Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4569DF38070411F08CBA3E99762E951A.roa
File: 4569DF38070411F08CBA3E99762E951A.roa (raw, json)
Hash identifier: ESSFPOANN8jRdW+S/Hai7lREx9yxR6IaPOooFkqnuJ8=
Subject key identifier: 53:AE:BC:41:DE:E8:C2:F2:7B:FA:D1:14:1D:45:7D:CF:E0:B7:9E:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017580
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4569DF38070411F08CBA3E99762E951A.roa
Signing time: Sat 22 Mar 2025 09:58:57 +0000
ROA not before: Sat 22 Mar 2025 09:58:54 +0000
ROA not after: Wed 30 Apr 2025 09:58:54 +0000
asID: 395886
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95616 (0x17580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 22 09:58:54 2025 GMT
Not After : Apr 30 09:58:54 2025 GMT
Subject: CN=67de89e1-80f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:cd:68:2b:da:b5:3e:ca:42:19:fc:2c:fd:
02:8a:e2:50:9e:b7:04:d6:ad:3f:49:27:61:37:ae:
7f:05:04:65:98:a6:57:af:e4:ae:f0:eb:d1:e6:59:
3e:01:99:09:49:ec:00:e2:cc:e0:8b:7f:d0:d2:bc:
0e:ab:f5:15:fb:2f:1b:c3:c5:72:68:80:7c:e7:76:
1d:dc:9e:df:2c:07:1a:6c:fa:bc:52:28:f6:85:ad:
7f:af:95:23:13:d1:dd:7a:66:fc:05:7e:13:65:62:
b6:d8:db:c2:98:0a:11:69:a7:bb:2f:5d:af:ea:84:
7d:9a:89:55:c3:cb:75:fa:cd:26:c9:36:64:ca:9a:
ff:0e:bb:62:37:77:b3:4a:00:5a:d0:d9:a1:69:3d:
6b:9c:d3:f3:39:34:87:5b:76:0d:af:4b:50:6d:62:
58:ca:b4:24:39:5f:a6:c2:0f:66:9b:13:73:9b:bd:
c5:43:74:26:55:ed:52:28:03:cd:71:a5:23:41:91:
85:e3:7e:64:03:5d:f5:e2:9b:12:35:ab:f7:44:f5:
be:df:7b:5d:84:3d:cb:42:9f:63:58:14:a7:e3:b8:
e4:22:d7:9e:2a:59:a4:f4:0f:74:d4:e9:65:cd:d4:
a6:dc:1c:ae:38:64:b4:e5:d2:6a:bb:8b:24:7d:96:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AE:BC:41:DE:E8:C2:F2:7B:FA:D1:14:1D:45:7D:CF:E0:B7:9E:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4569DF38070411F08CBA3E99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
5b:a3:3a:65:9d:83:24:02:d6:75:0e:56:82:93:71:3d:ec:c0:
31:59:93:61:8d:92:d7:a6:f9:af:35:e6:59:a5:d3:81:92:92:
ac:b7:47:62:15:a4:c8:02:e8:b3:0b:83:e2:06:96:cd:11:45:
5b:80:2c:4f:36:8e:9a:54:43:42:7a:80:9f:42:98:83:39:0a:
f6:22:a1:63:65:2b:58:be:54:aa:0f:7b:03:24:56:48:c5:60:
f1:6b:72:4a:24:1a:0f:3c:2f:ba:3c:8c:3a:a9:01:2a:6f:e7:
c2:09:e4:08:d4:c6:5d:e0:15:f7:d1:74:99:18:c8:c7:9d:5e:
a4:39:93:3d:88:f2:51:e4:af:2b:ea:d7:f4:0c:88:0f:93:d9:
f6:35:86:22:35:bd:10:d9:92:40:97:b1:01:80:8a:85:eb:bf:
b3:84:3a:3b:8b:1f:c8:52:5f:41:98:78:f3:5a:b4:63:95:f7:
aa:8b:90:f5:79:16:e1:22:09:e6:c5:7d:91:7a:19:df:0c:c9:
b3:6d:ec:2d:33:7d:23:04:7c:83:5d:b2:57:56:7e:5a:8a:31:
3c:df:45:26:a7:91:0e:40:2d:94:2e:4e:be:30:94:41:6a:d9:
3c:4e:cc:99:63:f6:9f:f6:f7:69:6b:b6:d0:43:c5:85:f4:96:
e2:34:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:52:23 2025 by rpki-client