Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E857F2BCFF1F11EFA760CD52762E951A.roa
File: E857F2BCFF1F11EFA760CD52762E951A.roa (raw, json)
Hash identifier: dGX+3604Pp6oAUvxzwImfVjT414Zn9QwLAIuLGH6dn0=
Subject key identifier: 27:CA:16:A2:1A:60:4F:F8:27:44:52:1F:E9:42:27:88:3C:9C:36:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E857F2BCFF1F11EFA760CD52762E951A.roa
Signing time: Wed 12 Mar 2025 08:56:38 +0000
ROA not before: Wed 12 Mar 2025 08:56:34 +0000
ROA not after: Thu 24 Apr 2025 08:56:34 +0000
asID: 40065
IP address blocks: 154.202.118.0/23 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95165 (0x173bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 08:56:34 2025 GMT
Not After : Apr 24 08:56:34 2025 GMT
Subject: CN=67d14c46-1a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:34:76:d3:35:f6:45:24:6a:36:91:78:bc:
0d:01:91:d5:36:fe:5c:1e:d3:70:e6:08:8d:0c:23:
64:d2:dc:c0:c6:c2:f5:52:ed:4a:e1:cd:96:5a:76:
56:91:19:85:5f:35:e4:fa:f6:f0:64:1d:a1:5f:31:
8c:d6:ec:17:96:e6:58:66:4b:e6:48:48:7a:68:b5:
b4:fa:39:e7:87:ef:6d:96:42:d1:5d:12:83:05:05:
be:f1:01:35:4c:80:f5:46:ff:a4:34:11:71:38:17:
07:6b:3d:1b:4a:db:49:ab:52:34:12:85:d5:5e:0d:
3e:0e:19:7d:70:6e:a1:09:cc:c7:57:9c:6a:a3:b8:
77:24:62:21:7a:b3:8a:0e:d3:f3:46:9b:2f:3d:8b:
d8:72:01:31:6d:3f:50:2a:a1:d6:9a:68:71:37:fc:
7b:d5:bb:78:a6:e8:16:26:d7:ab:c4:d4:eb:0c:8a:
49:ca:04:fb:42:8f:3f:cc:bb:06:a5:63:10:75:ee:
76:b3:be:32:ff:8d:9a:8b:54:1f:13:e5:2f:01:1a:
5b:da:62:07:d4:39:e3:73:b5:e9:ca:0b:a4:c4:b1:
80:b1:bc:ad:59:f7:21:01:3a:ab:ad:c7:11:30:da:
27:9e:f8:e2:05:da:85:f2:57:f1:d4:9c:2d:cd:26:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CA:16:A2:1A:60:4F:F8:27:44:52:1F:E9:42:27:88:3C:9C:36:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E857F2BCFF1F11EFA760CD52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.118.0/23
154.217.240.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:af:70:00:0e:7f:d5:4b:3d:20:67:f3:ba:bc:55:62:de:51:
34:2f:2f:6f:f2:06:32:6b:d4:77:0a:d2:d5:8f:ae:f0:7f:b0:
0f:82:08:ea:0a:e5:1f:2a:38:c8:d9:6e:a7:2e:f0:aa:fd:14:
16:c8:0e:9b:e7:48:a2:bb:ce:ee:b8:1e:29:fe:2a:69:c8:78:
1a:74:43:4b:40:b1:e3:4b:82:ca:85:6d:05:a1:8e:9b:7d:1f:
e8:d9:88:4c:76:00:95:e5:2f:c1:58:bd:2b:2b:69:10:d0:66:
e5:8e:9f:36:d0:e1:c3:e2:d6:e5:ef:39:9b:d4:f9:ff:be:ab:
4f:11:e9:23:ca:e0:53:f5:0c:e8:bf:13:0f:6a:be:cf:c8:0f:
07:72:56:3e:4c:3b:cf:90:b6:2d:a1:d3:a7:39:77:8f:2b:10:
88:dc:59:e1:ce:c5:ac:af:40:27:cb:2f:a9:9a:74:32:14:55:
5f:8f:44:5c:e7:ba:69:79:0b:93:87:10:9d:81:d7:65:25:a4:
9f:b8:47:82:68:fc:99:ab:72:3a:08:7e:04:5c:e7:8f:33:0b:
c2:5a:b3:5b:0d:ec:5a:3d:98:67:4d:e2:ac:1e:65:e1:96:d5:
27:97:30:39:9b:3b:e5:69:d7:7e:2a:92:57:0d:3e:eb:4f:f7:
24:66:e1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:49 2025 by rpki-client