Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC3F277AF3F711EF9418CE57762E951A.roa
File: EC3F277AF3F711EF9418CE57762E951A.roa (raw, json)
Hash identifier: QEY9Yk5UhdqKNjq2b3x7vy3wwc0EAEK/i6MHTvcchDk=
Subject key identifier: 33:6C:16:4B:B1:77:5D:5B:BD:03:15:04:6E:1B:E1:EA:5F:7D:DA:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC3F277AF3F711EF9418CE57762E951A.roa
Signing time: Wed 26 Feb 2025 04:12:42 +0000
ROA not before: Wed 26 Feb 2025 04:12:37 +0000
ROA not after: Thu 19 Feb 2026 04:12:37 +0000
asID: 984
IP address blocks: 154.203.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90313 (0x160c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 04:12:37 2025 GMT
Not After : Feb 19 04:12:37 2026 GMT
Subject: CN=67be94ba-b6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:b3:9f:86:00:9c:c4:87:4b:52:68:47:42:
51:f3:ac:a4:0c:e4:96:ee:c2:92:7b:df:12:7b:b6:
98:6a:57:9a:46:9a:41:5b:b7:7b:84:4d:98:41:36:
33:e9:2e:77:c5:3e:bd:88:2b:06:a8:cb:24:ff:36:
b1:c2:0f:d0:19:8a:87:14:04:e0:41:16:dc:95:8c:
fe:8e:70:e5:f3:f3:8e:fd:83:6f:79:fb:63:f2:86:
82:61:4d:7d:9e:6e:8f:08:37:ee:ef:c3:83:dc:6c:
9d:1c:b3:96:14:ff:0c:10:e3:2d:09:45:15:14:aa:
7e:39:c9:8b:e3:0a:71:19:15:1b:2a:c5:f5:c1:97:
48:45:79:42:c1:64:f4:cf:1a:33:e0:c1:a5:7d:dc:
9d:38:ec:c0:80:30:fc:32:40:c3:63:86:68:42:14:
a0:7b:8e:18:80:f0:6e:a2:07:71:9a:25:53:ac:a1:
b5:2b:60:9e:0c:72:75:40:92:77:68:17:17:b0:81:
1c:60:54:94:0a:08:95:f6:38:48:a6:fa:e2:24:03:
d8:f4:ba:18:40:06:d7:0f:55:ca:17:b3:98:26:e9:
1f:68:53:7f:01:ac:a5:70:85:4f:6f:14:d3:22:ee:
d0:1a:6c:4c:9c:a1:76:ee:18:ce:8b:4d:5a:d8:05:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6C:16:4B:B1:77:5D:5B:BD:03:15:04:6E:1B:E1:EA:5F:7D:DA:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC3F277AF3F711EF9418CE57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.124.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:92:30:64:29:64:53:58:42:2c:8a:d9:d7:4d:3b:9f:a5:3c:
91:b3:d2:58:64:dc:b4:76:2d:f1:16:4e:3b:a0:5e:fb:1e:47:
e0:cc:af:f1:b6:5e:f5:ad:3c:f0:3e:ac:21:ee:04:57:4e:83:
19:ba:d3:0b:0b:02:3b:63:98:b8:56:93:14:bd:41:a1:1f:be:
29:54:5f:47:1b:32:40:ec:65:26:1c:6a:72:3b:52:25:42:b3:
c2:bd:b8:a8:40:ec:db:b0:47:f1:68:c7:f6:37:a7:93:32:18:
a3:72:51:23:86:63:db:09:fb:2d:10:b6:ed:6c:5d:0f:45:16:
cd:96:2d:25:25:6d:73:32:9a:b2:70:b8:bf:e7:c8:8c:86:d3:
1a:78:97:40:bc:2a:7b:f0:05:9f:08:f1:b6:1d:a1:87:c7:6b:
c2:24:00:c6:f8:b8:b2:2b:1f:06:ca:bd:f4:5f:9c:1a:f4:71:
01:24:10:a1:ef:6d:2f:57:57:d1:74:cd:3f:62:af:24:4f:a8:
49:2b:c6:81:1b:c9:ef:8b:b7:5f:e8:1f:74:19:87:b2:dc:d1:
9c:cf:75:cb:ad:52:b1:63:cf:ab:13:b7:4b:4e:28:86:76:0c:
6f:b5:2e:d3:1c:ac:98:22:2a:8a:f0:49:20:02:a4:ca:32:c4:
29:10:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:11 2025 by rpki-client