Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/456FECF2094811F0AAB45173762E951A.roa
File: 456FECF2094811F0AAB45173762E951A.roa (raw, json)
Hash identifier: qFuBvkcasTrr/J4N4oYCWZm+ik/P3BNjL+lLXaxYbIg=
Subject key identifier: 95:59:5D:BA:52:A2:FB:76:78:6D:BE:DE:6C:57:20:81:C2:C4:99:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/456FECF2094811F0AAB45173762E951A.roa
Signing time: Tue 25 Mar 2025 07:10:46 +0000
ROA not before: Tue 25 Mar 2025 07:10:42 +0000
ROA not after: Fri 02 May 2025 07:10:42 +0000
asID: 395793
IP address blocks: 154.193.99.0/24 maxlen: 24
154.193.104.0/24 maxlen: 24
154.193.107.0/24 maxlen: 24
154.193.108.0/24 maxlen: 24
154.193.109.0/24 maxlen: 24
154.193.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95731 (0x175f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 07:10:42 2025 GMT
Not After : May 2 07:10:42 2025 GMT
Subject: CN=67e256f5-0a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:76:0c:73:31:3a:93:fa:7f:e5:b6:c4:7d:
f7:58:a0:46:c4:37:14:54:d0:e8:c0:98:dd:fe:26:
85:2d:e5:49:1a:1e:ef:55:79:8c:da:c9:d6:2e:3b:
60:d6:3f:de:10:55:e5:3f:6b:66:9f:60:59:50:65:
37:ca:75:72:f3:15:47:36:c7:9d:e3:d0:90:04:29:
8d:ad:34:f8:ac:90:66:bd:d0:d7:ab:d7:72:27:de:
44:75:70:54:c3:2e:ac:97:9e:cb:04:1b:38:d2:57:
3f:dc:6f:47:9b:78:1b:74:7e:f1:d4:a8:88:88:1d:
ca:91:ec:9d:1b:9c:02:ee:9f:82:89:95:00:83:f6:
7b:13:df:d2:64:b3:e6:d5:71:88:27:b2:69:a8:62:
ea:27:7e:11:ab:99:ce:bb:95:0d:91:91:2d:97:85:
4b:0d:7e:7a:f3:eb:26:85:2e:47:a6:36:fb:57:c9:
96:d9:a8:87:c8:00:0c:41:c5:48:4e:db:85:ff:a9:
41:ed:c2:12:0a:84:4e:e0:4a:71:b5:4d:bc:60:44:
4e:b5:89:fd:d3:24:ba:3f:37:cb:a1:0d:66:4a:81:
0e:72:07:0a:ab:90:9c:40:f2:00:f7:62:76:fd:00:
b3:45:e1:5f:3a:97:9c:3e:d8:89:a1:da:f2:c7:12:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:59:5D:BA:52:A2:FB:76:78:6D:BE:DE:6C:57:20:81:C2:C4:99:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/456FECF2094811F0AAB45173762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.99.0/24
154.193.104.0/24
154.193.107.0-154.193.110.255
Signature Algorithm: sha256WithRSAEncryption
3c:aa:0e:66:71:11:45:dd:b2:ac:36:e6:20:99:7b:65:d4:00:
61:77:81:d0:5e:ff:a1:f5:c0:43:96:6d:2f:49:5b:91:c9:9b:
60:60:8f:6e:c7:67:86:2c:13:d8:ce:48:49:a5:c0:25:68:9e:
74:94:d4:87:27:8d:18:43:23:04:14:da:42:76:0a:f0:03:98:
e4:68:35:70:03:72:bf:ca:67:c4:42:7b:f9:8b:ad:e7:e2:54:
b3:21:a9:60:27:e7:50:f2:22:1f:1f:c2:21:f7:7f:48:14:36:
d5:8b:1f:34:b3:bf:ac:ea:e9:12:63:e8:ed:14:8c:e7:ce:5e:
a9:74:cc:75:59:d4:c7:7f:d0:43:45:dc:0b:90:f3:14:86:e2:
14:35:34:99:d0:0a:c0:0c:0f:c2:db:a1:80:21:f7:01:a2:b7:
2f:19:e3:4e:f0:fc:f3:0a:2b:07:10:21:32:8c:bc:5d:77:62:
cf:2d:62:91:77:a0:0a:3e:52:36:97:c8:a1:e2:c2:6c:2f:fc:
c8:b4:3e:ee:2c:50:e0:73:81:42:75:ca:26:d2:1a:60:69:e4:
d1:a5:e4:8e:23:68:4a:d4:08:a3:a3:10:f2:02:ec:ee:06:52:
96:a7:aa:50:a7:04:95:0e:60:86:4f:f3:c8:fe:5d:77:29:b3:
e6:e2:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:09:19 2025 by rpki-client