Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/258925C60A2311F0B4630FA9762E951A.roa
File: 258925C60A2311F0B4630FA9762E951A.roa (raw, json)
Hash identifier: sarSiIPCQdER06veUVmT+QC7YX6G1JImGJZIJWWcClw=
Subject key identifier: 5A:BB:73:AD:FC:6C:04:50:CB:58:A8:67:96:78:B6:75:C7:10:70:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01766B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/258925C60A2311F0B4630FA9762E951A.roa
Signing time: Wed 26 Mar 2025 09:17:32 +0000
ROA not before: Wed 26 Mar 2025 09:17:28 +0000
ROA not after: Wed 30 Apr 2025 09:17:28 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
154.206.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95851 (0x1766b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 09:17:28 2025 GMT
Not After : Apr 30 09:17:28 2025 GMT
Subject: CN=67e3c62c-780f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:64:1b:10:b8:bd:06:c8:2f:50:c6:93:fe:
93:55:10:ee:78:a8:12:9f:bf:b2:82:d4:21:df:ae:
ed:d0:54:67:cb:4e:35:0f:f3:8b:f1:1a:bf:cc:07:
2d:6a:e1:74:af:a0:61:1d:ae:7d:d3:84:9f:72:4a:
2b:19:b6:03:17:88:26:d3:67:28:a8:7b:c9:26:9d:
aa:4a:91:0d:a6:51:35:b2:af:78:b6:2d:a1:73:e0:
f2:4d:55:db:fc:7f:12:4a:55:16:13:07:45:62:4d:
7b:7d:6c:3b:69:5b:2a:a0:61:ac:eb:66:73:b5:98:
5a:7c:e1:4a:56:b5:8e:71:3b:db:92:cc:b5:f5:16:
21:ac:c8:c5:09:06:ef:fd:a4:8c:ae:d6:41:7d:44:
67:8a:19:3c:8a:22:9a:85:44:b7:03:11:3c:27:ff:
88:59:d7:7c:aa:b3:28:4f:13:1a:3e:5a:ec:9b:6c:
03:36:94:68:b3:93:a5:f8:3d:cf:94:dc:f2:2a:b9:
8c:38:4e:0b:9a:49:e9:be:91:d2:57:03:6e:3c:00:
5c:a9:2c:1f:cc:fb:66:b2:1b:f1:29:a2:cd:b3:42:
89:7d:e5:d9:05:4b:8c:8a:3c:8f:85:0e:0f:5c:0b:
23:a9:2f:49:10:7c:e8:e8:83:eb:cb:28:fd:06:46:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BB:73:AD:FC:6C:04:50:CB:58:A8:67:96:78:B6:75:C7:10:70:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/258925C60A2311F0B4630FA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
21:58:59:85:71:8c:32:30:cc:88:76:f3:ba:5d:58:2e:53:39:
67:a7:db:8a:d8:69:2a:ab:93:a8:89:ef:c7:eb:83:5a:c2:8a:
94:35:83:88:32:44:dd:e6:83:31:02:a1:b7:87:71:fb:47:10:
db:d0:3d:3c:2a:81:fb:f8:13:53:fb:23:4a:83:5c:24:e2:c5:
ed:47:cf:87:cb:5b:72:2f:e5:9c:4b:6d:7b:d2:43:87:47:d7:
3c:aa:84:54:61:1b:7f:ba:7a:9b:1d:cf:00:90:09:ef:72:ed:
cb:ea:89:0e:ae:c3:c9:f0:7c:fe:7b:e1:ae:37:b9:8b:77:21:
a6:6f:e3:8e:94:27:ef:72:41:b2:54:45:8f:22:b8:e3:5f:98:
2f:81:7d:7c:a8:cd:03:45:e7:03:81:24:b9:3c:67:dd:b5:a2:
e7:14:ff:9b:25:9a:73:f6:13:da:7e:c0:87:49:02:07:77:35:
8d:87:49:ea:c4:6a:95:a0:cf:3f:43:fb:50:3e:56:11:56:42:
c4:9f:b1:dd:72:f7:bd:07:d1:e2:79:f6:80:c4:09:f7:b6:48:
55:ac:4a:45:2b:60:df:9f:e2:a7:d5:4e:a8:18:85:c5:d9:45:
bc:a6:77:ea:99:49:dc:18:fe:65:95:cd:b7:6e:6a:62:fe:cd:
99:8d:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:59 2025 by rpki-client