Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/765B97DA0CDB11F0A3657952762E951A.roa
File: 765B97DA0CDB11F0A3657952762E951A.roa (raw, json)
Hash identifier: w39OrLv4NxGsHUTMMH47c/zkrxtfI0jUVuyKp2ktWTA=
Subject key identifier: 74:C0:D3:76:55:E7:03:0D:5C:94:E0:10:FC:74:CF:73:E6:9C:D0:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/765B97DA0CDB11F0A3657952762E951A.roa
Signing time: Sat 29 Mar 2025 20:21:57 +0000
ROA not before: Sat 29 Mar 2025 20:21:53 +0000
ROA not after: Sat 17 May 2025 20:21:53 +0000
asID: 18013
IP address blocks: 154.210.16.0/20 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95988 (0x176f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 20:21:53 2025 GMT
Not After : May 17 20:21:53 2025 GMT
Subject: CN=67e85665-cc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:3f:f1:54:ea:e3:79:7a:3d:32:05:38:48:
6a:c6:d0:7a:4e:00:34:fc:11:9c:83:c2:f1:6a:95:
94:c0:e9:f4:35:ee:c0:76:a3:56:5b:df:35:3f:6d:
b2:4f:ba:89:e6:a6:92:1f:d7:2f:d2:45:42:ba:33:
48:5d:32:16:9c:7b:7b:04:75:d0:c8:b4:8e:c7:a3:
69:3c:1a:d1:16:6d:5f:11:2f:70:02:4f:83:6a:5f:
a4:ec:91:16:8a:04:b3:d0:bc:c8:9a:a1:af:29:1f:
a9:4f:37:7b:2a:bc:90:22:69:4b:3d:95:03:be:ce:
10:29:04:02:b6:7d:1b:33:2f:81:d7:a1:7e:1f:5e:
f4:b0:a0:42:bb:ab:70:ec:6b:b7:70:84:fd:df:38:
b9:ee:08:48:fb:17:09:e8:5c:99:6f:e9:7e:4a:75:
dd:39:f0:61:09:0b:96:06:f8:04:a0:42:47:91:0d:
51:e1:6b:85:65:8b:d6:55:30:a4:70:db:ab:17:6a:
9f:5c:5e:e9:48:93:98:1e:26:d4:26:3b:bb:28:e2:
a2:db:66:46:7c:d1:0f:89:5a:19:ac:14:19:5c:32:
15:7d:61:c5:a4:11:c7:9b:6d:f1:a3:88:5f:cc:c6:
77:21:6c:7f:78:48:51:0e:b6:08:06:b2:5f:ef:3a:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C0:D3:76:55:E7:03:0D:5C:94:E0:10:FC:74:CF:73:E6:9C:D0:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/765B97DA0CDB11F0A3657952762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
00:06:6f:58:75:25:41:01:c8:36:6c:b2:05:78:12:e0:db:b5:
8b:75:c2:b2:30:b6:df:a9:e6:5d:3d:8b:01:8f:f0:93:1a:06:
0a:3b:b0:ed:58:3a:a6:04:41:d7:be:9c:19:09:bf:2c:cc:87:
9d:06:30:5f:5e:e6:7c:a2:16:9e:1f:a5:96:12:fe:05:b4:3a:
08:8f:c3:9d:91:bd:02:19:ab:1d:ea:22:4f:e7:9b:9f:ae:aa:
cf:d5:49:62:83:18:a2:db:39:83:ff:3f:a7:68:f9:53:7b:4c:
88:e2:b6:38:03:ac:be:c3:14:14:99:fe:8a:8c:32:68:f4:b9:
ac:41:9d:f8:a4:f4:5e:c2:7d:2a:4c:3e:55:7c:ff:2b:40:d8:
90:ad:18:d0:5e:8d:67:e7:02:1d:bc:e6:ea:b5:d9:c1:96:b9:
a9:f5:d1:a7:e0:0c:db:03:e8:22:2e:03:06:8a:a8:a6:f9:cd:
eb:6c:d8:a5:87:78:1f:23:2a:11:ef:bc:b5:c9:54:f9:f0:8b:
80:b4:32:d3:41:c1:20:9e:e1:eb:1a:21:03:85:10:16:db:d4:
5d:cb:44:02:45:e3:fb:f8:53:37:8b:10:5b:77:00:17:67:c8:
8f:0f:24:2f:33:11:7d:83:36:a0:aa:2b:0f:2a:ad:46:9b:d7:
c2:eb:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:31:00 2025 by rpki-client