Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC67168AF8CD11EF8EC43470762E951A.roa
File: CC67168AF8CD11EF8EC43470762E951A.roa (raw, json)
Hash identifier: zishRC/vYi1obgAlkq/BF22IE1HnCw6NZGsRq+iCLrU=
Subject key identifier: ED:CE:9F:A2:5C:66:6D:3E:0C:3D:6C:C7:A9:41:F4:02:E2:82:EF:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017188
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC67168AF8CD11EF8EC43470762E951A.roa
Signing time: Tue 04 Mar 2025 07:53:45 +0000
ROA not before: Tue 04 Mar 2025 07:53:41 +0000
ROA not after: Sun 11 May 2025 07:53:41 +0000
asID: 22773
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94600 (0x17188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 07:53:41 2025 GMT
Not After : May 11 07:53:41 2025 GMT
Subject: CN=67c6b189-b7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:5f:28:ac:fd:2d:05:22:92:5d:69:18:6b:
b1:a0:2c:c5:6a:e0:8b:f3:fd:02:a6:c5:17:85:0f:
a4:ee:21:4b:5f:79:b2:c5:21:bc:f8:a5:33:d7:7c:
96:e9:0d:5d:5f:81:24:88:47:6c:33:23:27:bf:11:
79:e3:b0:04:c9:58:15:9c:5f:df:fe:15:7b:43:18:
84:42:ae:b0:d5:7c:6a:56:27:af:e1:7b:fc:6c:ae:
37:91:6f:88:f6:f9:9d:02:81:78:8a:d3:55:fe:bd:
37:47:89:3c:7e:34:cd:ef:39:18:2b:ee:f2:06:94:
b9:fe:b2:50:c0:69:be:41:6e:8f:7d:76:fe:72:73:
05:8c:50:7c:9a:5d:03:a7:1b:58:cb:e7:ac:e8:c4:
25:b8:73:c2:a9:3c:81:de:e3:97:34:9b:b1:3c:0f:
97:d9:bf:cb:1b:4d:02:e6:7d:91:58:b5:b4:39:32:
57:a0:10:6a:ac:30:b4:37:51:2e:a7:a9:ab:b7:96:
92:20:2f:11:57:2d:ee:83:c2:57:cb:4b:dd:d0:de:
ef:f5:62:10:39:d4:01:03:5d:bd:04:98:d3:ae:34:
60:2b:ed:f8:fa:d7:51:78:33:32:18:76:b7:04:88:
fb:44:46:84:d9:a7:ed:9e:21:1d:05:d4:4a:fa:92:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CE:9F:A2:5C:66:6D:3E:0C:3D:6C:C7:A9:41:F4:02:E2:82:EF:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC67168AF8CD11EF8EC43470762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:64:48:5f:59:45:30:f3:5b:c2:fd:be:bb:04:89:02:1f:0d:
b3:2a:78:ca:4c:c6:d1:a4:aa:6a:1d:c7:97:64:42:4a:a9:44:
1c:16:ba:85:2b:bd:0a:34:8d:89:df:c2:d6:ee:90:8d:43:2d:
e1:50:36:b5:2f:ae:be:43:34:00:3b:5e:d7:c9:12:9a:7d:57:
55:97:37:1d:8a:ec:f3:78:05:e4:fd:18:31:8f:05:d4:cd:5a:
17:38:8d:cf:60:6e:54:f4:04:9c:0d:67:a8:ed:23:86:3b:df:
19:f1:a7:55:a4:20:9a:73:7d:f6:58:5b:e6:51:57:e4:f6:25:
a2:9a:a9:8f:42:a8:d3:11:97:14:77:5b:3b:e1:93:f4:4c:65:
94:e1:e9:e2:92:c8:2f:eb:42:f2:b3:c2:79:29:0b:6a:83:60:
12:26:41:7f:71:6f:92:0c:f1:9e:b5:4d:90:75:a1:5d:28:cf:
9c:87:83:80:9c:89:b3:7e:20:b8:8f:40:19:d2:3b:c3:47:93:
52:af:b7:d0:2a:7b:8b:a2:d9:95:6e:18:c7:4d:d6:dd:e5:f1:
70:67:ef:46:83:65:4b:fc:06:7a:e8:f2:f0:c6:ce:03:12:83:
15:ab:49:bf:45:a0:c6:ab:69:ff:19:d5:2f:1f:ff:93:fe:42:
35:b8:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:45 2025 by rpki-client