Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/313E9B00113D11F0B18C806E762E951A.roa
File: 313E9B00113D11F0B18C806E762E951A.roa (raw, json)
Hash identifier: g4Ne9fmmcTlj6d3KNB73AP8QR40oGlRdW3vomA1SUus=
Subject key identifier: 90:C4:DF:2B:14:6C:8A:55:47:16:52:79:2C:3C:6E:1C:F9:F2:09:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/313E9B00113D11F0B18C806E762E951A.roa
Signing time: Fri 04 Apr 2025 10:11:37 +0000
ROA not before: Fri 04 Apr 2025 10:11:33 +0000
ROA not after: Sun 11 May 2025 10:11:33 +0000
asID: 214143
IP address blocks: 154.81.132.0/22 maxlen: 24
154.81.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Apr 2025 00:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96176 (0x177b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 10:11:33 2025 GMT
Not After : May 11 10:11:33 2025 GMT
Subject: CN=67efb058-0be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:56:0c:3b:ea:5b:d2:fe:57:05:1f:41:c2:
48:48:66:95:0d:70:3a:77:ec:ba:4b:38:a4:87:e1:
83:93:d7:bb:33:5e:c5:ee:09:e0:8b:f1:20:02:24:
82:26:0b:a8:39:c5:51:d3:d3:46:c4:23:3b:d8:d9:
a4:00:ce:01:f2:1f:38:d3:a9:77:10:08:09:16:34:
bc:af:f0:9e:90:3e:b9:cd:82:73:99:f0:05:44:20:
5e:50:a5:34:e6:6f:f1:2d:06:5e:9e:a8:b1:b2:37:
18:fc:c8:3a:6f:08:3d:31:68:5c:96:12:75:03:7b:
1a:2a:17:93:97:44:34:74:ce:9d:6a:ce:d6:43:a1:
31:d4:cf:49:ce:4a:d9:b0:d6:45:36:d2:82:2e:23:
fb:6c:20:47:5f:10:aa:4c:0a:f8:0e:14:e9:e5:ff:
63:b4:34:49:34:8a:4a:b7:6b:ba:b7:e4:43:8c:90:
76:69:16:15:04:9c:b2:db:ae:c4:5b:0e:af:d6:00:
4d:21:99:0f:7b:62:b4:a8:a9:04:36:c3:99:99:8c:
6c:86:6e:d1:69:57:f6:c5:b3:b5:e3:18:8a:e8:be:
05:94:2b:4a:b6:b2:6a:94:dd:c4:f7:2d:e6:21:48:
08:59:ee:ec:7f:bb:c6:c4:f9:cd:70:ec:af:60:88:
71:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C4:DF:2B:14:6C:8A:55:47:16:52:79:2C:3C:6E:1C:F9:F2:09:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/313E9B00113D11F0B18C806E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.132.0/22
154.81.138.0/23
Signature Algorithm: sha256WithRSAEncryption
52:65:1b:f3:2e:4e:89:df:16:65:56:8b:84:8b:f9:84:33:40:
81:96:da:05:1c:17:e4:2b:3d:7a:15:2c:39:c4:77:73:f4:bf:
77:7d:da:22:06:ed:80:64:37:89:e4:3d:24:c9:de:d9:d9:47:
a2:a2:ca:28:ea:95:80:be:0d:05:c5:1f:17:b8:5e:d5:bf:87:
2f:0d:58:a8:14:07:ff:06:a3:e8:31:de:43:30:dd:a3:da:02:
d9:ff:21:8a:4e:06:08:a7:98:c8:52:02:b8:02:19:5f:4d:67:
6d:b1:ba:9b:0d:dd:c4:6d:9e:0f:7a:85:92:00:d8:42:5b:44:
8b:e1:87:b7:74:be:29:97:01:1a:03:9d:d7:e3:57:8e:90:d9:
5d:ff:cd:2f:b2:65:e9:b6:79:75:3e:2d:6d:fb:ed:66:39:56:
20:4b:d5:d1:48:97:75:95:f4:36:0f:d8:b9:1c:2a:e8:2d:38:
bb:bb:a9:a0:bc:6f:e7:00:c2:d2:eb:df:5e:90:bf:e1:48:5f:
00:a4:6c:05:ec:9b:ca:73:9e:a1:15:4a:96:65:3e:10:54:4c:
42:12:f9:bb:85:b1:71:d8:d7:dc:81:f7:7b:c7:9f:e7:54:66:
4e:12:99:a6:42:76:c1:05:cf:69:57:70:ec:1d:f2:bb:ae:68:
a9:43:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:00:44 2025 by rpki-client