Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3757196F3EF11EF9B9C6E9C762E951A.roa
File: F3757196F3EF11EF9B9C6E9C762E951A.roa (raw, json)
Hash identifier: sUgOcLO5jHQLP0Rae7AP2PiJwIxU1azwpr0lwRLCtRc=
Subject key identifier: 2A:A4:5D:63:42:D6:99:2E:80:69:B1:D0:51:45:F3:7F:87:D5:B1:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01609D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3757196F3EF11EF9B9C6E9C762E951A.roa
Signing time: Wed 26 Feb 2025 03:15:38 +0000
ROA not before: Wed 26 Feb 2025 03:15:34 +0000
ROA not after: Thu 19 Feb 2026 03:15:34 +0000
asID: 984
IP address blocks: 154.203.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90269 (0x1609d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:15:34 2025 GMT
Not After : Feb 19 03:15:34 2026 GMT
Subject: CN=67be875a-f151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:04:8e:53:05:71:da:da:ff:79:c2:15:c0:
05:ae:1e:30:f1:f1:8d:2d:ab:e6:b8:8b:4c:bb:a3:
36:b4:c2:cc:30:8a:64:da:e3:e8:30:5e:7c:3b:af:
49:5a:34:30:30:d9:43:1d:b4:4b:64:65:4e:80:c7:
cd:2b:f7:01:a3:32:56:6a:ef:90:88:73:74:32:1f:
1d:73:2b:8e:44:d3:bd:a9:df:aa:b0:33:71:53:9f:
fe:5c:2a:c3:22:88:60:c4:c1:a1:f1:bc:1d:5e:9a:
3c:db:32:fc:60:6b:0b:31:f4:d8:4f:aa:86:32:98:
35:dd:56:5f:a6:c9:a3:17:66:4a:1a:58:c4:bc:19:
ca:51:6c:6f:be:3c:9e:c1:a6:71:64:06:27:f7:57:
7c:f5:97:5e:90:af:a8:fe:a6:64:11:4b:9e:0c:69:
52:f1:ff:23:67:2b:de:ee:db:c7:4d:ad:23:4e:05:
e5:47:44:ce:ec:36:d8:e7:b1:7f:44:0d:21:6b:43:
4f:c4:eb:34:6f:4d:21:90:03:60:0b:35:33:44:df:
da:21:b8:22:da:e2:ff:8b:26:8f:87:e7:07:c7:a9:
65:cf:8e:0b:1c:71:c6:4f:a5:82:5f:21:46:42:ff:
d5:59:6c:1a:2b:dc:0d:94:00:5c:3f:1f:9b:b6:ed:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A4:5D:63:42:D6:99:2E:80:69:B1:D0:51:45:F3:7F:87:D5:B1:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3757196F3EF11EF9B9C6E9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.102.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a5:1e:c5:f8:80:02:1e:16:50:db:88:29:48:39:33:62:cc:
82:97:95:b9:0a:44:bb:f5:3f:b0:72:d6:e6:90:bf:d8:8e:38:
f0:00:4f:2d:d6:6e:e2:29:aa:6a:60:d9:60:de:f4:b8:1d:bb:
75:9d:54:b7:1c:5d:c1:b1:df:85:81:74:ae:bc:3d:75:8f:cd:
2d:a9:4f:74:17:bb:ad:03:6f:cc:5f:72:aa:02:bf:37:9d:1a:
65:95:41:b0:8c:be:97:f7:f9:63:83:b0:f7:df:7f:b5:b6:35:
61:80:24:01:72:6a:60:9d:31:b8:eb:86:4b:dd:34:29:67:b6:
a1:58:97:08:11:d5:8e:b2:5a:82:4a:2d:eb:ff:38:e6:22:80:
23:ff:db:ce:1e:a6:16:53:e7:1e:a1:44:81:63:7f:11:e5:b1:
44:fc:a8:c6:94:7d:cb:bc:ea:a2:5c:ad:aa:67:7a:91:d0:74:
d2:e3:c4:70:e1:a6:b8:1f:50:77:9b:ff:c7:08:52:84:d6:2b:
3a:89:4b:57:f1:18:26:58:8c:bb:10:7f:a0:95:13:a0:e6:51:
9d:dd:6a:c1:fa:fb:41:ae:9d:e4:1c:5e:81:0c:58:4c:80:84:
ff:df:8c:ee:90:19:7a:29:61:f8:18:f3:fb:d0:24:db:c4:59:
f9:81:80:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:44 2025 by rpki-client