Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7FD3342F41E11EF8472515D762E951A.roa
File: E7FD3342F41E11EF8472515D762E951A.roa (raw, json)
Hash identifier: 6XBtOFUPLNqSLLkjP3k4irb8KcJmj5aLaoVnwEOKZAs=
Subject key identifier: E1:16:40:12:F8:38:CB:9E:64:5E:53:B4:35:5E:C1:FB:5A:48:43:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01617D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7FD3342F41E11EF8472515D762E951A.roa
Signing time: Wed 26 Feb 2025 08:51:45 +0000
ROA not before: Wed 26 Feb 2025 08:51:41 +0000
ROA not after: Thu 19 Feb 2026 08:51:41 +0000
asID: 328608
IP address blocks: 154.200.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90493 (0x1617d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:51:41 2025 GMT
Not After : Feb 19 08:51:41 2026 GMT
Subject: CN=67bed621-c760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:ce:fc:33:6b:a3:9e:41:43:2c:9e:af:56:
dc:86:1b:ba:48:ff:ff:45:28:09:7c:e7:df:67:3b:
bf:0c:f8:07:28:ed:43:5a:f0:12:c5:5e:c6:e5:16:
61:e0:45:31:f9:56:b3:13:df:a7:49:b4:a0:27:cd:
41:47:e7:f2:57:31:b1:99:db:e2:7e:70:ae:41:59:
27:46:96:ea:fe:21:3b:51:be:41:44:8e:47:7b:6a:
a4:84:c0:d7:1b:4f:36:3a:6c:44:d2:ac:95:13:9b:
10:9f:c8:bf:8c:5b:78:13:5a:18:06:a4:3e:41:14:
b9:74:53:ae:93:c7:df:62:2a:8b:0d:06:13:61:ee:
49:e6:6f:0f:98:81:30:07:7b:98:4d:68:93:97:3e:
7f:a0:e0:91:c0:38:a5:1b:46:92:04:ba:f7:a7:5e:
16:8e:0d:15:53:90:8d:a4:08:af:73:89:59:85:ef:
65:aa:1c:c9:9f:22:e1:b4:f5:21:ad:54:47:50:c4:
42:61:fe:73:af:b3:5d:1a:5b:2d:2c:2a:5d:ac:c7:
73:c3:59:cd:53:35:5d:26:5d:14:be:14:e7:0e:df:
43:2b:da:55:6a:9e:3a:25:ff:f3:55:56:40:36:d8:
05:0a:2b:c4:3c:ac:75:7a:49:2a:a9:1e:4f:b0:fa:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:16:40:12:F8:38:CB:9E:64:5E:53:B4:35:5E:C1:FB:5A:48:43:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7FD3342F41E11EF8472515D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.200.0/24
Signature Algorithm: sha256WithRSAEncryption
af:8d:13:41:75:4d:17:aa:6e:71:64:e1:e6:6c:de:1e:57:a8:
ba:ae:5f:67:dc:31:78:eb:ec:94:38:3f:92:22:75:33:d6:51:
13:87:cc:48:4a:b1:9d:8c:11:ff:93:5e:46:d3:e0:27:c9:f8:
3f:32:e2:fa:20:77:77:72:cc:6a:1f:c1:05:f9:ad:79:2d:74:
89:03:6a:70:70:09:86:27:49:b5:df:cb:11:f0:7a:d5:13:a5:
82:7c:e9:45:02:5f:a3:09:00:68:05:b2:a2:a8:3c:4d:c2:8c:
62:9a:97:54:11:0a:49:66:6b:3a:67:8b:7c:50:71:e7:b0:91:
dd:ba:c5:3b:2c:d0:b4:07:9c:5d:2c:40:9f:3b:2d:47:f5:97:
5f:3a:ff:90:cd:f4:b8:ae:df:0f:52:29:89:66:b7:32:d0:b2:
fa:cf:a7:cb:af:9d:d1:c2:52:58:9d:65:75:c9:58:1b:94:92:
38:ff:9f:e4:ff:60:3f:b3:b5:57:16:97:9c:51:04:32:ce:cd:
fb:4f:41:40:e8:be:d6:f6:f6:c6:6e:b8:a5:27:44:de:d7:fc:
a9:a1:e7:89:c9:aa:c1:e7:71:a1:c8:11:c5:13:0b:74:c0:21:
1d:27:b4:7e:5e:ac:72:f0:47:48:9d:e1:1f:30:80:09:33:02:
f5:e1:34:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:32:21 2025 by rpki-client