Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5001AE095B11F097FF9E65762E951A.roa
File: 9F5001AE095B11F097FF9E65762E951A.roa (raw, json)
Hash identifier: i7SXAxokqCspShy0W6EhkdepPg+EfowMTRfa8q+G9+Y=
Subject key identifier: E9:06:D8:31:3A:AD:7A:8A:56:F0:22:F4:5F:52:57:1E:38:F0:45:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017610
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5001AE095B11F097FF9E65762E951A.roa
Signing time: Tue 25 Mar 2025 09:29:17 +0000
ROA not before: Tue 25 Mar 2025 09:29:13 +0000
ROA not after: Thu 24 Apr 2025 09:29:13 +0000
asID: 54600
IP address blocks: 154.199.208.0/20 maxlen: 24
154.199.224.0/19 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95760 (0x17610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 09:29:13 2025 GMT
Not After : Apr 24 09:29:13 2025 GMT
Subject: CN=67e2776d-94d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:bd:b2:9f:b0:3f:2a:b7:17:a6:b3:2e:60:
54:2d:c1:7c:ec:bd:06:6e:3d:68:02:1f:57:21:b7:
5a:cf:d7:77:db:ea:82:92:63:bc:e9:31:34:73:e2:
ce:99:ed:27:07:e9:a0:d6:7b:55:96:8c:b0:a8:60:
b3:a1:b4:98:80:23:e7:9b:0e:9a:e0:c7:43:15:f9:
1f:5d:88:5b:b3:99:03:d1:b4:bb:8b:f4:db:dd:99:
49:69:f8:eb:ca:50:4a:94:e5:97:88:7f:3b:4c:65:
a5:d2:2a:f5:e6:76:51:e6:e0:ef:9e:36:32:2e:f3:
36:7b:28:32:3e:d1:e0:67:3f:ce:86:5f:8f:95:40:
68:4b:39:59:72:77:2e:48:dc:e9:17:1f:00:07:32:
44:36:20:cc:8f:28:42:01:ae:9a:0f:54:eb:c1:de:
55:02:17:2b:2b:79:50:54:e5:d0:58:bc:5f:ab:08:
f6:08:40:5c:40:ef:89:62:5b:b7:71:83:9a:d9:71:
10:c6:bb:e5:53:2f:ec:e0:9f:23:5e:6c:f5:b9:75:
20:08:3f:95:59:99:3e:8f:1e:cc:07:da:bc:17:cd:
5c:9d:8d:c7:a4:f9:73:18:77:05:eb:57:1f:35:81:
e9:40:d8:84:a2:07:a9:a7:35:49:9f:6b:63:95:1a:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:D8:31:3A:AD:7A:8A:56:F0:22:F4:5F:52:57:1E:38:F0:45:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5001AE095B11F097FF9E65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.208.0-154.199.255.255
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
b5:16:84:51:0b:dd:40:36:0f:52:e1:42:c2:ec:18:41:b5:95:
6e:fd:a9:ac:17:4e:e4:92:eb:d9:01:4c:9c:93:2a:bc:60:a5:
a8:27:98:2b:9b:62:62:2e:2d:a9:33:54:13:08:4f:54:dd:a4:
5f:1f:1e:fd:5d:fc:02:a1:01:c6:aa:ba:2b:0e:ec:3b:87:a7:
d9:0e:61:e9:89:51:ae:b3:4e:b4:56:d4:2d:8e:fe:c2:d0:4f:
e6:af:e5:13:45:16:f8:bd:94:ff:c0:72:5d:b8:27:cc:c3:10:
01:d9:e9:75:f3:dd:03:3d:0a:a8:2b:3d:79:19:fc:82:ca:1f:
65:fd:8f:e1:3e:27:3b:21:d1:c1:1a:83:34:fa:5a:02:5a:17:
5c:98:98:47:55:a3:d3:b9:a5:81:97:b7:c7:9a:29:dd:d7:e3:
b6:db:21:a8:21:ef:03:5b:32:26:70:43:a0:0b:2d:26:21:b9:
f4:c3:e8:6c:a6:31:f1:93:e6:fb:c9:0d:9c:1d:e7:61:6e:20:
ff:a6:ae:35:88:35:09:63:e2:46:09:f1:9f:bc:53:a4:f5:97:
20:e3:d3:ba:a8:bb:62:b6:d7:80:63:10:9f:05:36:15:c4:0e:
6e:5f:3b:b4:f8:2d:de:bb:88:82:39:70:e3:87:dd:91:e7:41:
42:12:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:47 2025 by rpki-client