Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDE28C4CF82D11EFA600C6AA762E951A.roa
File: CDE28C4CF82D11EFA600C6AA762E951A.roa (raw, json)
Hash identifier: mNAaTkaQnTwMpxWElje+NDJEuhekRU/TCYollA7XNf4=
Subject key identifier: 3B:F7:85:64:E1:EB:7F:52:5D:E6:5B:A1:61:4E:21:D6:04:D7:40:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDE28C4CF82D11EFA600C6AA762E951A.roa
Signing time: Mon 03 Mar 2025 12:48:28 +0000
ROA not before: Mon 03 Mar 2025 12:48:24 +0000
ROA not after: Wed 30 Apr 2025 12:48:24 +0000
asID: 138915
IP address blocks: 154.94.66.0/23 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94379 (0x170ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 12:48:24 2025 GMT
Not After : Apr 30 12:48:24 2025 GMT
Subject: CN=67c5a51c-c5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:46:1d:95:96:02:dc:1f:5d:ac:4d:a3:60:
9b:68:98:52:56:04:cb:91:de:4e:b5:01:85:6c:e6:
2b:c3:ce:09:f2:6c:57:2c:64:da:9b:1c:bd:a5:1f:
d9:cc:b8:36:9f:e0:3b:04:3f:b3:01:97:77:75:50:
8b:6a:eb:73:91:49:6d:c6:5e:07:c9:27:df:3c:3b:
61:38:30:01:e2:54:a1:76:92:94:52:17:3f:92:98:
59:54:43:9e:2d:cf:df:2e:8d:11:12:86:c9:10:7f:
b0:ea:20:45:49:9c:aa:95:16:4b:46:40:5c:15:cf:
bc:e3:ab:fd:46:05:bd:5f:5f:a2:fd:f6:0f:42:55:
c8:f0:24:4c:f2:c7:3f:54:9c:32:f3:3f:31:73:2f:
6f:9f:be:bb:35:37:14:18:4d:cd:6e:33:0f:69:81:
72:76:60:1d:cf:59:b9:63:ff:bb:9c:81:ee:05:f4:
c6:e6:98:20:2d:1d:89:7f:28:c1:c3:14:a9:26:c4:
1b:86:a8:ac:8e:d4:8f:04:ff:fe:00:96:41:a4:04:
80:20:81:c4:0b:0b:df:b4:1f:cb:c5:9e:65:f9:53:
7a:55:61:ed:4f:19:42:ac:28:90:b7:c6:72:98:80:
09:8e:b3:d3:27:ab:3c:01:46:a6:c5:ce:bc:54:b3:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F7:85:64:E1:EB:7F:52:5D:E6:5B:A1:61:4E:21:D6:04:D7:40:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDE28C4CF82D11EFA600C6AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
154.94.86.0/23
154.94.116.0/24
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e3:bb:d2:c4:6d:20:90:70:10:c0:13:fb:28:05:98:0a:fb:
78:0a:96:3f:31:f2:89:f9:4d:87:a7:28:8e:7f:c4:64:1b:be:
01:90:3c:cc:59:03:17:7f:77:e5:76:b7:8f:b8:3a:31:d2:a6:
1b:b9:20:7d:9a:e0:e9:8c:09:fb:44:a0:1c:5b:e6:f7:da:6b:
c7:53:00:95:33:b6:57:e3:9d:bb:e8:ef:ca:65:c6:a4:6e:29:
96:b8:79:55:c0:1b:d5:d0:e8:1b:25:9b:22:d0:1c:76:08:dd:
ff:a9:bc:f0:8f:33:70:ec:e4:e5:06:4d:4f:71:ee:f4:25:57:
1d:80:ee:7a:39:72:ca:4c:eb:94:35:cf:f8:de:e5:fd:20:12:
1c:5c:cb:8c:c1:ce:84:81:7c:29:0e:8f:37:15:53:c7:be:d8:
a1:04:82:74:ed:56:61:bf:b7:8b:2d:ba:03:0e:27:00:64:98:
3d:7d:27:76:6e:d2:14:11:fc:6d:9c:90:c6:e5:1a:36:e6:99:
a6:07:09:13:6c:2d:f2:87:75:14:32:dd:a2:4b:82:eb:d4:0c:
5a:61:33:1a:7a:92:bf:b2:57:d7:f2:d8:01:fa:e7:85:ad:fb:
88:7a:50:d8:e8:99:7d:71:56:41:a4:a6:60:c7:f7:7d:ec:8f:
b7:6d:3a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:19 2025 by rpki-client