Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B3481F4FF3611EFBF620C61762E951A.roa
File: 5B3481F4FF3611EFBF620C61762E951A.roa (raw, json)
Hash identifier: cXsqnJzQkz9KEchacmOzWlERWShu5fPXiOxJjO4ei18=
Subject key identifier: 82:9D:E0:15:27:A3:EB:EE:28:4B:EC:AF:4D:72:55:03:54:AF:60:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017400
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B3481F4FF3611EFBF620C61762E951A.roa
Signing time: Wed 12 Mar 2025 11:37:19 +0000
ROA not before: Wed 12 Mar 2025 11:37:16 +0000
ROA not after: Thu 08 May 2025 11:37:16 +0000
asID: 150706
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95232 (0x17400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 11:37:16 2025 GMT
Not After : May 8 11:37:16 2025 GMT
Subject: CN=67d171ef-c0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:35:14:cd:6e:dd:4c:4e:2a:f1:d7:20:5c:1a:
38:ae:06:44:cc:99:f4:7d:ed:a8:3c:12:d7:db:16:
11:34:d3:2e:cd:95:36:13:68:29:56:b9:d2:8e:7b:
70:df:a2:59:cb:07:4f:c2:ec:34:46:ec:f6:e2:60:
9b:e9:36:71:1c:de:3a:74:f3:bc:3a:31:d5:02:72:
8e:88:41:4e:85:4e:a0:b1:e2:0a:0b:f0:34:4d:95:
73:ae:a0:d5:3e:89:14:57:45:d3:36:b9:fc:b6:86:
34:ab:d9:28:6b:48:54:44:4f:4c:f9:fa:9a:5f:0a:
f2:b9:41:1e:8e:e9:9c:ab:d5:9e:dd:ab:fd:2d:f1:
83:fc:7c:0e:e3:74:1c:c9:52:2d:2b:d4:4e:70:b9:
87:f3:a3:bb:9a:ad:4b:01:39:dc:b0:bb:c2:c8:11:
6f:5f:d8:90:d9:c9:d6:46:44:d6:ae:48:06:ec:b6:
af:86:b9:6f:91:de:59:0c:fa:6b:a2:93:bd:7a:81:
90:9c:92:5a:14:a3:5a:6d:c5:cf:43:d6:f7:82:9d:
94:0e:11:0e:7d:f3:7c:11:b4:b8:20:bd:40:29:89:
d4:1b:4c:a2:8d:8c:6d:65:64:16:94:3b:40:fc:8c:
3c:fd:36:17:fe:9d:b8:77:da:64:e2:90:70:32:fb:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9D:E0:15:27:A3:EB:EE:28:4B:EC:AF:4D:72:55:03:54:AF:60:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B3481F4FF3611EFBF620C61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:d0:d3:20:b2:26:e6:de:d4:d5:da:82:0a:d5:e6:25:bf:56:
91:a1:b5:7f:fe:19:d5:a2:2f:fc:c4:9d:0a:57:dd:5f:73:c9:
23:64:08:0f:38:1d:83:81:e2:cd:d3:d4:53:15:11:9a:e0:44:
34:a1:42:3f:aa:d8:78:89:cf:64:e0:f0:22:db:d1:19:77:13:
37:af:e5:6e:a9:6c:bd:cb:bf:2d:ac:6a:63:05:56:96:cd:51:
03:4b:71:2c:75:6a:5d:f1:6a:ce:5b:48:60:da:ef:d0:cd:12:
cb:69:40:77:b7:32:bb:ec:75:05:29:fe:ff:b1:f9:35:cb:6d:
f6:f0:41:73:77:b2:3e:84:b9:65:2e:f5:74:f6:f6:87:63:93:
47:fc:2a:27:a1:61:e6:68:30:3e:e4:6c:c4:bd:58:e3:10:44:
ff:5e:ba:c9:af:d1:d6:ad:0b:e9:9d:54:59:a0:fb:7f:b8:fe:
02:3c:a3:af:75:b4:8f:2d:15:1d:93:07:05:7d:e4:49:18:d6:
49:eb:a0:51:d5:41:3a:df:5b:53:55:00:48:04:fe:0c:39:87:
2a:8c:3b:7b:f3:14:c3:0d:1c:9a:eb:0a:2e:12:5f:56:3a:43:
79:f1:d8:0a:ee:72:a7:11:c8:db:fc:19:af:7a:4f:ea:10:e9:
df:15:9c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:58 2025 by rpki-client