Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/640F4762094711F0A8AF996B762E951A.roa
File: 640F4762094711F0A8AF996B762E951A.roa (raw, json)
Hash identifier: D6viPyeE0iYbHVi72VE0BXLULLPKS76PpWNKjYbCQZA=
Subject key identifier: A5:44:EE:D1:1D:DC:5F:0A:BE:61:64:A5:90:F7:6B:53:95:AF:FB:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/640F4762094711F0A8AF996B762E951A.roa
Signing time: Tue 25 Mar 2025 07:04:27 +0000
ROA not before: Tue 25 Mar 2025 07:04:24 +0000
ROA not after: Fri 02 May 2025 07:04:24 +0000
asID: 395793
IP address blocks: 154.193.100.0/24 maxlen: 24
154.193.101.0/24 maxlen: 24
154.193.102.0/24 maxlen: 24
154.193.103.0/24 maxlen: 24
154.193.105.0/24 maxlen: 24
154.193.106.0/24 maxlen: 24
154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95729 (0x175f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 07:04:24 2025 GMT
Not After : May 2 07:04:24 2025 GMT
Subject: CN=67e2557b-76d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:a4:2e:30:d7:ab:f5:80:f4:b5:2f:7e:82:
4a:58:c6:c6:b4:72:79:95:42:04:62:45:28:d1:14:
86:07:bf:0a:40:47:a5:3b:21:c5:d3:c8:53:9e:1a:
f0:73:e1:de:75:65:25:20:4d:d1:a8:a6:52:fb:62:
98:cc:83:15:9c:16:67:c1:ba:0d:b4:56:c1:0c:1b:
e6:dd:2d:23:d8:f9:dd:63:b3:c8:7a:28:a4:31:d0:
03:bc:61:e9:82:cc:f1:a6:f4:09:43:4b:90:26:be:
12:55:d2:24:86:d1:35:21:56:b5:ec:17:d7:50:97:
41:d8:d2:ed:a9:c0:f7:cf:0e:2a:48:f2:39:e2:f7:
d4:59:b4:b5:75:b0:3b:cd:1e:a1:2c:31:d3:1d:56:
16:eb:a3:8a:60:9d:d1:73:68:8a:a5:9f:65:bd:8c:
06:f1:a4:e5:75:c2:92:ce:8b:e5:5e:12:9b:1f:19:
8d:0b:65:28:d2:68:95:0e:0d:e5:e0:93:e6:f1:c8:
67:82:50:05:98:b5:6a:98:d8:69:50:cf:c6:51:37:
11:f8:44:ff:73:dd:50:ea:4e:e7:9b:6f:9d:77:7a:
dd:20:56:7a:c0:5f:fb:f1:69:c6:3a:64:28:3a:53:
bf:ca:49:4e:ac:bf:bf:8b:ef:8e:ae:b1:dc:d8:3a:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:44:EE:D1:1D:DC:5F:0A:BE:61:64:A5:90:F7:6B:53:95:AF:FB:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/640F4762094711F0A8AF996B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.100.0/22
154.193.105.0-154.193.106.255
154.194.208.0-154.194.213.255
154.200.55.0-154.200.59.255
Signature Algorithm: sha256WithRSAEncryption
95:21:50:42:e3:c5:10:cc:a4:56:60:37:8e:ac:10:40:3e:e9:
54:e1:fe:f7:f3:7b:0f:94:c1:ea:a1:26:b7:74:44:8d:2d:2a:
17:64:80:8e:a5:49:10:f3:14:69:eb:83:12:ab:a5:c2:ff:b3:
02:60:26:09:f2:93:43:c0:bc:df:29:52:68:04:a0:58:50:d5:
c3:07:37:14:7f:e3:58:3c:15:b7:4a:bd:4e:5e:03:91:c5:52:
36:cc:b7:4f:2a:35:7f:fb:9a:47:6f:0c:0d:d8:11:c9:67:2e:
9d:35:01:11:f3:be:e4:52:b8:1d:b4:e1:59:47:32:11:db:60:
7a:a0:b3:ac:f4:86:43:cd:86:a5:3d:a3:7f:31:a5:08:d2:0f:
00:70:9b:ba:79:84:4e:e3:e8:b3:26:a2:44:eb:6d:8a:d1:10:
15:2a:dc:5d:dc:51:df:24:0b:ff:0e:c2:a7:88:5e:98:95:40:
95:ca:8e:66:2a:0d:4f:70:5e:e3:21:97:92:ce:2f:6d:25:c6:
4d:49:9c:fa:b3:4e:b1:0f:38:0e:f1:5a:15:07:46:ad:69:1a:
e4:4f:ba:f3:f5:41:f9:c2:03:f3:9b:de:d2:46:0f:f6:cb:0b:
cd:fa:82:0b:c8:2b:58:5c:af:1d:e2:2d:b8:f8:0c:5c:5a:54:
49:45:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:42:48 2025 by rpki-client