Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E71FDF6E0A2711F084554147762E951A.roa
File: E71FDF6E0A2711F084554147762E951A.roa (raw, json)
Hash identifier: brUOvjahn+/EDE2WUirc82XhIo2D5gD6AGCUx+JJN24=
Subject key identifier: 7D:7C:23:35:8F:47:19:C0:B2:38:39:44:E9:E8:0D:CD:AF:82:C1:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01766F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E71FDF6E0A2711F084554147762E951A.roa
Signing time: Wed 26 Mar 2025 09:51:35 +0000
ROA not before: Wed 26 Mar 2025 09:51:30 +0000
ROA not after: Fri 09 May 2025 09:51:30 +0000
asID: 205125
IP address blocks: 154.203.192.0/24 maxlen: 24
154.203.193.0/24 maxlen: 24
154.203.194.0/24 maxlen: 24
154.203.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95855 (0x1766f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 09:51:30 2025 GMT
Not After : May 9 09:51:30 2025 GMT
Subject: CN=67e3ce26-3ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:a5:06:44:e1:93:c3:3e:91:02:a4:3a:42:
10:01:2f:d1:b8:0f:be:78:f4:d8:d1:9e:64:53:cf:
b5:75:19:62:df:1d:ca:b5:a5:51:eb:4a:93:7c:e7:
57:a7:b9:f5:4f:74:d9:2a:75:f3:3c:d5:91:1c:e1:
84:f8:52:4a:c1:72:b3:d9:e9:f3:db:8a:8d:ca:b4:
f4:63:c5:e4:13:09:0d:49:00:49:7f:ac:04:36:d6:
ae:9e:76:40:21:32:53:a9:74:a5:6c:fc:5e:4f:4e:
79:31:15:c3:50:0f:f3:2b:5d:93:e6:d3:5f:6b:d8:
f5:0a:99:29:11:d8:e9:b4:42:8e:9d:8d:86:bc:36:
24:87:25:39:95:93:b4:95:38:57:21:ef:16:37:cd:
34:1f:11:92:01:3d:cc:72:ba:27:82:24:ec:be:fc:
f3:af:a4:f7:e2:21:36:5f:65:56:c8:68:b0:5b:a0:
f9:1c:b8:89:98:6c:91:be:9e:ea:d7:ee:48:f2:7f:
e5:58:a8:1d:bb:74:c0:6d:13:94:f5:82:21:ea:5f:
86:45:df:26:a9:19:52:b1:0e:d1:34:09:f7:df:55:
6c:5b:08:09:aa:1c:c5:21:a0:73:3e:fa:23:3c:78:
61:17:42:cf:8d:ff:63:4f:df:22:ae:56:82:64:34:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7C:23:35:8F:47:19:C0:B2:38:39:44:E9:E8:0D:CD:AF:82:C1:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E71FDF6E0A2711F084554147762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.192.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:ec:32:63:68:b6:dd:94:3f:f7:8f:2b:54:f1:29:ea:fd:05:
df:a1:54:83:ee:95:ee:8f:7e:11:59:e9:16:ef:0d:63:4c:69:
35:94:ca:ff:a3:6b:f4:11:61:95:72:3e:6d:9e:03:51:1d:25:
c8:76:64:89:ba:08:58:22:67:25:4e:88:70:db:a8:2f:af:b1:
c0:0d:aa:4b:c8:2c:bc:30:b9:24:80:50:1e:43:4f:0b:0c:fb:
de:4c:04:c8:69:91:45:ba:23:2d:f0:dc:b1:99:22:b2:38:d1:
cc:35:a1:53:37:02:91:23:67:54:81:e9:d3:31:18:71:ea:18:
58:62:e9:46:39:81:1d:0f:91:1b:92:a0:8c:db:6d:3d:37:03:
c5:42:e8:5f:e1:12:7b:b1:d3:2c:18:13:58:24:38:8d:fa:c0:
87:69:65:14:38:07:71:25:03:40:3c:0a:15:11:1a:06:b4:89:
b0:42:cb:f9:8e:b8:d8:7b:16:bd:b2:6c:83:7f:32:40:77:64:
fb:81:30:f6:11:1f:3a:63:71:d4:f1:d9:50:d2:16:bb:74:4d:
d5:75:2a:56:40:f8:1a:6b:a0:1f:3b:05:24:f2:c0:f8:8d:96:
e6:6a:40:e2:01:98:d4:8a:38:f0:94:da:71:2e:9a:89:5a:18:
0a:80:dd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:49:24 2025 by rpki-client