Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F6832C113511F09D3970BB762E951A.roa
File: 30F6832C113511F09D3970BB762E951A.roa (raw, json)
Hash identifier: qpXu8a9sl1uwtxV/IQd6woLzKlHCvcj1CDvxZORO0CA=
Subject key identifier: 2A:E6:5F:3B:16:83:A7:2C:AF:A8:64:2B:4E:99:5F:34:D7:19:08:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F6832C113511F09D3970BB762E951A.roa
Signing time: Fri 04 Apr 2025 09:14:20 +0000
ROA not before: Fri 04 Apr 2025 09:14:16 +0000
ROA not after: Thu 01 May 2025 09:14:16 +0000
asID: 205125
IP address blocks: 154.210.237.0/24 maxlen: 24
154.210.238.0/24 maxlen: 24
154.210.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96170 (0x177aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Apr 4 09:14:16 2025 GMT
Not After : May 1 09:14:16 2025 GMT
Subject: CN=67efa2ec-5bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:7f:96:2f:13:46:70:d7:13:24:d1:fd:f8:
e1:7a:30:18:e8:7c:66:81:68:87:c4:27:94:3b:63:
a3:7c:1c:35:d4:7d:75:04:cf:c1:d6:5e:38:45:66:
41:00:9a:a4:21:b0:09:3e:4f:66:16:0e:0f:81:d3:
a7:cb:b8:c6:bc:5d:1a:4a:98:49:97:8a:65:14:c9:
fb:ef:ce:77:87:f7:e1:b4:3e:ce:3d:43:1e:47:c7:
61:b9:91:f0:35:71:b2:2e:52:25:c8:ae:8d:f2:9d:
a7:e2:3e:05:b7:88:d0:d8:4e:12:fb:8a:ab:4a:b2:
22:d3:ba:48:01:95:df:f8:e9:80:eb:e5:68:03:9a:
85:0c:be:09:95:7d:24:cf:c1:a4:6d:fb:12:bc:80:
6b:5e:36:10:5e:1d:64:47:f3:1d:97:29:5d:09:b9:
ff:69:0c:28:88:b6:64:c6:e4:dc:8b:17:aa:7b:1e:
01:30:1f:45:0a:6c:4c:b0:90:e3:0d:0d:4d:57:cd:
3f:aa:01:82:95:9a:09:ed:26:b4:65:c6:41:81:e4:
6f:52:7d:7c:25:bf:aa:4b:62:5f:c1:f0:7c:45:48:
df:4a:c1:2c:e8:bf:51:d5:5a:6f:5c:5b:d2:71:eb:
9d:f7:78:1d:cd:05:4c:02:2d:08:3a:06:09:f6:b7:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E6:5F:3B:16:83:A7:2C:AF:A8:64:2B:4E:99:5F:34:D7:19:08:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F6832C113511F09D3970BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.237.0-154.210.239.255
Signature Algorithm: sha256WithRSAEncryption
43:39:40:ed:ef:f9:fa:3e:ef:f1:24:68:48:20:65:e5:75:bd:
ca:3a:5f:f1:67:7f:20:16:f6:67:02:3d:14:7b:69:5a:73:13:
40:26:fa:f8:14:92:8e:1b:da:32:d3:5c:20:0d:92:3d:78:63:
e4:75:45:71:4d:41:13:42:43:b3:56:e7:1d:ef:da:75:48:a2:
c4:1e:e2:78:52:2f:9c:4c:dc:c5:92:9d:f8:23:b3:7c:d4:3d:
34:87:13:c3:c7:66:ef:73:aa:b7:c2:2a:20:81:e7:50:8d:9d:
20:56:a9:80:07:ca:39:7c:ec:93:eb:8d:91:a2:af:f1:a0:e9:
ff:24:5d:ba:78:1b:09:3b:63:0d:36:d7:2a:8e:d5:87:94:a6:
15:4e:ea:81:d9:46:96:f3:43:d4:c8:7a:96:50:49:39:1c:a6:
71:38:68:6e:4b:09:8e:b9:43:1a:3e:e5:be:da:39:e4:d0:57:
43:99:83:98:f3:f6:83:6d:87:9e:f8:e7:8a:60:a3:49:de:78:
a6:13:76:be:78:a4:78:39:d5:e8:6f:fe:bc:c4:d8:5e:c8:2a:
b2:00:05:1b:5e:95:8e:38:14:17:80:51:6e:1f:f2:2e:88:37:
4d:93:fd:24:a9:45:4b:10:5e:23:37:9e:fc:7d:c0:b8:b7:22:
75:c8:4f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:39 2025 by rpki-client