Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/622050AEF8E411EFA8F0A685762E951A.roa
File: 622050AEF8E411EFA8F0A685762E951A.roa (raw, json)
Hash identifier: hHGUjPjcLOfqYcU0JkaetY13c6Jn7QiHFWo52vv5Nas=
Subject key identifier: C2:7F:C5:0D:70:5D:FB:8B:48:A3:3D:A3:8D:35:8A:D9:1C:94:01:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/622050AEF8E411EFA8F0A685762E951A.roa
Signing time: Tue 04 Mar 2025 10:35:25 +0000
ROA not before: Tue 04 Mar 2025 10:35:21 +0000
ROA not after: Sun 06 Apr 2025 10:35:21 +0000
asID: 203020
IP address blocks: 154.217.49.0/24 maxlen: 24
154.217.50.0/24 maxlen: 24
154.217.51.0/24 maxlen: 24
154.217.52.0/24 maxlen: 24
154.217.53.0/24 maxlen: 24
154.217.54.0/24 maxlen: 24
154.217.55.0/24 maxlen: 24
154.217.56.0/24 maxlen: 24
154.217.57.0/24 maxlen: 24
154.217.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94642 (0x171b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 10:35:21 2025 GMT
Not After : Apr 6 10:35:21 2025 GMT
Subject: CN=67c6d76d-366f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:47:e7:00:99:19:39:d2:17:2e:06:a9:03:
38:68:8a:74:34:a3:5d:14:b0:cd:bf:2c:a6:9c:ed:
3f:0f:b7:9b:bb:a5:ed:24:ba:ac:61:71:00:f7:b9:
0d:1c:76:8d:6b:16:eb:a4:51:be:cd:20:9c:66:ce:
24:cd:be:42:17:6d:b7:16:9a:dc:d4:7a:ea:35:0d:
c7:b0:41:ec:47:56:ca:5f:f7:22:9b:74:d0:7b:3a:
4c:7f:62:a8:5f:5d:4d:31:43:48:bc:8f:37:a7:0f:
47:76:39:48:fc:7c:3b:fc:df:8c:76:05:4c:61:c3:
86:b0:52:e1:78:f8:46:1a:f2:dd:d7:a5:d9:b0:e1:
88:e4:d4:9d:d0:55:9e:35:f1:a5:be:44:58:18:a3:
95:e7:4b:a6:44:81:99:c7:30:23:f7:66:ba:81:3e:
5c:18:28:0b:e3:a1:48:75:ca:08:82:85:cd:b6:7d:
a5:8c:e1:96:c3:e7:cc:26:ff:4d:19:ab:2f:b0:10:
54:d0:ea:b8:d3:fb:38:3d:eb:d4:f0:3b:ba:3f:22:
5d:03:37:d0:16:54:9a:b0:3e:7a:46:7c:4b:d1:01:
04:e4:c1:8e:3d:bc:ab:9c:99:55:81:6f:4b:3c:d4:
d6:0e:fe:35:b2:0a:bf:29:09:eb:b6:53:e6:cf:bb:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:C5:0D:70:5D:FB:8B:48:A3:3D:A3:8D:35:8A:D9:1C:94:01:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/622050AEF8E411EFA8F0A685762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.49.0-154.217.58.255
Signature Algorithm: sha256WithRSAEncryption
d8:4b:6e:d3:68:ff:04:b3:f9:d9:59:a6:aa:53:86:ad:54:c0:
51:92:7e:fd:4a:81:6d:db:0e:87:bb:c1:3d:72:07:32:ca:c5:
30:43:6c:d8:ef:dd:5c:e6:30:14:5b:63:cd:2c:c4:0c:c2:34:
94:c9:9f:1c:df:21:70:96:11:26:28:25:13:05:40:11:0c:2a:
50:74:75:aa:cb:a0:cd:ed:23:4b:64:b8:dd:3d:9a:79:a2:84:
3f:c1:21:2c:dd:d6:9e:e7:f3:84:f4:86:88:c6:60:99:41:af:
ab:51:59:59:eb:a1:fe:46:26:76:4d:7e:f4:f5:6f:cc:1e:e8:
41:5e:da:bc:93:d0:60:cc:8f:04:df:d5:d4:41:2d:9f:8b:43:
dc:2d:81:1d:e0:04:ac:d0:3d:4a:3e:9f:d7:ca:13:e5:22:24:
99:0e:be:9d:aa:89:7a:07:69:fa:a4:88:e9:90:f9:32:79:b6:
af:56:25:16:a6:5e:df:75:50:10:4e:f4:22:f1:30:ff:92:eb:
df:ac:23:fa:18:bb:dd:c5:94:08:c6:68:ac:76:ed:e6:27:49:
5d:25:43:fb:1e:2f:d4:45:55:49:69:21:23:50:e8:8f:86:88:
58:e9:3e:4a:92:2f:52:54:da:96:66:41:2c:f9:44:d2:70:7a:
3c:36:c4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:48 2025 by rpki-client