Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCEB6768F3E911EF8775C56F762E951A.roa
File: FCEB6768F3E911EF8775C56F762E951A.roa (raw, json)
Hash identifier: gICVFZTcWWY+eMZy2mZmwhjHgUyiqg5KsWtEfTfJmRs=
Subject key identifier: 93:B4:A0:7F:B8:BD:16:39:3E:FA:3B:73:11:D4:A2:6E:81:20:C8:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01608C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCEB6768F3E911EF8775C56F762E951A.roa
Signing time: Wed 26 Feb 2025 02:32:57 +0000
ROA not before: Wed 26 Feb 2025 02:32:53 +0000
ROA not after: Thu 19 Feb 2026 02:32:53 +0000
asID: 984
IP address blocks: 154.203.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90252 (0x1608c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 02:32:53 2025 GMT
Not After : Feb 19 02:32:53 2026 GMT
Subject: CN=67be7d59-c827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:fd:65:b9:65:d7:6e:94:93:96:ed:55:f3:
88:82:c5:63:de:48:e4:0d:71:8b:8b:6d:9b:ca:d4:
d3:0e:ce:62:72:a5:9c:0f:92:3e:11:04:a2:b8:ae:
da:c0:e2:9c:42:a4:23:31:79:c7:23:3e:65:f3:8d:
e2:b3:a8:1e:31:35:42:c1:83:fc:b9:46:34:3d:89:
09:07:a1:1b:ce:04:d6:2b:cb:83:96:a1:5e:a3:73:
10:68:2d:d2:37:f3:98:bb:ec:18:cc:5d:f6:a6:d2:
9a:90:28:91:c5:39:ec:d5:d6:3e:42:61:46:99:52:
38:01:be:34:50:2f:11:2e:7b:37:38:83:1b:8f:80:
17:f8:27:9b:c6:43:98:64:16:4f:60:c1:17:b3:d4:
15:31:24:fb:f5:68:60:63:0e:2f:ea:7b:6e:63:32:
ff:b2:41:d0:01:d6:62:c8:71:71:cb:88:39:89:c5:
7a:bf:5d:e0:bd:0b:17:20:76:0d:14:03:17:48:1c:
0f:5c:f0:03:fa:e2:94:79:e9:99:52:85:ab:73:7d:
61:d5:60:9f:69:7e:c6:a3:2d:51:fb:e5:4e:c0:d7:
9e:65:b2:78:6c:18:8c:71:eb:3e:a7:9e:60:46:25:
c6:01:74:79:60:74:0d:c2:ae:98:45:2a:0f:4d:13:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B4:A0:7F:B8:BD:16:39:3E:FA:3B:73:11:D4:A2:6E:81:20:C8:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCEB6768F3E911EF8775C56F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.92.0/24
Signature Algorithm: sha256WithRSAEncryption
78:92:e4:b1:71:20:8c:80:26:e4:c1:45:c2:a2:e4:dd:f3:23:
3d:83:26:d7:45:9a:af:dd:39:6b:d4:02:40:c7:2a:4f:f1:6b:
3e:d7:21:ca:73:24:c4:4f:03:45:44:ec:e1:c1:ea:09:9d:0e:
b8:59:dd:c8:a9:0d:7f:7c:1f:a3:a8:e1:59:1f:66:ed:eb:d2:
a7:2d:30:68:16:72:d8:70:f8:02:80:e5:76:0c:fc:49:a3:55:
dc:79:df:8b:75:27:12:09:5f:06:3d:bd:d7:9b:34:20:9a:a5:
9a:ff:25:b5:89:2a:62:3c:0f:8c:ac:7c:ce:bc:65:69:da:22:
ef:cf:b1:35:0c:80:f7:cc:3b:90:e6:88:54:95:77:99:ba:ba:
38:54:52:d3:ee:34:b4:76:bb:85:99:38:e5:67:db:48:cd:3d:
b8:40:b1:e0:75:13:f8:2c:86:c5:cb:31:0a:18:18:71:71:a3:
38:8d:8d:ce:d0:9e:67:a1:26:17:76:0a:fe:ee:69:b4:eb:08:
09:4e:d7:72:0b:3f:2f:a1:cf:00:db:7d:a9:7d:3d:b8:91:51:
5f:30:bd:9f:95:6b:f9:5e:c6:42:06:ef:b4:18:df:e2:09:4c:
29:56:a9:4f:bd:e4:50:59:22:3f:68:6f:ed:ca:51:f1:41:64:
3d:cc:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:53 2025 by rpki-client