Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92FE931AF8EA11EF8CD6F7AD762E951A.roa
File: 92FE931AF8EA11EF8CD6F7AD762E951A.roa (raw, json)
Hash identifier: +mHw4cejOOhSxVMV/x0Cxha2T2I4ZB146PwuMsUIaeU=
Subject key identifier: DD:0E:43:77:73:4B:1C:3B:C4:76:63:38:B6:B5:05:D2:D2:6D:4A:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92FE931AF8EA11EF8CD6F7AD762E951A.roa
Signing time: Tue 04 Mar 2025 11:19:44 +0000
ROA not before: Tue 04 Mar 2025 11:19:40 +0000
ROA not after: Sun 06 Apr 2025 11:19:40 +0000
asID: 203020
IP address blocks: 154.217.64.0/24 maxlen: 24
154.217.65.0/24 maxlen: 24
154.217.66.0/24 maxlen: 24
154.217.67.0/24 maxlen: 24
154.217.68.0/24 maxlen: 24
154.217.80.0/24 maxlen: 24
154.217.81.0/24 maxlen: 24
154.217.82.0/24 maxlen: 24
154.217.83.0/24 maxlen: 24
154.217.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 11:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94654 (0x171be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 11:19:40 2025 GMT
Not After : Apr 6 11:19:40 2025 GMT
Subject: CN=67c6e1d0-bd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:07:7f:1d:c1:80:53:e2:bf:5e:1e:69:9e:
4b:2d:ff:3a:e7:77:22:c8:fa:f2:9f:a5:da:fb:e0:
d5:fe:e3:1f:d0:d7:98:89:11:af:db:01:ea:d9:81:
86:9a:a6:eb:a0:b6:14:7c:cc:7b:aa:d9:79:81:a6:
75:3d:8c:37:20:eb:5f:bf:c9:1f:22:f3:0b:af:0a:
b1:14:8e:96:23:93:0a:c6:64:6f:3f:bf:0b:15:53:
b9:9c:f5:a2:5b:80:eb:a1:09:6a:63:0c:51:b1:1b:
15:d2:40:ed:26:09:b3:09:11:2c:f3:28:00:03:db:
f6:70:d5:14:f1:bc:fb:56:f8:cd:0b:26:0e:65:2b:
ab:cc:08:d0:5a:fe:0e:66:2d:46:54:ee:de:24:e8:
59:e8:11:8c:7e:96:e9:9b:7a:f0:9c:36:c2:2d:06:
9b:db:79:f1:64:d3:05:68:f5:90:93:ed:ec:d9:db:
e5:9b:e2:28:9c:ae:d6:22:06:80:e3:db:a2:1d:5b:
7f:6c:b7:04:38:fb:17:a6:24:7b:e4:22:47:3c:8b:
a7:02:53:57:6c:ed:3c:ac:61:68:4b:13:66:81:8e:
2f:52:a0:88:7a:6d:da:b4:c1:8b:54:a9:f4:0a:af:
e5:16:14:fe:53:29:97:5b:e9:68:d9:f0:e2:9c:f0:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0E:43:77:73:4B:1C:3B:C4:76:63:38:B6:B5:05:D2:D2:6D:4A:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92FE931AF8EA11EF8CD6F7AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.64.0-154.217.68.255
154.217.80.0/22
154.217.85.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:c5:28:40:ef:8d:ae:ee:53:c0:3d:6d:f1:03:c4:30:fe:42:
21:cd:dd:3a:b8:a6:69:71:16:d3:21:72:ca:d5:e9:04:26:96:
13:ec:49:34:0d:f5:fc:70:de:d7:5b:77:02:5a:53:69:7f:9e:
8e:a8:76:bd:95:9e:b4:7e:c0:83:de:4a:3c:28:7e:9b:b4:4b:
88:6a:3b:52:9e:3c:7f:1f:02:40:f0:cf:6a:4c:30:8e:bb:82:
1c:09:8c:e0:c2:5b:6d:03:07:7b:46:30:3b:1e:56:5a:ab:63:
9e:ee:5f:24:73:79:4f:5a:08:db:14:a1:95:a6:65:71:9f:8b:
1f:5e:71:84:71:cd:23:89:b7:70:55:cf:bc:cb:84:0a:ec:60:
88:85:4e:22:f8:f0:ce:15:09:1b:16:60:7a:25:5a:53:bd:1e:
95:d5:e0:31:e2:6c:6e:e6:21:68:4d:a7:ae:fc:ed:3b:d4:10:
ac:a8:2a:f5:af:be:be:13:9c:bc:c1:75:78:3f:67:76:28:f7:
53:2b:96:36:bf:b6:aa:d1:23:b6:99:fa:86:48:d0:c8:56:98:
f5:cc:00:3e:c8:d0:b0:9e:1e:dc:94:a2:e5:04:52:9a:a7:97:
bc:0a:38:88:ec:7a:1d:8a:ea:95:b6:98:5f:bc:13:87:99:77:
01:17:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:40 2025 by rpki-client