Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37A3B0860ED411F09C111059762E951A.roa
File: 37A3B0860ED411F09C111059762E951A.roa (raw, json)
Hash identifier: vKpO33LnY5sDfC3kB4d5u5m6NiAlHabkuk+7O73T51M=
Subject key identifier: 11:8C:A7:D0:A0:AE:F3:89:60:00:99:60:6F:8C:99:0A:D9:ED:28:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01772F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37A3B0860ED411F09C111059762E951A.roa
Signing time: Tue 01 Apr 2025 08:35:08 +0000
ROA not before: Tue 01 Apr 2025 08:35:03 +0000
ROA not after: Wed 01 Oct 2025 08:35:03 +0000
asID: 328608
IP address blocks: 154.214.192.0/24 maxlen: 24
154.214.221.0/24 maxlen: 24
154.214.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96047 (0x1772f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Apr 1 08:35:03 2025 GMT
Not After : Oct 1 08:35:03 2025 GMT
Subject: CN=67eba53c-d4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:7b:16:90:eb:3b:65:00:57:43:ea:dc:23:
03:3b:97:8a:63:13:f0:0a:c7:fe:26:b2:fe:3a:7f:
86:d5:6d:45:74:48:33:fb:0a:e0:c1:d7:5c:05:8c:
bc:a5:11:e0:78:b7:52:5b:83:72:74:67:7e:0d:34:
39:63:4f:e7:c4:7e:37:3e:74:be:6e:ba:53:52:25:
ae:80:f8:0b:0d:9d:a6:0d:39:de:0a:f4:69:a9:c0:
f2:4f:47:c9:0c:51:fe:16:5c:ad:23:46:57:13:92:
ae:70:9c:03:25:0c:88:e1:9c:60:df:15:66:af:a7:
16:df:37:72:c1:07:8e:22:ac:44:34:3b:c4:5c:9b:
1a:d4:49:6a:58:08:a1:8d:ed:0e:fd:71:f3:0d:cf:
81:41:98:34:c2:f9:e3:88:8f:e1:c3:4d:54:92:0f:
10:34:01:29:ea:f0:80:0d:06:97:3d:6a:7b:be:ca:
d4:84:ee:c4:85:60:8b:23:5e:36:19:92:18:9f:c9:
f9:47:08:da:d9:b7:57:bc:3d:6d:2a:18:c8:7b:e5:
ec:62:5e:8f:50:6c:22:87:32:cc:f6:eb:d3:e2:b8:
ba:1e:d8:3f:13:ed:43:0e:64:cd:1b:b1:ce:8b:3f:
1f:19:cc:71:0e:83:c3:7b:18:f5:37:24:2d:6d:a5:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:A7:D0:A0:AE:F3:89:60:00:99:60:6F:8C:99:0A:D9:ED:28:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37A3B0860ED411F09C111059762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.192.0/24
154.214.221.0-154.214.222.255
Signature Algorithm: sha256WithRSAEncryption
b1:49:c8:40:01:75:df:55:fc:df:39:49:bb:58:31:b7:18:a2:
53:ee:49:7d:70:e7:92:b0:6a:85:ef:f7:61:21:55:1f:ae:6f:
d4:d8:f8:c6:cc:56:3d:ea:53:f6:2b:9d:77:7e:68:79:30:da:
cc:94:71:c4:ec:ea:08:5d:17:e3:22:16:a6:4b:3d:26:76:8a:
67:b5:28:34:d6:cf:99:8a:85:47:7c:00:34:36:e1:77:de:fc:
38:de:f1:66:31:68:4c:f8:56:36:8d:44:eb:68:6a:77:43:58:
04:ec:af:fc:97:d5:54:15:56:16:4c:f4:5a:7b:68:62:5f:a2:
59:67:5b:93:2d:cb:6e:33:2c:86:f9:40:01:fd:08:5d:ea:2a:
e9:e0:57:b4:27:a9:f6:ff:64:71:65:26:86:ff:21:2d:c9:f1:
79:6f:ac:c5:c1:95:1b:72:c5:b6:28:d9:b9:ee:c9:36:e4:2d:
ed:d6:09:e7:52:38:36:03:f1:c2:59:bb:f2:d1:dc:9c:73:fb:
f8:0f:e5:d5:18:91:c4:62:16:cb:d7:fa:2c:45:94:ad:45:54:
de:4c:b0:a5:e7:e3:08:8d:8c:86:c2:8d:e5:66:3f:31:47:72:
03:86:ad:77:f6:43:50:09:9c:f3:f1:99:34:cf:e6:bf:1c:90:
10:19:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:08:55 2025 by rpki-client