Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4BAB640F42811EF96E259A3762E951A.roa
File: F4BAB640F42811EF96E259A3762E951A.roa (raw, json)
Hash identifier: J2DCEsb5JHsD2lwsMQZVBWwoRSbzMMV4NugIeLLXA2U=
Subject key identifier: CF:4B:D6:3D:D6:2A:08:78:26:50:2A:D4:E5:44:32:76:1D:7A:8E:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01621A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4BAB640F42811EF96E259A3762E951A.roa
Signing time: Wed 26 Feb 2025 10:03:41 +0000
ROA not before: Wed 26 Feb 2025 10:03:38 +0000
ROA not after: Thu 19 Feb 2026 10:03:38 +0000
asID: 984
IP address blocks: 154.208.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90650 (0x1621a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:03:38 2025 GMT
Not After : Feb 19 10:03:38 2026 GMT
Subject: CN=67bee6fd-d616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:09:05:ce:9a:73:fb:d1:b1:64:d7:bc:32:
a7:cd:84:cf:c2:86:92:51:8a:00:0d:47:3e:b0:6d:
71:02:9e:09:70:b4:48:ad:0d:5e:9c:78:33:d6:24:
5d:69:1f:c5:95:d0:74:5e:56:66:f8:3d:56:b0:93:
b5:f7:c4:57:e1:7f:b7:d7:13:5c:b3:ea:5e:c3:e5:
f1:ef:d1:ae:74:0d:ae:22:f2:ed:83:d4:9c:2e:b3:
82:c8:ec:64:a9:69:95:db:5e:5d:85:7b:56:8a:63:
02:32:61:51:8d:4d:f9:4c:df:c5:6d:7b:28:3a:d9:
fb:21:8f:6f:29:9b:2d:d8:02:bd:68:12:ff:54:f8:
75:ea:63:69:de:b5:6e:51:0b:86:1b:af:29:2d:49:
98:63:a1:8e:27:79:b8:a4:46:ac:f4:c0:4e:03:94:
f3:a8:ba:5a:dc:a4:e4:c8:96:d4:45:6a:58:da:8b:
5a:1e:97:9c:20:c0:8c:7c:f2:d2:58:33:6f:b6:8b:
ed:8c:88:fe:33:d8:2a:b5:b7:11:50:1b:2b:4d:d7:
08:09:62:3a:94:5e:a1:bb:ab:53:22:d4:23:9c:85:
68:8f:62:84:02:32:6e:6e:0a:11:0d:9f:db:43:fa:
47:13:97:11:e9:87:71:72:2d:f1:f4:d5:96:9d:ac:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4B:D6:3D:D6:2A:08:78:26:50:2A:D4:E5:44:32:76:1D:7A:8E:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4BAB640F42811EF96E259A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.65.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d8:f8:68:2c:22:62:31:6e:8f:e2:61:c7:f0:dc:ed:d3:8d:
9a:75:e1:e6:af:3c:94:d8:8c:66:a7:2f:1f:33:74:e2:d5:8a:
12:7e:8b:65:17:28:18:a7:6d:85:9e:a0:6e:ad:28:78:60:97:
f8:6b:88:f1:61:e6:38:e1:6a:4e:32:81:7d:3d:ef:6b:65:79:
88:87:0c:cb:89:c5:17:50:90:a7:83:ea:78:0d:4d:37:aa:11:
5b:95:31:02:a6:22:f1:a0:91:7b:1e:86:8f:ef:8e:66:ad:df:
fc:87:c3:b7:0c:02:5b:34:22:0e:95:68:cf:a7:4b:fb:51:56:
11:1f:65:d1:77:90:ef:44:3f:59:d6:b6:ed:79:55:49:a0:1a:
ec:de:f1:c3:3e:e4:e3:79:91:75:cf:b0:fb:a7:c8:cb:c0:22:
5c:18:8a:7d:6d:4f:3f:ff:22:62:d6:fc:8c:ac:cb:64:92:17:
5a:0c:06:14:3e:60:5d:ae:8b:97:0c:42:b6:97:ec:6e:7b:15:
13:e9:ce:e3:cd:59:f3:8a:24:17:21:e6:34:95:ac:c9:45:f3:
5a:1f:58:59:68:5d:e7:05:73:86:9f:82:55:8f:5a:c7:b5:cb:
3f:90:58:41:87:3d:fe:51:54:6d:0f:35:be:fc:1a:64:7b:59:
38:67:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:23:16 2025 by rpki-client