Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2343946F3FB11EFAD1B2E71762E951A.roa
File: F2343946F3FB11EFAD1B2E71762E951A.roa (raw, json)
Hash identifier: qmnBELL6Y6D+JYweI2Q15cXLg9fAaJZYSAqyQsgViLQ=
Subject key identifier: 34:58:34:39:EE:05:D7:1B:9B:FE:44:EE:C2:77:40:88:6D:6A:13:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2343946F3FB11EFAD1B2E71762E951A.roa
Signing time: Wed 26 Feb 2025 04:41:30 +0000
ROA not before: Wed 26 Feb 2025 04:41:26 +0000
ROA not after: Thu 19 Feb 2026 04:41:26 +0000
asID: 984
IP address blocks: 154.203.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90335 (0x160df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 04:41:26 2025 GMT
Not After : Feb 19 04:41:26 2026 GMT
Subject: CN=67be9b7a-e102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:e3:79:49:81:86:65:88:c6:ab:75:57:4f:
d9:f4:48:40:3e:0a:fc:1d:0c:9b:ee:ff:f3:c3:0d:
15:65:3f:32:6c:30:7f:07:c5:81:d7:45:9c:b2:80:
f4:40:16:a1:86:2e:f5:7c:cb:76:47:77:29:b5:bf:
f6:ac:39:15:ba:5c:36:7b:53:22:68:2d:24:b7:8c:
65:ef:f4:a0:25:b3:44:1e:6a:ef:7f:de:60:7e:48:
3a:a3:1f:c5:48:a1:d5:02:98:95:3a:f4:32:ee:c4:
8d:e5:c3:b4:6f:45:0c:c4:5e:ff:c5:be:9d:22:0c:
af:d9:63:30:d0:fa:f3:78:f3:e4:2e:b6:4d:71:f8:
f9:13:67:dd:a1:f0:39:18:9e:8f:d7:38:75:c3:95:
c9:d5:4a:d4:dd:d4:cf:4d:73:62:d6:4a:69:c5:76:
ae:24:13:2d:c2:8b:73:32:ac:0a:82:06:e1:8c:ed:
4f:97:2e:63:98:09:4b:18:f5:48:48:86:03:e8:cc:
98:1f:67:fb:c2:f3:42:23:5a:97:2a:85:c1:93:f5:
58:ab:99:dc:aa:b2:f1:b7:06:69:35:c2:8f:c7:85:
60:e4:cc:33:ff:74:3c:7f:4d:2d:2c:9a:05:60:5e:
0a:a1:dc:b9:e7:09:4d:5a:72:54:ff:02:a9:a1:5c:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:58:34:39:EE:05:D7:1B:9B:FE:44:EE:C2:77:40:88:6D:6A:13:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2343946F3FB11EFAD1B2E71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.211.0/24
Signature Algorithm: sha256WithRSAEncryption
71:fb:10:f0:ef:df:6d:9d:b9:8e:59:96:44:9c:1d:0d:ea:ed:
5e:20:8e:0b:86:e8:a7:8a:36:9d:54:fd:7f:41:cf:42:cf:b5:
e4:84:97:93:19:ad:c1:e9:74:fa:fe:55:0e:bd:d6:a1:b8:c0:
fe:29:d4:ba:15:f5:b0:2b:37:fb:50:6c:32:49:c7:5d:69:93:
54:80:0c:49:d2:21:e4:f1:e2:af:7b:8a:23:c9:ae:01:1d:1d:
8a:1e:19:9c:2f:fa:9f:b6:a5:81:5b:de:c3:f6:5c:69:8d:7a:
4a:dc:e6:ab:91:2c:52:ae:48:1c:9d:ea:19:f6:ba:ca:76:a4:
51:da:6a:7b:92:1a:34:f7:98:ab:63:73:3b:bd:7a:ea:b9:c5:
17:12:6b:b4:b6:08:a9:01:dc:48:94:58:b4:ec:6e:af:72:6a:
5a:6c:86:0f:cf:74:ee:15:1a:d0:ad:cf:85:26:76:1b:4c:e8:
0e:1d:13:8d:72:c7:af:1e:92:92:34:6c:1a:05:54:4a:47:1b:
43:05:d1:d8:4a:2c:cc:96:e3:78:27:f7:47:77:a3:69:6c:0a:
bc:9a:14:3a:9d:d0:37:fe:b1:95:52:ec:d8:26:7a:1e:0b:58:
1b:ae:8d:d2:58:d9:57:6d:3c:99:ce:f8:25:6b:a9:af:5d:63:
93:a3:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:48:43 2025 by rpki-client