Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/082A8C1803FC11F0B707D87E762E951A.roa
File: 082A8C1803FC11F0B707D87E762E951A.roa (raw, json)
Hash identifier: GQMYGtInzb2tztxqfaQ2O4G3tZlucV5h+uAhH1VPgUI=
Subject key identifier: 30:99:FD:48:BD:89:4B:7C:4F:B4:68:DB:57:FF:5F:A4:B4:D8:E3:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017496
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/082A8C1803FC11F0B707D87E762E951A.roa
Signing time: Tue 18 Mar 2025 13:22:25 +0000
ROA not before: Tue 18 Mar 2025 13:22:20 +0000
ROA not after: Wed 30 Apr 2025 13:22:20 +0000
asID: 62240
IP address blocks: 154.195.139.0/24 maxlen: 24
154.195.143.0/24 maxlen: 24
154.195.144.0/24 maxlen: 24
154.195.145.0/24 maxlen: 24
154.195.146.0/24 maxlen: 24
154.195.147.0/24 maxlen: 24
154.195.148.0/24 maxlen: 24
154.195.149.0/24 maxlen: 24
154.195.150.0/24 maxlen: 24
154.195.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95382 (0x17496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 13:22:20 2025 GMT
Not After : Apr 30 13:22:20 2025 GMT
Subject: CN=67d97391-ffc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:1e:42:92:ed:e9:0f:e1:3e:9b:62:7d:84:
e7:e3:4d:a1:63:ab:48:dd:b4:6e:c1:e8:d2:ea:ef:
7b:1c:da:4e:ee:e5:aa:b4:a7:a4:71:c2:0e:df:9a:
f2:ee:d9:7b:56:c8:c7:94:7a:57:64:e9:e1:68:b4:
e1:c3:d0:be:ba:9b:c3:46:27:e9:bd:52:10:f6:01:
65:76:1e:23:11:ae:a8:57:97:28:a1:ce:c7:21:72:
1a:ae:e8:4d:43:8a:80:8e:d8:31:ac:2e:18:6e:15:
38:2f:16:5c:a4:ca:3c:04:93:b3:fc:e5:75:22:ec:
49:c4:fd:87:a1:89:19:23:90:7f:bc:d7:84:6f:bb:
ee:a6:c1:fe:ab:8c:8c:1b:42:17:f7:df:e4:76:3c:
38:ef:5e:31:cc:5b:0e:8c:ca:42:07:96:27:db:3c:
50:99:d7:3b:84:08:b0:56:ec:a3:75:3a:ed:67:de:
07:26:37:0e:0a:1f:68:3a:4b:c9:76:53:de:e4:66:
08:40:78:56:8c:8e:97:80:d9:ba:cc:4a:fa:29:57:
72:19:73:bc:80:81:a7:a9:30:65:cd:52:2e:90:77:
3c:66:7e:48:a2:1d:8c:54:a1:df:0b:d5:74:94:74:
47:a2:0a:93:c3:a1:89:98:87:55:eb:57:f6:05:b4:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:99:FD:48:BD:89:4B:7C:4F:B4:68:DB:57:FF:5F:A4:B4:D8:E3:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/082A8C1803FC11F0B707D87E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.139.0/24
154.195.143.0-154.195.151.255
Signature Algorithm: sha256WithRSAEncryption
8c:7b:ed:9b:bb:96:be:c2:84:35:e5:3e:73:11:09:09:bb:72:
b8:8d:ca:91:e5:cf:c0:7d:3b:1d:16:46:58:7e:44:89:af:0b:
b2:c6:1e:ff:8f:91:d9:3b:6b:3f:c0:f4:33:36:0f:4c:43:91:
0a:60:8f:bc:a7:a6:50:15:df:6b:f0:1e:e6:d4:68:87:ae:1d:
5a:4c:82:6f:0d:00:65:8f:45:03:ed:89:c3:23:0c:b7:0e:47:
3f:ad:8f:3c:39:f2:56:06:bc:6d:f8:5a:72:44:67:36:73:14:
1f:24:1f:1b:bb:3b:4e:44:bb:9f:42:ef:a5:74:fc:d5:2d:ac:
33:3e:4d:c8:23:6b:9e:6c:16:b7:59:b6:30:99:2b:cb:ab:20:
48:8e:01:f2:20:ed:a6:24:4c:47:ac:62:b5:d9:77:4a:a4:0a:
f4:7c:fa:18:2b:82:43:56:e1:6d:3a:d8:94:ec:04:3f:5d:c4:
f9:40:e8:e3:d7:68:2c:91:36:e5:2b:a6:b6:95:62:73:89:29:
ec:5a:bc:6f:e1:76:4f:49:4c:53:18:db:ea:1e:cf:67:eb:fd:
5b:65:f2:6a:55:b9:87:78:14:cd:0c:3f:53:54:e9:9f:ec:21:
ac:20:6a:03:b2:24:b4:7d:4f:4c:bc:ef:c5:7a:a2:63:fb:00:
63:42:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:31:28 2025 by rpki-client