Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/458A16EAFF1611EF9CA80794762E951A.roa
File: 458A16EAFF1611EF9CA80794762E951A.roa (raw, json)
Hash identifier: 8CTlSgWu8y5Cyno9gwSbGOL4XWV39dAJQ/N1Qw+HMNs=
Subject key identifier: 62:C1:97:79:04:63:F8:6D:3D:03:55:1C:7A:CB:21:04:54:C4:34:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/458A16EAFF1611EF9CA80794762E951A.roa
Signing time: Wed 12 Mar 2025 07:47:39 +0000
ROA not before: Wed 12 Mar 2025 07:47:35 +0000
ROA not after: Thu 17 Apr 2025 07:47:35 +0000
asID: 203020
IP address blocks: 154.204.96.0/19 maxlen: 24
154.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95141 (0x173a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 07:47:35 2025 GMT
Not After : Apr 17 07:47:35 2025 GMT
Subject: CN=67d13c1b-1fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:51:bc:7d:3c:40:94:21:a7:e4:1a:ac:91:
ce:0f:af:38:e6:34:f1:89:3d:83:a8:81:8e:21:03:
72:d8:b2:33:a3:3c:86:82:a7:4d:38:d3:86:b1:54:
ca:70:76:f2:ef:dc:8b:99:48:a2:e6:f3:97:34:ec:
c8:27:14:e4:f6:9e:b8:31:b0:67:f2:56:f0:23:8f:
47:59:59:b8:36:93:70:d4:cb:25:6c:aa:f0:bf:02:
a0:66:75:66:3c:96:34:46:31:d2:3d:dd:bb:4d:34:
96:4e:25:5d:5c:5d:6a:ca:1b:0d:25:9f:ca:a4:7a:
7c:01:a5:6c:9c:5f:27:46:83:29:07:b1:91:f9:67:
18:62:9d:d4:f0:c0:42:4d:37:dd:c7:f9:14:22:01:
15:df:4f:39:3e:a8:b0:34:cd:b1:eb:b1:83:29:95:
e3:a6:15:a1:39:ae:d5:cd:a1:fb:80:3b:53:f0:b2:
c7:3b:66:a4:63:8c:30:2e:fc:ec:dd:b2:26:9d:b0:
e8:bc:db:5c:86:50:85:62:70:0a:f6:2b:c4:8e:e4:
84:9b:68:d8:f1:8b:38:e7:35:95:54:1d:1a:f7:c4:
7e:dc:bd:fb:d4:f1:73:03:02:50:cd:5c:9c:d0:91:
69:8c:b7:78:6d:49:43:22:ad:b0:c1:84:9c:82:fb:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C1:97:79:04:63:F8:6D:3D:03:55:1C:7A:CB:21:04:54:C4:34:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/458A16EAFF1611EF9CA80794762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.96.0/19
154.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
40:8d:e7:8b:cc:c5:7b:6b:17:6d:50:c9:fd:43:2e:86:3e:11:
57:d1:12:75:e6:79:6e:94:e9:9d:0d:1f:08:25:01:c6:df:e1:
29:93:23:49:08:fc:8b:15:6f:7f:da:30:5a:1a:d8:8f:3f:f7:
15:5a:90:8e:2c:d3:0c:e2:5a:8c:7d:78:38:5b:1d:c4:c3:1b:
e6:77:8a:ed:6c:d8:35:6d:76:e3:5e:81:3b:e3:ec:cf:04:77:
e1:e8:81:59:8c:76:86:6a:b3:cb:1e:72:22:91:bf:d4:b3:46:
0c:a5:38:00:a2:31:4e:42:2f:cb:82:2f:c7:da:40:ce:c8:94:
86:df:f6:80:8c:59:36:87:ad:39:f7:fa:ae:08:53:43:70:3f:
e1:74:1c:e7:9c:81:b0:09:36:b4:1f:15:21:51:ab:fb:cb:d9:
5d:c4:8c:1d:15:c9:88:8a:2c:e6:cf:bc:60:f3:28:9a:b2:4e:
ce:f2:1f:a5:73:4a:69:23:8e:6a:e1:c1:17:e4:eb:b2:7a:2d:
72:53:30:e6:16:1f:a2:94:69:77:b4:38:7b:31:cc:5c:bb:8c:
62:31:66:d2:ec:f3:12:f9:51:0c:ff:f9:d2:0c:5c:ae:90:9f:
5b:75:c6:95:3e:7b:65:89:cb:7a:72:bd:56:7d:27:53:ab:63:
c9:1b:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:31 2025 by rpki-client