Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B780F23A0FAD11F0BC3A907B762E951A.roa
File: B780F23A0FAD11F0BC3A907B762E951A.roa (raw, json)
Hash identifier: ZrATW62Yz1BOMxBybRDj6SkB/Le4XF43+3fKDMcCa9Q=
Subject key identifier: 33:EB:44:C7:22:AB:79:72:84:E8:23:76:FB:D9:D6:EF:71:F1:8C:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017750
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B780F23A0FAD11F0BC3A907B762E951A.roa
Signing time: Wed 02 Apr 2025 10:32:03 +0000
ROA not before: Wed 02 Apr 2025 10:31:59 +0000
ROA not after: Fri 02 May 2025 10:31:59 +0000
asID: 200373
IP address blocks: 154.86.112.0/24 maxlen: 24
154.86.113.0/24 maxlen: 24
154.86.114.0/24 maxlen: 24
154.222.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96080 (0x17750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Apr 2 10:31:59 2025 GMT
Not After : May 2 10:31:59 2025 GMT
Subject: CN=67ed1223-b79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:ea:d7:06:45:d9:a6:5e:6e:b1:70:e1:f0:
e2:08:49:3a:3f:28:73:a3:12:16:e4:d3:5d:41:8e:
44:84:3e:c4:0c:5a:f9:45:bb:c3:a6:6a:ed:1a:af:
1b:c6:17:9e:5b:f0:61:ae:46:52:cd:b7:ce:53:d3:
f1:d6:57:5c:42:a3:3a:ed:c1:8a:36:b4:44:b4:57:
03:b4:4a:3e:26:43:f5:ae:74:90:53:03:e3:6a:be:
21:59:85:7f:79:2e:de:20:c3:94:68:c1:75:1b:a3:
1c:50:13:81:32:bb:75:3b:50:70:d4:89:88:5a:71:
d4:05:47:1e:ff:0c:40:ee:00:d9:86:df:5c:2a:97:
fc:2b:f8:06:c4:e4:86:82:47:4f:5e:e7:91:52:87:
ee:68:88:4f:4e:84:d1:37:37:64:b6:6a:29:05:54:
0a:76:ed:9b:64:9d:36:9e:b7:5b:6a:d7:99:00:41:
0a:e0:3f:f2:1c:07:d3:36:d2:8a:d4:96:e6:f4:10:
80:98:2c:ea:0c:fb:d2:84:c5:77:5c:90:f8:7c:fb:
c6:15:4e:1f:3e:65:72:13:76:29:90:c5:53:4c:5c:
89:cf:a9:ef:41:fc:f4:99:16:9f:37:70:75:5b:af:
ac:d0:96:0f:df:d5:c7:ca:12:49:b4:2a:79:2d:fb:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EB:44:C7:22:AB:79:72:84:E8:23:76:FB:D9:D6:EF:71:F1:8C:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B780F23A0FAD11F0BC3A907B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.112.0-154.86.114.255
154.222.132.0/24
Signature Algorithm: sha256WithRSAEncryption
68:69:a6:fd:65:81:a9:22:df:fa:dc:d8:96:22:8b:58:89:63:
0c:16:fd:28:c2:7d:90:d6:fe:f1:3e:a1:89:c5:60:c6:80:2a:
20:1d:a4:b9:8d:ef:09:7a:64:58:69:6e:4d:7b:e7:be:fe:9c:
59:db:5b:06:60:01:0f:2e:e5:7b:d2:8c:07:aa:44:05:94:bd:
55:d6:3a:5a:14:cb:d9:e0:17:ef:35:00:3b:3d:98:98:14:03:
46:1f:3b:ca:ac:30:05:26:85:f9:ca:13:e2:30:07:5a:24:c6:
b7:2f:07:75:43:cb:f5:07:b4:26:a8:49:f9:d0:53:76:9d:9c:
7d:3c:fd:68:d0:e2:b8:35:5d:80:4b:fb:23:cd:39:71:8d:c7:
59:38:86:94:b9:a6:7a:7e:82:b4:ed:78:f8:b0:f5:9b:ff:8a:
af:17:cc:00:5e:a6:ec:6f:40:35:03:65:d5:24:c9:2d:54:91:
35:31:18:d2:f9:62:b9:52:21:76:a5:6c:6e:49:51:d4:ac:58:
6c:e6:3b:33:db:32:0c:d8:26:9c:23:44:8b:69:ce:6a:74:4f:
34:1b:8c:f3:9b:c4:a7:74:b6:1b:f9:e8:60:31:40:d6:52:da:
67:05:f2:84:98:67:cc:c8:3d:1f:d2:2b:19:a7:ca:1e:62:98:
36:9d:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:54 2025 by rpki-client