Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E92FC2CEF87A11EF99FB43AD762E951A.roa
File: E92FC2CEF87A11EF99FB43AD762E951A.roa (raw, json)
Hash identifier: ddGWLrJqB5OqZG1iZ+U2vo1QT1kqslVMEJ+p+P7vqSA=
Subject key identifier: 47:D1:99:2D:7C:DA:DF:F8:46:35:55:74:0B:B0:C0:4B:09:93:35:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01714D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E92FC2CEF87A11EF99FB43AD762E951A.roa
Signing time: Mon 03 Mar 2025 22:00:25 +0000
ROA not before: Mon 03 Mar 2025 22:00:21 +0000
ROA not after: Sun 06 Apr 2025 22:00:21 +0000
asID: 395793
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94541 (0x1714d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 22:00:21 2025 GMT
Not After : Apr 6 22:00:21 2025 GMT
Subject: CN=67c62679-a697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:33:ae:c0:37:31:d3:f2:98:3f:cd:63:13:
a8:3a:11:24:e0:6b:7d:f7:7e:1a:7e:92:22:9c:74:
5a:b9:61:31:d8:d3:bd:ca:28:cc:08:7a:da:27:75:
52:dc:d5:15:7a:fd:5f:97:50:26:48:e9:c3:1d:e5:
56:10:94:e6:8b:06:7c:ea:8b:a7:5c:2d:7d:92:ac:
36:7c:17:91:f3:7c:a2:6c:dd:44:79:2f:16:6f:f9:
a5:23:47:3e:be:69:54:aa:32:79:21:2f:ef:d4:bc:
37:d2:76:13:df:43:e0:34:ec:d0:d8:73:00:79:19:
1a:3a:19:b1:a4:3f:5c:00:51:9b:b3:3e:0c:50:b6:
5b:0a:93:6c:cf:96:bf:2c:33:3a:08:89:c5:3b:57:
99:3d:a9:66:35:d9:fa:d8:28:38:b3:99:f8:a1:14:
13:92:f4:4b:ee:9f:82:a0:4e:47:46:e0:d8:b6:0e:
08:5b:0d:04:e3:12:b8:9d:ef:93:b6:e9:e8:14:0f:
ed:dc:06:da:7e:57:4f:35:4d:74:81:8c:45:c5:20:
09:ee:dc:4d:b1:4e:8a:ef:38:dd:1b:b6:00:f7:63:
67:2c:bb:b8:40:da:ac:25:cd:f7:74:81:da:9e:4e:
84:1a:6e:f7:67:a8:13:f2:69:89:32:c1:5f:c6:56:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D1:99:2D:7C:DA:DF:F8:46:35:55:74:0B:B0:C0:4B:09:93:35:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E92FC2CEF87A11EF99FB43AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
Signature Algorithm: sha256WithRSAEncryption
b7:ae:34:39:39:be:38:bc:88:27:b8:1a:82:59:a3:2a:ec:fb:
1b:14:61:ff:d9:16:ba:fb:c6:ae:3f:c3:3e:eb:3f:54:42:03:
75:55:51:8a:82:0d:ba:50:70:00:ad:9b:fc:44:8d:eb:c0:c1:
8d:a1:9e:9b:04:ee:33:d1:1e:c5:36:75:b9:3f:a0:f6:2d:d0:
e2:ac:1f:08:77:d9:3d:06:0d:87:dd:2c:43:f0:ad:3c:36:ff:
49:79:93:30:c6:bf:ae:26:97:6b:52:d4:ef:d5:48:0f:8e:d6:
0e:df:8b:6b:2d:0f:39:f5:f8:57:cb:72:e2:5e:7a:4a:67:0c:
e5:fb:d2:73:5a:a8:ad:11:46:0b:cf:36:7f:2c:bc:9e:8f:fe:
c9:ec:49:a8:10:bc:df:90:0a:2c:b1:99:2b:9a:c2:06:01:48:
fb:c4:22:a8:f7:1d:37:05:50:43:3b:b7:34:07:cd:aa:5f:1f:
e3:a7:9e:cc:bb:12:6c:57:aa:64:8e:b4:7b:57:b9:2c:fb:6a:
ee:d6:5a:c7:72:ef:e8:2c:5e:68:71:41:33:8d:1c:32:23:ae:
2e:ec:7c:0c:a0:7b:58:28:81:7f:2d:1d:df:25:9f:76:d7:fa:
6a:b7:b0:67:b1:a9:3b:84:ec:82:a3:08:15:b9:c5:f9:d8:cf:
79:e6:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:43:54 2025 by rpki-client