Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0E72A64F8D411EFA15BB39D762E951A.roa
File: C0E72A64F8D411EFA15BB39D762E951A.roa (raw, json)
Hash identifier: UFIG40U8fMU1tkMpORKsFFZSq609jn9q9VZC3/r9oRQ=
Subject key identifier: 06:48:65:AC:1D:C2:32:97:F9:CE:16:84:A8:74:88:B7:33:68:63:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01718E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0E72A64F8D411EFA15BB39D762E951A.roa
Signing time: Tue 04 Mar 2025 08:43:32 +0000
ROA not before: Tue 04 Mar 2025 08:43:28 +0000
ROA not after: Sun 11 May 2025 08:43:28 +0000
asID: 7029
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94606 (0x1718e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 08:43:28 2025 GMT
Not After : May 11 08:43:28 2025 GMT
Subject: CN=67c6bd34-813f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:b2:2b:7e:47:08:d3:b8:39:a1:80:6c:9b:
61:23:46:1f:90:be:e0:a8:90:9a:33:15:51:15:5a:
6b:0c:b7:2e:3e:b4:1d:79:c5:98:d0:bc:ee:21:f2:
d0:f2:6c:51:ce:de:54:89:e6:ef:03:d1:99:e0:9f:
11:70:33:54:7a:c5:0c:d3:36:1a:5e:4c:c5:cc:fa:
2c:f7:3c:2d:6f:8c:36:77:c1:a4:d1:20:f2:2a:0f:
83:5e:12:f6:f1:70:2b:26:be:ea:1f:7d:a9:00:1c:
7e:59:a0:7c:3d:55:16:0c:c6:7f:a2:e9:4a:c1:d8:
5c:c3:89:4e:f8:03:d3:0e:61:27:71:da:77:d9:61:
70:00:8d:e1:2d:35:e0:7c:c2:50:4b:1c:c2:58:21:
76:3d:22:f8:2a:22:f8:da:7c:40:08:23:76:70:da:
63:1f:49:37:4c:d5:ae:61:fd:bf:13:b6:74:b1:3b:
3b:64:5e:c3:65:03:ea:eb:28:ce:59:3c:65:6c:c4:
4a:65:21:a5:cc:a5:93:b1:e2:d1:a2:40:01:50:65:
76:b2:ef:36:fd:86:66:f1:c8:73:31:8a:ad:82:d9:
79:fa:50:09:64:53:a8:32:e4:2a:df:46:3d:44:63:
d9:99:fa:f2:40:77:70:5e:6f:6f:39:33:5b:b7:cf:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:48:65:AC:1D:C2:32:97:F9:CE:16:84:A8:74:88:B7:33:68:63:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0E72A64F8D411EFA15BB39D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:f4:57:f8:bb:41:67:26:d2:d1:54:2d:d8:5a:df:b9:64:b2:
33:8e:33:b1:66:41:07:17:47:a7:ed:88:3c:34:48:80:7b:3d:
22:f1:e1:5b:3a:ab:ba:5a:93:35:ac:a3:a1:69:f3:16:cd:f3:
ea:40:e1:6f:3c:ea:fa:5d:08:ff:92:c8:db:d2:87:7a:16:3b:
9f:e9:6d:17:73:17:cf:17:11:6a:97:76:29:91:e0:05:b5:07:
cf:46:4d:a5:5d:7a:bd:35:af:48:e8:39:6b:44:ba:cb:c2:d2:
b8:61:23:12:39:d4:5d:db:92:9e:d6:84:f9:e6:30:b8:47:7d:
c7:66:12:17:43:e9:af:9b:80:a7:02:af:a7:d1:bd:04:59:2e:
d1:8b:fb:48:d9:82:c8:06:14:18:8b:52:63:9e:91:1d:2c:38:
de:35:da:d5:e0:fc:1c:e4:cb:a6:6d:fc:69:89:f6:35:11:83:
68:ec:4a:c2:2a:10:f0:cf:ca:d8:6f:84:e4:81:f8:95:8c:d2:
aa:4c:ad:9e:00:c2:dc:70:b0:29:4e:9e:b9:29:2a:25:22:bc:
e0:fb:45:f4:cf:7e:9b:a6:37:48:bb:a3:8e:68:50:ff:80:e2:
48:62:c4:ce:c4:57:70:7d:20:5e:f3:e0:89:c1:1e:46:d8:5c:
e6:c3:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:32:27 2025 by rpki-client