Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6BC85A007B411F099EC7554762E951A.roa
File: A6BC85A007B411F099EC7554762E951A.roa (raw, json)
Hash identifier: /djbQ24Pi+Am46sODtj4kg96eEiL9TL459vFDYswKTI=
Subject key identifier: BB:39:51:A9:3B:5C:05:64:56:6C:54:66:B9:E8:59:D8:69:41:21:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6BC85A007B411F099EC7554762E951A.roa
Signing time: Sun 23 Mar 2025 07:01:32 +0000
ROA not before: Sun 23 Mar 2025 07:01:28 +0000
ROA not after: Sun 29 Jun 2025 07:01:28 +0000
asID: 29802
IP address blocks: 154.84.128.0/24 maxlen: 24
154.86.118.0/24 maxlen: 24
154.91.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95669 (0x175b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 23 07:01:28 2025 GMT
Not After : Jun 29 07:01:28 2025 GMT
Subject: CN=67dfb1cc-e3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:9e:57:bd:de:41:52:33:5d:4a:b7:6a:cf:
06:ce:2a:ba:c2:28:4f:8d:76:69:1b:ee:88:47:51:
cc:32:a6:4f:ae:6a:4f:04:25:fa:75:1d:6b:53:d8:
6c:34:07:64:b7:28:3c:09:22:05:c1:08:62:47:b2:
5d:0c:5b:1e:66:27:04:f2:30:a7:0e:63:3c:3c:8c:
10:3b:bd:d3:4a:97:ea:c4:ba:f2:7c:aa:77:b5:df:
26:8d:5b:36:67:b3:2e:40:37:53:07:61:84:01:fb:
cc:a1:c6:85:7c:7c:15:a9:55:ab:55:93:85:6e:4e:
c3:dd:af:86:65:a9:15:13:3b:1d:9b:47:a0:5c:63:
c8:6e:ea:e3:64:4d:a7:ef:f2:18:6d:45:e8:1a:46:
5a:7a:7f:3c:b5:6d:b8:fb:02:40:ad:fc:b8:34:aa:
11:10:69:9c:7e:2d:6c:93:30:c5:fc:91:46:9b:54:
ef:59:0a:76:4d:64:7e:41:b6:52:79:d7:3e:bc:77:
24:cb:98:21:70:58:ff:60:02:5c:7e:32:bd:21:46:
d2:5c:ac:fb:1c:e9:fe:89:06:59:02:03:ef:95:bd:
9f:21:6a:ec:0d:3a:a2:43:11:ec:e6:cd:90:a9:89:
83:43:e0:0b:87:0f:88:c0:96:b0:55:b9:64:ba:6e:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:39:51:A9:3B:5C:05:64:56:6C:54:66:B9:E8:59:D8:69:41:21:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6BC85A007B411F099EC7554762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.128.0/24
154.86.118.0/24
154.91.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:39:a6:8d:54:6c:ca:8d:67:5a:eb:25:a8:cb:a6:a1:8e:96:
49:cc:9a:72:c3:77:ca:a4:6f:da:2d:e0:6c:80:e3:81:26:73:
67:56:a8:3c:86:0e:34:c7:1b:e2:dc:89:19:84:b1:c6:f8:fb:
15:9a:82:ed:38:5b:03:70:3a:fe:ed:49:8a:d5:67:56:6a:b1:
0c:3b:c5:c2:c7:ae:bd:bb:7c:2f:f0:2b:e3:e1:ea:1a:2e:cb:
01:80:79:4c:e2:a4:cd:f5:6d:0a:d9:a9:28:e6:17:df:86:d9:
55:60:f9:5f:fb:19:cc:61:f1:43:1c:8c:6f:af:3f:1f:69:8d:
ca:be:f9:86:8f:06:50:31:94:2d:94:09:79:0a:bb:5a:99:e3:
79:61:bd:54:73:a4:75:3c:7d:31:63:1c:59:7e:ff:d4:bd:02:
23:72:2d:cf:3b:44:42:8c:2b:b3:97:62:33:6b:ff:d6:75:10:
d5:3d:c9:28:40:d3:e5:39:f4:63:30:9a:9a:ce:62:ff:44:0d:
4f:4e:35:84:88:62:ec:da:14:c4:98:b0:7d:39:31:d1:e0:b1:
8e:cf:20:24:03:93:e2:74:5c:2e:f4:8c:ff:8f:6a:d6:dd:cd:
af:a0:55:19:0a:b0:07:d2:e2:66:ea:a6:ef:84:7f:20:81:d8:
66:24:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:12:58 2025 by rpki-client