Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FFAEDB80A2B11F08244CD5B762E951A.roa
File: 5FFAEDB80A2B11F08244CD5B762E951A.roa (raw, json)
Hash identifier: 7pzydsbGfkJSE/zr9m7k/vpST5UdnKgkWrlyD/qFaU4=
Subject key identifier: 59:82:CE:0F:8A:C9:BC:E8:1F:42:5E:04:68:A6:9E:BD:25:90:C6:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017673
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FFAEDB80A2B11F08244CD5B762E951A.roa
Signing time: Wed 26 Mar 2025 10:16:26 +0000
ROA not before: Wed 26 Mar 2025 10:16:22 +0000
ROA not after: Sat 17 May 2025 10:16:22 +0000
asID: 138915
IP address blocks: 154.206.67.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.72.0/23 maxlen: 24
154.206.74.0/23 maxlen: 24
154.206.76.0/23 maxlen: 24
154.206.78.0/24 maxlen: 24
154.206.79.0/24 maxlen: 24
154.206.92.0/23 maxlen: 24
154.206.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95859 (0x17673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 10:16:22 2025 GMT
Not After : May 17 10:16:22 2025 GMT
Subject: CN=67e3d3fa-7eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:91:80:a1:f2:f2:84:8d:d0:15:7d:b9:2f:e0:
7a:b7:8c:f0:dd:1d:97:bb:53:53:ea:f7:21:02:c0:
70:d5:cf:75:10:a9:b2:5d:83:1e:a9:f6:d6:94:40:
36:7c:75:a7:21:5a:86:be:74:ff:37:3b:8e:ca:1e:
10:91:69:4f:14:f0:93:fc:92:5b:1f:c0:04:88:85:
c2:f1:ef:c9:d5:0e:d9:89:4e:30:f2:c6:de:88:40:
5c:18:df:cf:c2:14:65:fa:66:01:be:5a:70:7a:41:
63:a8:bd:31:01:41:8e:02:bf:87:76:46:93:90:fb:
53:b5:48:6a:f4:51:5c:71:80:7e:f3:9c:f8:ec:b9:
62:5f:6a:20:f2:35:9b:1d:7c:61:26:87:cf:55:c8:
da:e0:8b:99:3a:25:28:32:44:ec:37:98:cf:d9:d6:
03:84:e4:e6:49:95:05:00:cf:e5:76:67:11:44:45:
99:a4:57:1f:7b:45:6c:b1:e2:68:9e:17:d8:46:7c:
55:37:6e:92:ad:d0:0b:d0:8a:da:e5:90:e1:5a:4a:
c6:04:a1:c6:97:09:89:ca:6a:db:3b:3a:be:07:72:
86:94:23:05:06:ff:81:9c:75:d3:a0:f2:92:86:32:
5d:3f:bd:eb:cb:b0:03:05:15:b7:03:23:6d:69:8b:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:82:CE:0F:8A:C9:BC:E8:1F:42:5E:04:68:A6:9E:BD:25:90:C6:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FFAEDB80A2B11F08244CD5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.67.0-154.206.79.255
154.206.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:6b:df:37:8c:89:02:a4:a9:3e:2a:1f:d3:4d:91:7c:7a:d0:
5f:a8:d4:7a:e3:c9:1c:34:4d:8b:f0:02:99:fd:81:43:be:15:
78:9d:a4:31:27:f4:f3:c7:1f:ab:5f:01:25:73:0a:da:13:bc:
a6:28:b6:3e:0d:11:a1:0a:71:7d:c3:17:34:46:24:d3:6a:08:
a4:e6:3b:b0:56:af:7f:e7:ee:a3:be:ae:99:8c:a2:9c:38:59:
76:fb:70:64:8d:77:e5:ac:02:a1:60:42:00:0c:25:af:bc:c1:
52:37:3f:83:4f:61:56:59:8f:21:ac:59:f5:71:72:93:c5:c5:
b9:c7:92:42:ee:fc:29:3f:c6:44:31:78:70:de:76:f4:c7:e3:
e3:2d:32:09:2d:60:fc:14:21:ec:d2:30:ba:a9:79:18:98:0c:
cc:4b:4d:d8:dd:be:b3:f0:23:d4:76:b8:cc:15:a2:ee:41:a5:
5f:b1:06:78:47:61:97:be:d3:c1:62:61:a0:55:4c:90:2a:fe:
f8:2b:b3:fc:13:4d:c9:0f:12:d4:c5:61:b6:8e:a9:59:93:22:
64:6b:48:3b:0f:28:15:23:2c:10:4e:60:58:55:41:18:57:2d:
4b:94:8a:d1:08:79:10:55:ce:40:f1:20:a5:2f:25:b6:6f:a7:
07:8a:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:01 2025 by rpki-client