Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26B8782041111F0B90ECC83762E951A.roa
File: E26B8782041111F0B90ECC83762E951A.roa (raw, json)
Hash identifier: /eMMdS0XS39GNkhVlKFqQhRJ0gkm3LcF9Ag2cCuQ2OE=
Subject key identifier: ED:E4:0D:1C:C5:5D:68:BC:72:42:EB:85:D4:B8:5D:D7:0D:73:D7:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26B8782041111F0B90ECC83762E951A.roa
Signing time: Tue 18 Mar 2025 15:58:51 +0000
ROA not before: Tue 18 Mar 2025 15:58:47 +0000
ROA not after: Mon 05 May 2025 15:58:47 +0000
asID: 44559
IP address blocks: 154.209.143.0/24 maxlen: 24
154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95424 (0x174c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 15:58:47 2025 GMT
Not After : May 5 15:58:47 2025 GMT
Subject: CN=67d9983b-4dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:01:a8:fe:be:46:59:60:74:29:93:6d:9f:
56:67:07:71:fa:cd:f9:dd:0b:74:e5:cf:ea:5c:37:
d1:76:2d:67:52:d9:00:c0:51:2c:48:0a:89:a1:f5:
6b:3a:95:c7:00:ea:fa:8b:1e:dd:90:1e:fd:6b:7a:
97:56:57:90:9f:34:b8:2b:ef:a1:c0:14:f1:9d:a5:
29:cd:ef:1e:92:dc:bd:c3:6d:85:92:b4:c3:c7:34:
b9:a0:18:55:90:25:ae:42:d6:c0:7a:b8:f5:1c:3b:
bf:91:21:fd:f0:df:71:9c:48:20:9c:03:92:b1:16:
df:ad:5b:6a:3f:c8:c3:48:9d:ae:bd:2b:e4:25:a2:
95:79:1d:5a:1c:40:85:8b:dc:04:d7:05:8c:24:32:
35:81:5b:3e:f6:81:f3:b9:58:f4:9f:9a:a8:47:e0:
7f:32:8f:31:d0:e8:ed:c5:ed:d8:0a:f4:12:a4:d7:
21:ce:6c:22:78:87:93:ee:b5:de:8e:b2:dd:29:38:
b8:b5:d6:1b:e9:ab:be:f3:3c:6a:2e:69:9e:e0:32:
0d:0a:16:b1:eb:83:f9:ff:fb:d9:7c:a4:82:bb:90:
15:06:f8:25:63:39:f2:28:3a:8a:27:f0:51:55:4d:
af:e4:5d:c3:e3:a4:6d:52:8a:2f:36:6a:39:f0:9b:
ba:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E4:0D:1C:C5:5D:68:BC:72:42:EB:85:D4:B8:5D:D7:0D:73:D7:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26B8782041111F0B90ECC83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.143.0-154.209.145.255
Signature Algorithm: sha256WithRSAEncryption
cf:99:e5:40:20:39:0d:af:d7:f5:77:0a:19:c5:7a:5c:34:bd:
95:59:4b:73:eb:a3:ec:cb:20:72:08:85:07:e1:d2:62:37:8e:
69:f5:31:1d:d6:c1:d0:47:c3:38:a5:6d:8b:d3:f2:a4:f0:6f:
8a:91:d3:2b:cb:56:51:38:bd:f1:d6:07:12:22:f9:b0:15:ea:
37:e0:0b:9b:33:cc:c8:6e:3d:22:b0:a8:c9:b1:8d:b4:8e:8f:
8c:f4:9e:31:dd:17:c9:61:2e:97:2f:5e:42:64:3b:a3:2f:83:
08:81:17:f4:6a:8b:59:5f:8b:a8:e5:46:7b:1e:f9:ae:3d:3b:
33:cb:a5:c8:11:84:7c:b3:e3:4e:22:9b:97:02:a9:df:f5:37:
26:32:43:70:08:a8:ff:9d:40:33:18:4b:78:9d:ea:e2:e6:38:
f6:ab:a0:99:ec:63:53:5d:e6:3f:8b:c8:b0:00:9d:e8:98:75:
7f:7d:61:40:b4:af:e2:93:00:b0:88:a8:cd:f0:0f:bd:c3:85:
a9:ac:0d:b0:44:29:e4:5e:44:f6:86:9a:d5:28:e1:89:f4:05:
56:e8:28:a2:c7:b0:3b:60:da:73:b2:ea:b4:56:d8:5b:84:94:
95:71:df:1c:8b:50:d1:fe:0f:22:fa:db:c0:e6:ed:c9:35:a6:
ee:e1:a0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:14 2025 by rpki-client