9a:1f:f0:e6:71:ab:19:7e:
d6:9d:31:38:6c:b1:42:b7:8b:aa:1e:57:53:72:42:
45:87:31:9c:bb:63:38:bc:bb:25:f1:9f:c7:11:40:
22:cc:72:1a:40:ea:65:6a:39:fe:27:f0:f6:75:2f:
ed:17:23:06:28:cb:16:74:ee:fa:5e:3a:44:cc:98:
43:c9:e9:d1:bd:a6:e1:a3:c4:cf:a9:f6:28:cf:0b:
47:45:43:25:09:be:6e:c1:09:b0:a5:7e:1d:c5:b5:
6d:ec:1b:36:c1:0f:9f:b5:e2:84:5d:11:40:cb:6d:
a3:ed:de:6e:48:c8:f7:81:30:2a:0d:e2:eb:c6:fa:
e5:eb:6d:f5:45:51:c8:22:ff:31:c4:6e:96:95:25:
7d:15:ed:77:3d:07:c7:8a:34:a4:5e:7e:94:83:bf:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:51:EE:5B:C9:87:F3:A6:0C:49:9B:4C:28:08:FA:DF:FC:1B:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3257722F44011EFAE25694B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:24:51:07:7a:75:c9:16:9b:19:b1:40:dd:e1:05:39:70:37:
88:73:f1:b5:43:ce:86:c8:3b:e1:60:72:35:1d:9a:a8:9b:d0:
5c:91:e4:a9:4d:9f:95:73:26:3e:31:84:eb:54:2c:b8:4b:ac:
df:2f:98:ce:04:ce:10:55:7b:4d:9c:d6:c4:3c:31:eb:4c:56:
da:b2:26:78:34:82:f0:78:e7:10:05:e4:ff:25:4f:00:ca:dc:
8a:f7:36:fa:49:f5:11:c2:89:f6:d2:34:d5:fa:d4:16:14:49:
89:aa:d0:15:50:c3:42:f6:5e:72:cd:12:41:56:70:f3:a5:8d:
ed:af:10:33:0c:2b:a2:8a:72:b6:59:6e:fa:41:e6:3b:8b:6d:
64:2c:14:1b:85:20:c7:55:97:05:63:51:fa:dc:61:dc:a2:8c:
d7:74:e7:72:a5:3a:a5:1f:55:fd:bc:3b:c8:fa:a7:9c:c4:24:
dc:83:69:48:94:fb:d3:4c:19:3a:27:da:f2:c8:43:d7:44:79:
2f:fa:dd:28:c2:08:90:3c:5d:a2:27:fc:6b:cd:68:55:e6:10:
09:9a:b5:ae:70:5e:c9:3c:13:60:1a:d7:bc:7b:4d:f8:4a:79:
f5:c4:02:27:2b:03:cf:4e:b2:fb:bb:a1:8a:1e:54:5d:62:96:
ea:2a:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:03:35 2025 by rpki-client