Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8290F28F43511EFAD37D77C762E951A.roa
File: E8290F28F43511EFAD37D77C762E951A.roa (raw, json)
Hash identifier: ZVnC4QrM233sT0tkOOsWaNGL8KD18OQK2ef1kvLRQJY=
Subject key identifier: 8A:55:03:FB:04:D3:33:51:2E:FA:D9:AA:AE:31:2D:A1:3F:CA:0D:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8290F28F43511EFAD37D77C762E951A.roa
Signing time: Wed 26 Feb 2025 11:36:24 +0000
ROA not before: Wed 26 Feb 2025 11:36:20 +0000
ROA not after: Fri 20 Feb 2026 11:36:20 +0000
asID: 984
IP address blocks: 154.199.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90790 (0x162a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:36:20 2025 GMT
Not After : Feb 20 11:36:20 2026 GMT
Subject: CN=67befcb8-f491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:43:51:83:41:6f:f1:cf:a9:4a:04:65:1e:8e:
72:0e:d2:77:37:47:82:c0:8a:0d:cd:62:a4:23:cc:
a3:02:bc:f7:91:e1:28:d6:4f:68:7f:93:be:b4:bd:
6b:98:b0:16:d3:4d:c7:b2:da:4e:50:d1:1b:ad:7e:
df:84:6e:a6:01:e4:42:d9:2f:f8:30:58:de:c5:09:
a5:03:98:84:ce:d2:52:df:af:89:b2:07:9e:39:27:
06:67:0d:63:67:08:f4:54:91:60:6e:84:c7:c8:49:
b1:24:ea:92:be:dd:bd:2d:2f:b0:74:95:a4:f7:f0:
9b:da:74:d6:8c:7d:3a:52:66:6c:f7:1f:86:46:42:
39:cc:f8:ff:86:86:26:9b:17:b5:e8:27:c3:c2:20:
f6:9d:c6:cd:4c:5a:39:b2:77:ab:42:17:20:be:40:
a3:6b:79:03:a8:ec:bd:38:78:4a:c2:30:40:74:8f:
80:d2:08:66:0d:ed:be:c4:6f:92:81:40:e1:94:03:
d6:22:e6:e2:2a:99:4a:4d:da:5b:09:5c:d2:b5:d8:
51:8c:21:d9:50:0e:b8:30:3c:aa:90:07:35:fb:c2:
d5:d7:34:d0:a6:07:1d:6b:55:84:13:79:2e:89:1e:
66:c0:ca:e1:0d:ea:3d:5b:eb:59:5e:ac:ee:5a:7d:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:03:FB:04:D3:33:51:2E:FA:D9:AA:AE:31:2D:A1:3F:CA:0D:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8290F28F43511EFAD37D77C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:3a:e1:69:21:81:ca:24:eb:a5:dc:1b:13:60:c5:6d:6b:8d:
fd:b8:1b:e1:7e:66:d2:f8:2a:88:3c:48:75:a4:a7:92:50:11:
5f:c7:04:2b:d3:e5:d8:7a:24:03:ba:1f:e1:88:b6:97:d0:1f:
3c:76:4b:f8:3a:27:b7:05:82:bc:89:95:49:77:69:13:21:37:
62:d9:c3:2a:92:c9:9c:0b:f3:f0:c2:ce:3a:38:9f:07:17:44:
46:e5:e1:78:a5:f6:e4:84:0f:78:35:5e:9a:d2:96:69:15:37:
bf:2d:f0:9a:43:fc:78:57:c7:eb:93:fb:20:a8:d9:f1:06:df:
a0:7e:a3:a9:77:07:39:73:6b:0f:44:7b:50:c1:a3:87:e6:3a:
bd:04:fd:4b:d2:47:a0:ea:29:8a:fb:b0:26:57:80:f6:47:d2:
b8:5b:46:66:82:d9:ae:40:5a:02:d1:a4:86:fa:f0:51:01:3b:
06:36:1b:da:f3:de:49:f1:11:8e:c6:df:97:50:3b:99:3c:26:
bc:b1:0c:ee:17:a0:ea:bf:ff:03:35:db:93:a7:21:15:0c:8b:
5d:7a:f4:aa:0f:72:bd:01:89:79:7a:be:da:ed:07:cc:36:0c:
98:2d:a2:b0:74:1d:c0:4a:b3:0b:0c:0a:b9:b2:86:6a:0c:ed:
be:41:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:12:37 2025 by rpki-client