Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E489CC34F8D311EF9855CF98762E951A.roa
File: E489CC34F8D311EF9855CF98762E951A.roa (raw, json)
Hash identifier: PgKNKp74jo/jSPQvTpI+PpyVS87PrZs9qqqOQrcdJG8=
Subject key identifier: FB:61:1F:CD:E7:A4:CD:CC:44:62:31:61:49:1D:36:88:62:2B:72:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01718C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E489CC34F8D311EF9855CF98762E951A.roa
Signing time: Tue 04 Mar 2025 08:37:23 +0000
ROA not before: Tue 04 Mar 2025 08:37:18 +0000
ROA not after: Sun 11 May 2025 08:37:18 +0000
asID: 399989
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94604 (0x1718c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 08:37:18 2025 GMT
Not After : May 11 08:37:18 2025 GMT
Subject: CN=67c6bbc3-719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:d8:c7:d2:57:2b:2a:25:7e:e9:f5:41:80:
94:f7:91:63:f7:26:c3:e5:2c:d6:77:a6:1b:d2:90:
da:a5:ff:d1:53:56:99:91:b7:75:81:17:66:06:b3:
0b:f6:fd:b0:58:37:a2:61:ce:0b:2f:00:4d:87:74:
2e:d5:3b:58:a6:db:14:38:da:21:a6:fc:4c:d3:67:
47:e0:37:9c:46:50:5d:ad:b8:e4:2f:c8:e8:75:d6:
c9:8c:4b:bb:5f:bb:61:1a:09:3b:35:c8:06:ad:4b:
7a:11:3d:c2:9c:65:7e:c7:30:36:ad:b3:40:ce:df:
f4:f7:50:de:93:ef:a6:8b:46:5c:1a:69:e8:03:be:
1c:43:d6:50:2a:88:17:2d:8f:cf:3c:b6:57:71:10:
59:01:7d:0d:79:99:5c:28:94:48:03:fd:78:4f:98:
e2:90:8f:00:49:d7:c4:f5:46:10:4d:02:ab:e2:8f:
d0:4a:89:7d:9d:ed:c5:b7:d9:14:a7:85:c4:ef:31:
34:67:52:8e:8c:29:f9:61:a9:a5:c5:66:89:17:bc:
7b:18:77:4c:a9:80:80:25:89:2b:ae:88:0f:ee:56:
62:06:6e:79:a3:37:b7:64:02:88:2a:6b:4a:17:61:
e0:d2:66:11:b8:88:b5:a5:0d:10:24:d9:8e:a8:b6:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:61:1F:CD:E7:A4:CD:CC:44:62:31:61:49:1D:36:88:62:2B:72:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E489CC34F8D311EF9855CF98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
53:8d:dd:0a:44:c8:82:79:91:83:8f:07:62:e6:da:1c:5f:b5:
c6:61:f3:d6:ff:03:4a:5b:75:b4:72:8a:82:23:59:68:c3:f4:
b6:55:4d:c6:26:c2:51:35:06:9d:97:35:49:ae:e1:68:02:49:
8a:63:97:96:fb:b9:8e:4f:b9:2a:0c:81:b3:3c:bd:9b:7c:a0:
2a:5a:4a:01:70:76:e9:23:3c:6e:fa:5c:72:7a:72:1b:1c:66:
d4:70:62:d7:eb:1b:35:58:fc:03:02:24:b9:12:5f:39:3c:da:
29:41:dc:4d:b0:22:27:43:d0:2a:eb:fc:f3:6e:c3:8d:97:ea:
c4:f1:ee:e4:0f:aa:65:d3:52:b3:ff:f4:31:f1:b7:a3:3d:f5:
57:4d:69:00:bc:2b:96:1f:72:be:85:87:44:a2:e7:7a:f4:d2:
d5:14:b5:70:0d:bb:21:a7:00:e2:79:92:89:99:62:be:ac:b8:
ce:1b:28:1d:1e:0b:30:5e:5c:78:9a:6c:30:21:87:46:65:3b:
eb:d1:1b:17:3b:75:97:fa:3a:e1:3a:25:2a:1f:0f:26:e5:e3:
d2:a3:ba:b5:28:66:31:6d:41:dc:56:aa:51:3d:d0:a5:1c:53:
34:ab:91:e5:ea:01:f0:0a:3e:24:fe:5c:fa:7a:c7:79:55:ea:
16:a9:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:51 2025 by rpki-client