Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF6BBBB6120611F097B7D6B3762E951A.roa
File: EF6BBBB6120611F097B7D6B3762E951A.roa (raw, json)
Hash identifier: 2PQklC1mxzaPjBS9iT8bbC00PAeb1G+g2Uv/oJQuV7A=
Subject key identifier: 6A:9D:25:E8:E2:1A:E6:56:FD:3A:DE:7F:9C:F7:1B:48:D9:74:C8:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF6BBBB6120611F097B7D6B3762E951A.roa
Signing time: Sat 05 Apr 2025 10:15:44 +0000
ROA not before: Sat 05 Apr 2025 10:15:40 +0000
ROA not after: Sun 26 Apr 2026 10:15:40 +0000
asID: 28419
IP address blocks: 154.198.186.0/23 maxlen: 24
154.201.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96238 (0x177ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 10:15:40 2025 GMT
Not After : Apr 26 10:15:40 2026 GMT
Subject: CN=67f102d0-06ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:8c:b3:87:aa:10:9d:d1:49:d4:11:e5:a7:
79:72:9e:a7:db:dd:24:9b:20:53:a9:3a:2b:dc:b7:
21:41:7d:b3:e0:a8:b8:42:65:c9:f5:5b:50:21:9a:
88:a7:a3:44:a0:91:02:03:96:4c:6f:90:92:cc:9d:
ab:4f:de:1e:20:e9:1c:f1:cd:42:34:46:65:53:20:
99:dc:d6:d1:db:f5:99:33:c1:26:7d:b9:ab:ca:57:
5e:45:f4:f8:ca:12:fd:cd:e5:2b:73:4c:8c:81:0f:
8c:69:07:da:9e:2a:75:5a:3c:7a:4e:2e:e1:b7:12:
a4:f4:8d:c5:29:58:2f:7e:d8:b8:40:25:d5:35:d0:
cf:af:39:46:9e:83:c3:f6:0a:c8:42:5b:7b:8b:e5:
3b:10:6c:52:5c:2a:68:9f:41:09:7c:b0:b3:b4:ea:
57:9b:75:d5:73:72:8b:89:59:11:1a:93:5e:84:6c:
d2:e3:86:af:02:c7:e6:48:f8:33:1a:af:60:e5:ae:
b7:c9:c9:b4:76:f2:7c:47:57:df:29:da:1c:55:42:
f4:55:54:85:06:c6:62:65:fc:3b:71:19:42:54:38:
f3:e6:b8:a4:bd:81:19:c8:76:d2:e0:7f:22:76:2f:
c6:cf:fd:53:e8:05:78:10:02:a5:dc:6e:71:88:35:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9D:25:E8:E2:1A:E6:56:FD:3A:DE:7F:9C:F7:1B:48:D9:74:C8:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF6BBBB6120611F097B7D6B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.186.0/23
154.201.16.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:74:25:ae:a8:53:28:e4:8c:b9:11:6e:ea:16:1d:cf:af:dd:
b6:ca:ba:83:a4:25:f9:1d:84:a0:03:f7:da:38:61:9b:8a:ad:
a8:17:8e:29:62:94:47:44:d1:a1:7c:ad:95:ed:42:eb:74:d0:
f8:bf:7b:53:b0:d1:e3:a6:75:71:95:e2:26:e0:e6:27:4d:62:
3a:43:6e:cd:de:bf:22:1e:b0:f1:15:2b:d9:4a:74:82:eb:3d:
3c:02:48:9a:d2:22:6c:b7:eb:58:14:43:73:9e:ca:98:fc:a4:
9c:ac:a4:09:8f:30:08:23:bd:fa:6e:47:05:5a:32:b3:e5:4f:
1a:9d:4d:90:ad:9c:88:11:af:8a:4d:e9:7f:53:6c:eb:dd:17:
84:09:49:7b:8d:61:e5:67:81:99:5d:0f:ba:c2:57:28:b6:0c:
a2:3c:31:e7:80:c3:f2:75:78:f4:44:aa:f9:0e:af:ad:34:ef:
7e:bf:cd:22:cb:df:37:58:bd:39:4f:16:63:b7:9d:07:4c:e9:
97:57:ff:1d:89:ab:5b:2e:89:55:c0:90:1d:97:fb:e5:b1:c9:
f5:dc:fc:ef:9f:4a:ad:9c:0c:f8:e0:79:0a:4e:b6:70:37:85:
e5:32:a6:d9:26:1d:79:f1:d1:7d:2c:bb:0e:2b:17:17:7b:e2:
36:8c:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:02:44 2025 by rpki-client