Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB201FEF43211EF8353A468762E951A.roa
File: EEB201FEF43211EF8353A468762E951A.roa (raw, json)
Hash identifier: Xj3yVDC04iwtCnGWZS3qRFzXwQ5oTeXB/ZEk9/mF84E=
Subject key identifier: 87:D9:1F:9D:C3:FC:A9:B6:E4:6C:C4:CB:5C:8F:0D:1A:C1:ED:0B:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016281
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB201FEF43211EF8353A468762E951A.roa
Signing time: Wed 26 Feb 2025 11:15:06 +0000
ROA not before: Wed 26 Feb 2025 11:15:02 +0000
ROA not after: Fri 20 Feb 2026 11:15:02 +0000
asID: 984
IP address blocks: 154.199.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90753 (0x16281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:15:02 2025 GMT
Not After : Feb 20 11:15:02 2026 GMT
Subject: CN=67bef7ba-d189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:97:1f:3b:6a:a6:a9:e5:99:ec:0b:f9:ad:
ea:2c:f7:70:fd:1e:90:09:80:e8:16:df:6b:d6:44:
90:ba:57:b4:59:63:42:7f:5d:7b:e6:aa:28:20:39:
89:42:99:09:26:ec:33:96:59:6a:c1:54:4b:e0:63:
77:fe:9c:98:fb:5d:97:5f:55:f3:9f:dc:62:4a:d2:
af:2e:95:71:56:ce:be:4c:53:50:c8:d2:d6:44:0a:
9f:91:fd:1c:4b:2e:e2:94:19:db:fd:e0:7d:24:6e:
b8:3d:24:23:b5:7a:88:1e:7b:a3:c1:c8:33:d2:9d:
1b:25:35:ab:02:92:5a:05:38:a7:df:c1:53:cd:62:
2b:91:14:da:57:bd:f0:3c:10:58:36:65:1a:bf:7c:
a8:fb:db:e7:a6:59:af:a3:4f:be:a2:fb:29:30:f2:
2c:1f:53:ff:69:68:10:48:cc:32:b3:d7:0c:5a:a1:
0e:81:87:a8:80:9c:5f:ce:d4:54:2f:a7:f7:ed:57:
a9:0f:03:48:04:90:e4:a5:34:f8:37:0a:0b:1c:b9:
aa:78:51:fd:dc:1f:16:39:27:97:07:ca:27:c8:66:
c4:66:5a:cb:9d:70:9f:ed:8c:cf:26:78:16:5e:b0:
65:e2:34:0a:34:fa:8e:02:41:3f:d2:1f:86:71:e5:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:1F:9D:C3:FC:A9:B6:E4:6C:C4:CB:5C:8F:0D:1A:C1:ED:0B:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB201FEF43211EF8353A468762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.22.0/24
Signature Algorithm: sha256WithRSAEncryption
13:bf:85:6d:59:7b:20:60:c2:0b:24:d8:64:f7:61:c5:ce:66:
6f:36:9f:b5:57:da:6e:42:a6:3b:ca:42:54:10:b1:67:bf:7c:
27:17:53:cf:e1:6b:97:f0:19:a2:00:2e:c8:f8:90:e4:5e:52:
81:09:6c:43:b6:e6:f7:4d:3d:b1:d9:ab:cd:e2:8a:fd:ee:af:
a1:df:33:8d:97:47:42:91:e7:26:32:70:75:b5:52:b6:fa:2f:
ef:33:5c:a7:8f:48:3e:35:a2:7a:c1:d7:cb:7a:8e:42:e9:80:
c0:7b:41:66:7a:9a:59:e0:0d:8e:bc:47:48:36:f9:b1:50:54:
15:b9:cd:36:7f:34:07:e7:b1:4e:97:ac:7e:89:fd:17:0e:42:
02:0b:d7:2f:08:55:55:69:b6:93:77:9b:9b:ed:bb:be:b6:b3:
04:ad:5c:56:ab:ad:cb:97:a1:63:55:c9:e6:72:41:7b:fc:93:
62:83:33:8e:63:ca:16:fa:a3:fd:7b:0f:f2:cd:84:4a:e4:44:
ab:b8:3f:7e:20:c5:d1:ae:27:7f:0e:82:24:3c:35:2c:88:4a:
1c:65:49:98:a6:1b:49:22:b3:6e:7a:7e:b5:8e:bf:3e:d5:76:
71:0a:8f:5d:b8:b1:06:72:7e:0f:68:0a:f5:12:b8:f1:9c:a2:
8f:99:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:31:00 2025 by rpki-client