Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AA635140FA611F0ACA22253762E951A.roa
File: 9AA635140FA611F0ACA22253762E951A.roa (raw, json)
Hash identifier: HWcea1Pw4phdpRgk00+af0LRJiwblkoJUiAQVk1Myxc=
Subject key identifier: DC:BB:45:A1:0E:7B:A2:EE:0C:F0:21:32:96:A6:CE:DE:3F:16:1A:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01774A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AA635140FA611F0ACA22253762E951A.roa
Signing time: Wed 02 Apr 2025 09:41:08 +0000
ROA not before: Wed 02 Apr 2025 09:41:04 +0000
ROA not after: Fri 11 Apr 2025 09:41:04 +0000
asID: 200373
IP address blocks: 154.91.171.0/24 maxlen: 24
154.94.12.0/24 maxlen: 24
154.94.13.0/24 maxlen: 24
154.94.14.0/24 maxlen: 24
154.94.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96074 (0x1774a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Apr 2 09:41:04 2025 GMT
Not After : Apr 11 09:41:04 2025 GMT
Subject: CN=67ed0634-7154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:d9:9b:c0:21:97:74:3b:1c:d4:f2:3c:c6:
f8:88:bb:ae:f4:22:5d:8e:f6:a3:fa:b6:ed:d0:29:
87:54:21:7e:27:27:cb:a4:16:36:f9:88:31:5e:21:
ca:eb:3f:29:26:2e:5d:b8:84:d5:13:dc:a1:72:57:
7b:ef:9d:6d:23:71:00:f8:f3:35:c4:42:fc:9c:a0:
68:2d:ff:c2:ff:6c:99:e4:7b:27:3c:2e:bd:fb:fc:
41:e2:a9:1c:91:64:76:0d:00:ee:99:33:69:40:fe:
7c:9d:14:25:db:91:0c:b3:9e:6e:d4:bf:e9:81:75:
f4:8a:4c:b2:c6:6c:99:8d:cd:a0:b7:64:61:fb:05:
e0:4d:bd:99:f1:48:da:2b:52:ec:eb:df:57:f6:7f:
b8:7b:08:bd:70:98:e6:6e:68:ea:b1:b4:0b:d8:7f:
2c:8c:05:91:3d:e4:d7:1c:e8:da:fe:c0:7a:82:2a:
a4:95:38:e2:2b:1c:25:37:53:8c:63:66:c9:1e:03:
24:24:e9:ff:fe:44:02:b2:a9:e8:c0:0c:cb:f9:98:
c6:e3:14:25:f9:4d:62:66:7e:c0:80:c6:09:60:0f:
60:06:13:0c:71:14:51:fd:7a:53:ee:65:57:71:e8:
f3:76:55:57:87:ff:85:8b:8f:7e:2c:33:d5:c5:53:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BB:45:A1:0E:7B:A2:EE:0C:F0:21:32:96:A6:CE:DE:3F:16:1A:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AA635140FA611F0ACA22253762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.171.0/24
154.94.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:37:b2:c5:6b:6f:1c:01:66:48:79:c2:c2:00:84:c2:1b:48:
0f:6b:86:2e:ab:d4:dc:76:e8:39:27:c5:7e:9b:07:aa:ff:77:
7c:76:4c:63:43:bd:eb:f8:73:b6:a1:8b:a7:d5:df:03:2a:7b:
6a:b4:61:3d:fd:96:01:bb:b8:aa:0d:0d:f7:2a:80:09:ce:40:
3d:d2:65:5f:44:bb:80:87:03:29:1b:ca:b1:87:47:92:f5:f4:
a8:82:7d:06:ca:9a:29:33:c9:49:8f:dc:b6:83:70:f5:08:68:
ae:25:aa:ef:ef:ae:3d:6a:bb:f0:e8:cb:32:67:ca:a2:9f:27:
4f:a4:18:b3:7e:0c:7b:1f:67:9c:24:61:29:f0:17:58:1d:0b:
da:74:d2:5f:f6:34:94:36:9a:96:d4:0f:68:c4:89:ab:0d:16:
1b:f9:bf:e2:f1:76:69:f9:94:a9:b9:bb:d4:f3:d1:eb:0d:56:
2e:4e:5b:9a:41:00:47:76:b2:34:7b:14:b2:6d:6b:66:80:b1:
b9:a3:46:d8:ad:ba:f9:20:64:fa:cf:0e:70:3a:83:fc:05:f8:
96:e3:80:1f:f1:65:58:91:0b:4c:50:32:1d:9c:34:82:44:35:
65:95:0b:a9:05:0a:5c:14:88:18:51:3e:bd:1f:50:98:d2:7b:
a6:84:0d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:49 2025 by rpki-client