Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F92DB9EE095811F096295758762E951A.roa
File: F92DB9EE095811F096295758762E951A.roa (raw, json)
Hash identifier: 95L+nsES/nBOez4PG3AfeZE4uYcBLLwQlPhY2lSbeaY=
Subject key identifier: 72:0F:A3:00:AD:40:53:E4:E5:15:4F:BB:7D:D5:79:D8:57:4F:60:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017607
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F92DB9EE095811F096295758762E951A.roa
Signing time: Tue 25 Mar 2025 09:10:19 +0000
ROA not before: Tue 25 Mar 2025 09:10:15 +0000
ROA not after: Thu 15 May 2025 09:10:15 +0000
asID: 63139
IP address blocks: 154.203.178.0/24 maxlen: 24
154.203.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95751 (0x17607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 09:10:15 2025 GMT
Not After : May 15 09:10:15 2025 GMT
Subject: CN=67e272fb-e188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:c8:f5:af:b5:d9:cf:32:0d:ae:a8:36:0c:
9a:06:a6:47:8e:cf:35:63:3f:14:47:74:e6:d4:43:
98:82:9a:5d:a4:c9:95:2b:84:3d:ec:1d:1d:0f:04:
65:a8:88:9d:b0:3e:b8:61:d6:7f:1e:97:6e:fa:90:
ef:85:e7:19:2f:19:8c:b3:a1:e0:6b:d7:1a:12:ac:
35:31:17:a1:11:75:78:8c:e8:88:8a:bf:24:e3:60:
d1:22:b5:61:d1:61:c1:88:b3:0e:03:9c:43:4c:be:
82:4e:17:2e:76:f3:4b:d7:44:54:2d:8e:b2:40:30:
ed:7c:73:2e:e5:e5:4a:03:01:e0:07:e6:a5:ed:1a:
b1:ab:9e:bf:97:77:d9:d6:ab:98:da:54:92:37:57:
f5:13:5c:e0:d1:51:70:3e:28:19:4a:a9:25:ee:77:
cd:28:5f:0c:d6:bb:eb:86:b9:7a:40:59:cb:3d:7a:
e3:45:97:f1:cf:bb:ad:20:b2:6a:d7:81:3b:60:3e:
1d:e8:48:15:b0:a2:24:91:54:58:6c:89:5c:bf:89:
27:cf:7f:dc:a8:18:6b:9a:1e:78:bb:b4:1b:a4:d1:
61:5d:91:f7:df:41:c7:e8:21:e3:92:d3:74:c6:55:
9a:90:dd:57:25:07:73:80:97:6a:c0:fe:ea:61:86:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0F:A3:00:AD:40:53:E4:E5:15:4F:BB:7D:D5:79:D8:57:4F:60:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F92DB9EE095811F096295758762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.178.0/23
Signature Algorithm: sha256WithRSAEncryption
61:7e:7a:4f:e7:bc:3d:3e:7e:07:15:b2:0d:9e:23:fa:ef:79:
ee:21:49:f1:da:56:54:bb:61:f1:70:88:2c:c0:ab:0d:e4:42:
a0:4d:21:43:88:3b:43:e8:f9:26:f6:0e:c0:1a:73:cc:7b:10:
4e:e7:a4:e9:76:c6:2a:ce:5f:2e:c2:9d:66:3b:51:c1:03:da:
22:38:25:61:1d:60:6d:99:06:53:55:16:a8:93:8f:01:14:52:
86:44:a9:83:cc:6d:43:6f:cd:bb:d0:4d:43:3f:f1:a5:14:f4:
3f:e2:73:7f:cc:f5:95:9e:1d:0a:65:9c:e8:ff:13:df:86:7e:
da:56:5f:37:77:15:88:f0:10:d5:bd:2b:e7:16:87:c2:a7:9b:
57:98:d0:92:97:d4:85:ce:3c:63:42:fa:7c:97:08:87:a0:6a:
68:06:96:c6:5c:37:3b:ce:21:ac:77:7a:e5:c7:e6:aa:d9:4e:
f3:65:51:8e:01:2f:2c:3f:1f:24:cc:91:36:99:f7:f2:37:81:
d0:3e:e8:aa:e1:7b:b8:2d:16:da:81:ee:77:df:a9:a8:4a:da:
bc:26:b6:2a:a5:43:c1:ac:05:42:81:e1:08:6d:bf:6d:d3:03:
d7:f8:04:fa:f4:12:fd:c3:34:b8:00:c7:42:a9:e8:7b:f6:dc:
c1:47:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:27 2025 by rpki-client