Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4291EC9E0D3811F0B91E2294762E951A.roa
File: 4291EC9E0D3811F0B91E2294762E951A.roa (raw, json)
Hash identifier: yl3UJK+jc1YyPsYGokTXqsY7qOh6sCO1XiGIyeQNQX0=
Subject key identifier: 0D:8F:76:91:D1:FD:1E:77:16:49:BC:32:03:65:04:F2:F1:CE:85:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01770B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4291EC9E0D3811F0B91E2294762E951A.roa
Signing time: Sun 30 Mar 2025 07:26:13 +0000
ROA not before: Sun 30 Mar 2025 07:26:09 +0000
ROA not after: Sun 27 Apr 2025 07:26:09 +0000
asID: 3257
IP address blocks: 154.206.240.0/21 maxlen: 24
154.206.248.0/21 maxlen: 24
154.208.64.0/21 maxlen: 24
154.208.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96011 (0x1770b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 30 07:26:09 2025 GMT
Not After : Apr 27 07:26:09 2025 GMT
Subject: CN=67e8f215-9698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:bd:84:02:2d:25:86:24:bb:f0:cc:d9:b7:
2e:b3:c4:8e:49:04:c7:90:db:ba:75:49:f1:ae:ec:
76:a7:46:31:b7:45:67:d8:43:78:71:2b:7c:66:bc:
ac:0f:3b:5a:89:64:ee:a0:97:9a:88:08:80:bb:8a:
f5:39:71:f2:b3:79:fa:e0:c3:e7:c5:7a:8c:e3:5b:
df:6a:1a:6b:86:49:a4:24:3e:38:0c:89:b4:03:f9:
18:22:c8:bc:a6:02:35:57:c4:7c:11:65:51:01:dc:
a0:8d:37:7f:97:60:7b:7e:ef:ff:d4:07:2f:81:c8:
61:9a:1c:15:46:1e:3e:9d:05:2b:07:25:f4:8a:83:
6a:d1:70:a2:3c:e7:a0:76:ae:5c:d9:f8:88:71:a5:
14:83:cf:3b:c5:b2:9b:68:8b:f7:19:28:64:7f:58:
8e:0e:ce:32:10:a5:63:0c:48:3f:e9:b0:f6:35:49:
e0:c2:f8:74:d2:f7:fb:eb:94:5c:54:d5:1d:86:2b:
a5:78:a4:a2:15:fe:8b:e5:ca:b3:9e:56:26:0e:80:
42:45:88:89:e7:c4:bc:cb:82:da:55:15:0c:79:90:
4f:af:37:4b:ec:71:e9:5f:e1:80:ca:e2:e6:c4:b6:
47:7b:9c:c6:d4:b0:46:aa:4d:e8:bb:14:55:a4:3c:
b7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8F:76:91:D1:FD:1E:77:16:49:BC:32:03:65:04:F2:F1:CE:85:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4291EC9E0D3811F0B91E2294762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.240.0/20
154.208.64.0/21
154.208.112.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:eb:ac:8b:97:b4:dc:84:00:01:0d:5c:c6:61:97:3b:bb:e5:
da:a0:c1:f4:c0:bc:c4:e1:d9:3f:07:18:2c:ad:c7:06:50:66:
06:84:4a:a6:23:05:b9:7d:0e:25:bd:3f:72:73:2c:de:5b:aa:
9a:5b:95:95:7e:9e:96:62:56:9b:db:c8:8d:c4:27:6e:a0:1d:
e0:b7:ab:f6:8a:ac:c4:b2:17:36:de:7a:1d:03:34:00:13:9b:
f0:98:d9:92:cb:35:5e:bc:69:eb:70:d1:1f:d6:6c:4b:0c:5c:
75:e1:5d:c0:97:6a:41:da:09:0d:a1:8c:1a:3d:48:9d:92:31:
cd:7d:3a:2f:0e:90:35:5c:10:2e:d0:c2:34:ce:35:ed:3a:f2:
79:c3:fa:ab:0b:8a:14:5c:e7:e1:1a:15:8d:c9:b2:fa:2e:78:
dd:7a:3d:79:fb:02:3e:14:38:33:e0:f8:b5:f9:88:5c:79:db:
48:a6:d8:9f:2e:64:d1:41:29:95:0c:64:1b:03:a4:b3:5c:91:
a1:e3:08:c5:cb:18:fd:b7:04:eb:12:cd:d8:36:e7:7d:bd:de:
dc:2e:a0:f8:64:06:84:57:ed:6b:81:af:14:f4:38:58:20:40:
3e:a9:f6:45:7b:21:e3:86:9d:4f:45:e4:ce:e8:c0:dc:04:5c:
75:ca:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:09 2025 by rpki-client