Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7C8B4480CC811F0BEED1961762E951A.roa
File: D7C8B4480CC811F0BEED1961762E951A.roa (raw, json)
Hash identifier: jLrkZZfpSqbdnjUynbiokgjIXDFtuyyK9ihBOQzzoTE=
Subject key identifier: BF:14:EA:9D:D4:05:4A:FC:07:A3:1E:B6:61:6C:E2:34:E3:B9:58:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7C8B4480CC811F0BEED1961762E951A.roa
Signing time: Sat 29 Mar 2025 18:08:40 +0000
ROA not before: Sat 29 Mar 2025 18:08:36 +0000
ROA not after: Mon 07 Apr 2025 18:08:36 +0000
asID: 7018
IP address blocks: 154.82.8.0/21 maxlen: 24
154.83.192.0/21 maxlen: 24
154.83.200.0/21 maxlen: 24
154.83.208.0/24 maxlen: 24
154.83.213.0/24 maxlen: 24
154.83.214.0/23 maxlen: 24
154.83.216.0/21 maxlen: 24
154.83.224.0/21 maxlen: 24
154.83.232.0/21 maxlen: 24
154.83.248.0/21 maxlen: 24
154.84.182.0/23 maxlen: 24
154.85.12.0/23 maxlen: 24
154.85.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95960 (0x176d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 18:08:36 2025 GMT
Not After : Apr 7 18:08:36 2025 GMT
Subject: CN=67e83728-6f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:74:d0:ea:fc:46:e2:8a:72:d8:a6:77:ff:
df:76:13:48:7f:62:0a:42:88:ac:0b:c4:06:0c:1a:
7a:da:13:7c:0e:8f:7b:92:bf:0f:cf:e7:95:c7:a9:
46:b0:05:02:f6:d0:df:62:68:51:04:fe:f0:79:81:
d8:87:e5:fe:b2:32:6e:57:55:4c:3a:1d:6c:52:8a:
69:dd:2a:83:b8:64:c3:ed:97:8d:72:a1:d1:ef:04:
6a:39:ad:c2:8e:46:ad:20:e5:4f:48:bb:03:2d:f0:
28:a4:bb:72:ee:cd:8e:53:1c:58:e7:7c:8d:f6:7b:
0f:1f:6b:c6:b6:f5:fd:42:2b:f1:2f:71:31:3f:ce:
5d:38:4b:0f:fa:de:33:cc:6d:e5:22:2c:6d:53:e8:
92:da:c7:d0:a8:ca:f9:b9:3f:0b:bb:e4:28:fb:9e:
75:94:34:fe:56:89:cd:35:ad:e3:57:4e:c7:fe:bd:
56:76:85:1f:81:74:62:c4:7b:7e:ed:48:fb:c5:57:
92:68:63:40:1d:f7:32:f7:48:48:09:6b:e7:d3:83:
78:04:b0:4e:de:1e:e2:fa:7e:8d:f2:55:e6:3c:35:
77:25:24:d0:dd:0e:b7:35:8f:a3:7f:63:7e:d0:85:
9f:a2:12:43:ce:18:32:1f:5a:0a:e6:a9:f5:8a:24:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:14:EA:9D:D4:05:4A:FC:07:A3:1E:B6:61:6C:E2:34:E3:B9:58:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7C8B4480CC811F0BEED1961762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.8.0/21
154.83.192.0-154.83.208.255
154.83.213.0-154.83.239.255
154.83.248.0/21
154.84.182.0/23
154.85.12.0/23
154.85.104.0/22
Signature Algorithm: sha256WithRSAEncryption
12:4a:0b:2f:cc:bc:29:0e:24:c2:9a:ae:2c:85:da:b4:b4:14:
17:28:e3:b4:46:25:6b:22:b8:c9:d4:71:1d:6c:60:26:e5:2d:
99:d9:7f:ec:02:5c:e7:e6:5b:2e:4a:3e:f4:71:8f:ec:03:bd:
f2:d8:34:d7:39:cb:94:e4:38:a4:21:f1:0c:82:06:c9:ff:f1:
ef:45:51:51:4f:d6:2e:f2:82:45:d1:80:97:40:3f:6c:1f:2c:
4e:f6:47:dd:1e:79:6f:8d:9b:4d:67:d9:f6:15:b6:63:7b:bc:
33:d3:65:40:80:8b:48:80:2e:03:02:59:c9:e4:e6:e4:c4:e1:
a6:e8:19:4d:5d:dc:55:d8:87:23:70:03:04:e4:05:4c:20:38:
df:46:16:c5:79:24:69:e1:b5:8a:bf:86:13:1e:2e:2c:46:42:
7d:4e:a7:4a:1a:fc:a6:00:d4:59:99:87:9d:32:de:a7:a6:8a:
2f:c5:76:57:34:a0:7e:bf:e5:af:cb:e4:e6:3a:ec:33:44:cc:
69:a3:39:e3:4a:a5:81:03:45:31:88:be:24:b0:a8:aa:f2:87:
b0:64:27:77:72:62:03:98:44:35:68:0d:23:2f:1f:da:3a:33:
48:bf:a4:3b:0b:09:5e:4f:69:35:d1:57:92:f0:48:67:28:27:
27:0b:95:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:20:16 2025 by rpki-client