Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25719478042511F0A4322C7C762E951A.roa
File: 25719478042511F0A4322C7C762E951A.roa (raw, json)
Hash identifier: PcUHPM5UZFWLRdn2If+gyQk9/wMkZhYPULTHjx75jPg=
Subject key identifier: 6B:F7:38:AC:D2:CE:A7:3A:6A:A5:43:88:4B:0B:57:17:D1:CF:38:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25719478042511F0A4322C7C762E951A.roa
Signing time: Tue 18 Mar 2025 18:16:44 +0000
ROA not before: Tue 18 Mar 2025 18:16:40 +0000
ROA not after: Mon 05 May 2025 18:16:40 +0000
asID: 48031
IP address blocks: 154.215.13.0/24 maxlen: 24
154.216.1.0/24 maxlen: 24
154.218.1.0/24 maxlen: 24
154.218.16.0/24 maxlen: 24
154.218.17.0/24 maxlen: 24
154.218.18.0/24 maxlen: 24
154.218.19.0/24 maxlen: 24
154.222.220.0/24 maxlen: 24
154.222.221.0/24 maxlen: 24
154.222.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95464 (0x174e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 18:16:40 2025 GMT
Not After : May 5 18:16:40 2025 GMT
Subject: CN=67d9b88c-bfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:ad:51:8b:64:96:20:f1:18:0c:09:dd:d9:
ae:db:25:eb:31:fe:d2:b0:92:27:49:3e:64:ea:10:
f2:17:9b:28:e2:e5:6c:98:05:3c:86:bf:55:05:9f:
70:37:4a:04:1e:be:aa:f4:fd:82:d4:b8:b3:bd:29:
07:47:59:c9:2a:1c:45:76:a3:6d:40:07:ca:92:f2:
fe:2e:2d:09:94:0c:90:88:95:cf:7f:c7:e8:f6:85:
e4:6b:cd:84:2a:6d:27:49:66:00:9f:68:61:94:73:
2c:3c:3f:88:ef:b8:31:24:84:d7:19:c6:d0:bd:b0:
f2:2e:99:ac:cc:1c:9b:43:31:22:2d:55:ef:10:be:
e9:9f:40:25:9a:41:ec:70:d6:22:5d:cd:ab:8a:39:
52:74:6f:6b:70:aa:b4:cc:90:e1:0c:8e:41:44:54:
5d:78:18:31:89:80:5d:6f:90:b9:6b:42:8d:53:ae:
48:af:6c:de:26:33:50:fd:7e:78:c5:cf:85:c4:41:
28:5b:d3:4e:b2:5a:72:02:66:82:bb:40:8e:74:16:
fd:10:9d:0b:6f:fe:04:af:ec:53:48:1d:3c:6f:f5:
f1:e5:12:11:c9:f3:09:83:b5:50:1f:a2:a6:16:96:
00:48:3b:a0:d2:53:ea:88:c1:b8:ca:0a:4a:15:2a:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F7:38:AC:D2:CE:A7:3A:6A:A5:43:88:4B:0B:57:17:D1:CF:38:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25719478042511F0A4322C7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.13.0/24
154.216.1.0/24
154.218.1.0/24
154.218.16.0/22
154.222.220.0-154.222.222.255
Signature Algorithm: sha256WithRSAEncryption
59:97:d8:e9:76:c2:cb:b9:9f:9a:0c:ed:df:fb:56:5d:ba:09:
52:cb:8f:c7:ec:0d:e0:d9:44:ca:dc:08:03:f1:13:a9:42:e9:
2c:ef:84:95:2c:be:2f:da:18:26:61:5f:f7:39:85:e9:ec:df:
5c:1d:c7:a5:57:00:e2:2b:a3:83:9a:14:bf:0d:67:d6:00:3a:
6d:ed:44:46:63:58:4c:81:1e:54:0d:00:2b:d2:77:91:7e:96:
30:71:88:ce:b5:e9:f7:c0:4e:80:32:b3:2b:d3:86:12:0c:ba:
65:bf:cc:28:a0:5d:c6:12:c1:c6:bf:2c:49:58:aa:5d:81:3c:
aa:c0:ed:c0:0c:8b:2f:fe:89:3d:44:82:6a:2d:2a:cb:13:0e:
09:1d:42:47:f9:0c:23:81:ca:0a:eb:b1:37:a1:16:62:26:86:
50:95:7e:b3:a1:1f:83:7e:90:e3:c4:18:5f:43:a7:52:ad:a5:
68:ec:77:e6:00:a2:bc:29:4e:4d:b5:02:ae:ee:ab:a6:e1:e3:
74:72:1c:87:22:7a:29:ee:01:90:85:cf:b7:30:9e:3b:93:01:
72:1e:ac:d3:2b:98:f4:39:a4:13:ee:23:fa:16:9e:d2:b6:00:
3a:ed:7e:67:3f:95:14:13:b7:5a:23:dd:b2:a0:e7:7c:0a:48:
f9:77:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:18 2025 by rpki-client