Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699540AEFB2A11EF8E891D65762E951A.roa
File: 699540AEFB2A11EF8E891D65762E951A.roa (raw, json)
Hash identifier: ChdnYS/eX69YNkIPqB0i/FhEGoyS4RBAFuDEQWfxQfY=
Subject key identifier: 28:CA:7F:82:73:47:FA:80:70:41:1F:04:3C:DA:39:DF:35:E9:9B:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699540AEFB2A11EF8E891D65762E951A.roa
Signing time: Fri 07 Mar 2025 08:01:45 +0000
ROA not before: Fri 07 Mar 2025 08:01:41 +0000
ROA not after: Wed 16 Apr 2025 08:01:41 +0000
asID: 203020
IP address blocks: 154.203.32.0/21 maxlen: 24
154.203.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94914 (0x172c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 7 08:01:41 2025 GMT
Not After : Apr 16 08:01:41 2025 GMT
Subject: CN=67caa7e9-a130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:ef:31:08:3d:f1:62:b1:54:c2:64:cf:21:
f2:73:6b:33:f8:f1:bf:56:99:4d:59:db:d8:4e:c0:
35:29:e2:91:31:b0:fe:aa:ad:a4:1d:de:cc:17:82:
6f:24:c9:34:07:c7:b2:6f:9e:cf:ab:77:d8:06:68:
e0:bf:ad:80:75:bc:28:d1:f6:3c:54:13:94:46:a6:
07:34:7a:3f:75:9a:1a:15:85:f9:48:7f:f1:83:f8:
7c:ea:1b:12:6e:e5:d0:8f:6f:ee:a7:00:6f:a3:66:
6b:b3:08:f9:28:b0:6e:3a:6b:43:84:1d:7b:59:58:
0e:e5:45:a1:35:b1:03:6d:2d:7d:3f:bd:34:5f:95:
d7:14:ad:5f:86:9e:93:49:44:f7:1d:a0:0d:21:43:
3a:48:2f:4f:03:d1:f0:e8:19:fc:0d:43:34:55:0d:
86:94:e3:79:78:9d:53:61:d7:87:02:3c:7f:f6:96:
aa:9a:fa:14:37:8c:8f:64:6b:df:12:9b:86:db:d1:
d3:04:7f:f0:c0:05:5c:7d:7b:0a:4d:2a:62:80:df:
42:20:a2:68:38:c1:6f:53:77:fa:67:a2:40:2e:82:
ec:ef:68:58:99:37:f6:4f:1f:db:d7:63:44:3a:08:
61:e1:ac:9b:8c:2b:b4:cf:2f:e7:f6:e7:7b:d8:c5:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CA:7F:82:73:47:FA:80:70:41:1F:04:3C:DA:39:DF:35:E9:9B:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699540AEFB2A11EF8E891D65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.32.0-154.203.43.255
Signature Algorithm: sha256WithRSAEncryption
d7:d0:9b:b6:ee:72:e7:e0:14:5e:ec:1d:27:98:e3:63:81:67:
72:54:e2:f4:f1:de:06:bf:f9:0f:02:b5:07:a5:94:ff:2f:b0:
31:71:b7:71:c0:04:f3:5f:08:c1:82:bb:90:f4:c1:3a:e4:70:
93:8b:75:44:f7:a8:9a:5c:01:54:29:96:e4:8b:52:2e:59:26:
b0:5e:78:21:1a:e8:46:12:32:2e:70:1d:bb:c4:6a:c5:e9:60:
b4:44:a4:03:43:5a:66:e5:10:b7:2f:51:36:b7:34:4d:0a:ce:
58:e6:b5:cd:d3:01:c1:53:71:80:cf:db:24:b9:46:d4:e7:c4:
ae:b0:1d:2b:50:49:64:86:80:8e:ac:59:fc:62:2c:55:2a:05:
f2:3a:2b:70:43:77:71:d4:00:af:02:4b:98:dd:f3:1b:77:37:
62:37:62:94:ac:3f:59:48:35:b6:69:c9:a2:82:20:b3:5a:43:
9d:63:c1:12:f1:19:73:7b:11:07:12:7e:8f:9d:fc:8a:60:34:
71:0f:c0:2e:58:0d:38:9c:79:58:09:94:bb:c9:ff:2b:de:ff:
14:b8:a3:05:b9:05:5d:b7:0c:0e:11:e2:50:0d:fc:3c:d6:37:
7b:5d:bb:3e:02:d9:92:63:31:f1:5a:21:4e:e2:8e:15:d2:01:
0f:29:2d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:09 2025 by rpki-client