Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA0BFC2095211F094649CAF762E951A.roa
File: 9EA0BFC2095211F094649CAF762E951A.roa (raw, json)
Hash identifier: NGlRRyZaywmd1YBFjUJKS0js3xwFyqMAxdOCLYndx6I=
Subject key identifier: F2:33:6F:DB:D7:30:64:19:B0:99:56:6C:29:23:A1:16:81:61:38:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA0BFC2095211F094649CAF762E951A.roa
Signing time: Tue 25 Mar 2025 08:24:50 +0000
ROA not before: Tue 25 Mar 2025 08:24:46 +0000
ROA not after: Tue 03 Jun 2025 08:24:46 +0000
asID: 138915
IP address blocks: 154.93.74.0/24 maxlen: 24
154.93.84.0/23 maxlen: 24
154.93.96.0/24 maxlen: 24
154.95.64.0/24 maxlen: 24
154.95.65.0/24 maxlen: 24
154.95.66.0/23 maxlen: 24
154.95.68.0/24 maxlen: 24
154.95.69.0/24 maxlen: 24
154.95.70.0/23 maxlen: 24
154.95.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95737 (0x175f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 08:24:46 2025 GMT
Not After : Jun 3 08:24:46 2025 GMT
Subject: CN=67e26852-642f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dc:f9:71:6d:61:d2:f5:8a:37:6a:f7:e2:db:
f5:13:26:d5:b3:fd:15:34:b8:39:28:f9:5d:c8:77:
a3:fb:39:5b:28:63:2d:ee:61:2b:ed:4f:b6:6f:a6:
04:ec:98:18:fe:b9:ee:22:2e:ae:4c:48:5a:0d:48:
7a:7a:24:14:a0:38:a0:ed:b9:f6:5e:df:b5:02:55:
58:67:82:74:b5:44:30:97:b4:60:97:01:63:21:53:
4a:9e:8c:3c:e6:fe:b7:53:18:eb:39:0d:10:1b:3b:
7b:f1:3b:8b:b4:22:c4:e9:e4:83:5f:f8:10:33:31:
41:97:5f:3a:b8:60:91:ce:01:83:2c:2d:fd:85:b8:
79:c7:7c:2e:8c:a8:da:43:eb:7b:c2:0b:b2:3a:2e:
a6:5d:71:b2:d0:d9:3d:4a:35:40:81:32:15:2f:d2:
0f:5e:e8:0a:11:87:f2:3d:f5:3e:ec:b1:5b:48:31:
26:f1:ff:60:52:56:36:13:fb:ec:cd:e9:e1:4d:25:
fa:c7:7a:83:fd:97:42:00:5d:57:59:fe:25:65:4b:
f2:db:bf:22:89:81:c0:2f:5a:14:52:e2:aa:65:15:
40:81:24:6b:92:09:11:34:b7:3d:c2:d3:f2:09:9e:
39:a7:af:63:03:62:93:54:9a:85:f0:6e:8c:81:01:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:33:6F:DB:D7:30:64:19:B0:99:56:6C:29:23:A1:16:81:61:38:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA0BFC2095211F094649CAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.74.0/24
154.93.84.0/23
154.93.96.0/24
154.95.64.0-154.95.75.255
Signature Algorithm: sha256WithRSAEncryption
a7:3d:57:19:42:a7:cb:f4:59:62:4b:1f:84:60:d8:ae:d3:ea:
64:75:79:94:f8:6a:16:35:1d:d4:86:d7:43:e7:20:92:aa:08:
8a:1f:88:22:bb:8e:01:75:77:45:e9:78:83:e4:15:a0:26:0b:
f0:b3:07:93:44:58:8d:04:ad:0c:b6:71:92:fc:54:65:54:70:
b0:43:3c:57:b7:b5:c3:26:47:cd:8c:60:2e:74:71:d2:ca:f3:
af:a7:c2:d4:c4:69:4e:08:80:3c:54:11:9f:d9:e2:e1:da:e8:
80:4d:3b:8f:7c:bc:b1:e8:e7:49:c6:91:4a:02:6e:41:1e:53:
e8:22:6a:99:e2:b8:f2:93:f2:82:52:e7:46:19:7f:9e:eb:00:
7c:50:74:d0:e1:e9:dc:0b:cd:6c:c2:a0:5a:97:eb:44:c8:dc:
1c:dc:60:cd:40:74:e3:16:fb:d9:d4:d0:a3:1d:91:c7:1d:d6:
9f:d6:99:15:8d:20:ab:f3:45:93:54:77:af:fd:46:50:3a:12:
95:a6:fb:4f:fa:e9:7e:79:42:f3:4d:da:88:6b:f6:35:02:8b:
2e:32:ea:59:5b:0e:6a:ba:57:f8:33:97:8f:65:64:42:5a:ea:
4f:f2:cb:fc:f4:55:b3:e7:5f:f5:c5:cf:22:b6:1d:b1:cc:9e:
7b:9c:9d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:55 2025 by rpki-client