Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D72C1160E1A11F098840E6F762E951A.roa
File: 7D72C1160E1A11F098840E6F762E951A.roa (raw, json)
Hash identifier: Gne6LZRHbmNOygaXWPaWC341V/g18vj3RIFerjSb6VM=
Subject key identifier: 1C:8B:C5:68:15:1B:0D:A5:6F:47:02:BE:59:0B:9B:E2:69:6F:46:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017720
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D72C1160E1A11F098840E6F762E951A.roa
Signing time: Mon 31 Mar 2025 10:25:38 +0000
ROA not before: Mon 31 Mar 2025 10:25:35 +0000
ROA not after: Thu 10 Apr 2025 10:25:35 +0000
asID: 45669
IP address blocks: 154.198.64.0/19 maxlen: 24
154.198.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96032 (0x17720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 31 10:25:35 2025 GMT
Not After : Apr 10 10:25:35 2025 GMT
Subject: CN=67ea6da2-bbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:8d:7b:2e:a8:5c:42:80:53:ff:d1:9f:04:
0f:a3:c8:6a:d8:dd:27:fd:60:7e:80:5b:37:0e:f9:
08:2e:4f:83:12:ab:4c:cc:67:0c:f7:fe:b3:f7:89:
83:26:c0:b1:24:02:02:db:8c:b9:92:ef:80:23:5a:
25:b6:e9:16:63:19:ba:67:40:a8:b3:1e:10:8a:70:
1d:2c:96:9f:f7:d4:33:8d:4b:da:ca:34:04:78:8b:
cf:81:43:81:72:33:20:4d:3f:19:d8:40:3b:6d:2a:
32:f8:33:06:4c:74:41:cc:4b:a3:4e:3d:6f:19:3d:
10:0c:bf:7e:0e:19:52:4f:83:a3:90:b7:b5:b8:22:
d8:f1:51:95:e7:12:d1:d1:0e:27:c4:16:72:97:8b:
4a:09:b0:d2:6e:45:20:9d:58:e1:28:a8:df:53:3a:
0c:4d:06:89:7a:44:a1:42:ff:50:64:31:f5:b0:8b:
b3:63:b7:44:dd:5f:f8:02:b5:0e:22:fe:b0:dc:da:
a1:56:cc:e1:83:7b:69:4a:e1:37:a6:c9:ee:5e:8e:
43:50:be:15:2c:2d:fa:75:dc:d4:ac:f7:4e:7b:25:
15:e7:13:89:fb:05:53:88:c6:f3:01:6b:06:e5:01:
0d:ca:db:da:47:2f:4f:d6:53:31:cb:b9:b3:bb:bc:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8B:C5:68:15:1B:0D:A5:6F:47:02:BE:59:0B:9B:E2:69:6F:46:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D72C1160E1A11F098840E6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
11:db:59:45:44:13:c1:a4:81:73:92:d2:dc:7d:1d:e5:90:91:
46:08:de:15:72:5a:86:9b:4b:99:76:24:28:b7:3e:fc:78:6d:
fb:a0:34:0e:8c:16:db:76:ac:fd:7b:ae:6d:29:c2:7c:57:4e:
81:4e:98:2f:a0:e6:58:cb:ed:24:51:da:0b:5a:25:06:25:72:
e2:d4:04:1b:fe:e0:cc:85:7e:ee:9d:ae:d0:7a:73:23:3d:87:
e9:fc:75:69:06:8c:98:8f:84:4d:a8:d4:35:6e:89:b8:20:d5:
e8:d9:af:9c:df:58:3a:78:82:33:11:7b:24:bb:18:a4:73:69:
0d:62:95:91:5c:20:4e:7c:9d:9d:d6:70:76:44:b1:af:79:85:
31:8b:2f:38:b9:98:4a:c9:50:32:57:41:3d:78:f4:60:60:35:
39:96:b7:ab:57:45:03:dc:1a:62:e3:58:f4:e3:b6:ad:59:8f:
0b:89:bb:8d:0c:3e:4d:fe:fc:40:b3:f8:b9:c9:5e:f5:5c:f3:
17:de:5e:50:21:ba:8a:84:df:e8:b9:6f:93:85:b6:20:e9:77:
f8:de:46:82:5a:27:01:93:1a:4a:d5:d5:0b:84:75:6c:98:eb:
a1:6c:36:e6:28:dc:d9:2c:a3:b9:54:f3:e8:62:cf:7e:81:09:
35:23:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:01 2025 by rpki-client