Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C718F80041611F0809B99A0762E951A.roa
File: 7C718F80041611F0809B99A0762E951A.roa (raw, json)
Hash identifier: r/+IKGWPaPO/1Jb802bXoz7DonnQ16rs2hW2li8WxS8=
Subject key identifier: FF:8D:12:63:B4:9B:19:45:EF:86:CE:AF:91:5C:7B:A3:F7:E2:E6:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C718F80041611F0809B99A0762E951A.roa
Signing time: Tue 18 Mar 2025 16:31:47 +0000
ROA not before: Tue 18 Mar 2025 16:31:43 +0000
ROA not after: Mon 05 May 2025 16:31:43 +0000
asID: 202656
IP address blocks: 154.219.197.0/24 maxlen: 24
154.219.207.0/24 maxlen: 24
154.219.211.0/24 maxlen: 24
154.219.222.0/24 maxlen: 24
154.219.230.0/24 maxlen: 24
154.219.232.0/24 maxlen: 24
154.219.245.0/24 maxlen: 24
154.219.247.0/24 maxlen: 24
154.219.251.0/24 maxlen: 24
154.221.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95434 (0x174ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 16:31:43 2025 GMT
Not After : May 5 16:31:43 2025 GMT
Subject: CN=67d99ff3-78b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:a3:ca:78:71:46:70:f0:ec:1c:ef:fd:39:
f2:d1:3b:2a:84:7c:07:c7:ad:39:86:97:0d:64:1d:
b2:5a:88:3e:8c:87:38:6f:64:17:96:fb:58:0a:9d:
36:80:fc:80:8d:cf:27:18:0e:a6:93:63:39:c7:91:
7b:f8:aa:b5:e4:fc:93:9b:8f:d1:d3:31:10:b9:0e:
1a:92:c9:5a:f3:a9:89:72:4b:47:16:33:48:72:54:
a3:2c:97:41:6b:43:2b:30:34:fe:d7:8c:58:25:96:
73:75:9c:b6:63:ff:3c:ea:87:de:b7:5c:e1:04:9e:
92:ce:32:c5:be:ad:cf:77:08:60:e9:f1:a2:86:a7:
3a:34:f5:ad:ae:43:6b:b0:7b:03:e0:f0:53:65:3c:
d4:d3:05:7f:a6:67:26:5c:8b:16:a3:ef:21:b9:7a:
3a:9a:2f:d4:a8:30:78:9a:d0:9c:af:f0:4d:0e:af:
b0:7b:b9:06:7c:e5:21:a3:c3:e2:0a:94:b8:70:34:
27:a1:34:7b:d5:48:fe:1d:04:93:25:f2:dc:1f:59:
51:02:15:e4:65:41:07:a8:9b:0f:ff:62:58:da:4f:
47:d4:09:5e:af:34:9e:98:19:97:a4:03:23:16:d2:
b2:49:5a:45:15:58:9a:78:c6:26:1c:0b:e0:30:26:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8D:12:63:B4:9B:19:45:EF:86:CE:AF:91:5C:7B:A3:F7:E2:E6:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C718F80041611F0809B99A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.197.0/24
154.219.207.0/24
154.219.211.0/24
154.219.222.0/24
154.219.230.0/24
154.219.232.0/24
154.219.245.0/24
154.219.247.0/24
154.219.251.0/24
154.221.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ea:7e:b8:32:e0:34:f5:94:b2:72:c8:74:36:d4:12:0a:f6:
71:6c:91:4e:10:54:ce:5f:71:7d:65:2d:71:d2:79:08:36:53:
37:80:be:68:4d:b1:51:d9:ea:80:dd:86:23:de:22:ad:45:6f:
9a:76:07:41:21:fa:47:8f:08:ad:ea:ba:13:cc:65:fc:e8:b1:
27:c4:e1:9f:6d:8d:67:3b:5f:76:38:d8:59:3d:78:61:1e:6e:
f9:6b:e0:7a:81:ce:12:9f:fa:f0:90:f0:b1:f3:3b:a7:9e:e8:
c4:63:52:ac:25:d0:c6:f0:73:a7:c7:14:55:4b:43:b3:76:19:
8c:0a:ed:10:4e:3c:f3:34:3c:c1:96:5e:a1:69:62:76:40:6c:
69:db:89:28:21:da:53:a3:91:ca:55:0e:cf:d6:13:08:de:e0:
79:d0:a2:59:a9:48:11:23:79:68:ef:8e:f5:b8:eb:07:96:4f:
72:c0:ba:5a:17:23:62:f5:85:ef:8f:25:f4:73:13:26:50:51:
75:4b:1f:11:2d:32:f4:72:4b:ab:af:97:84:6d:f8:68:b1:9e:
c9:6e:d0:4a:b8:7b:cc:98:67:20:c8:c1:d7:5f:18:ea:cc:69:
00:26:37:e9:7e:c4:72:42:98:d8:19:8f:14:0d:a9:78:68:e2:
6e:b9:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:13 2025 by rpki-client