Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/78CEE0D6FE4311EFAC01C048762E951A.roa
File: 78CEE0D6FE4311EFAC01C048762E951A.roa (raw, json)
Hash identifier: S/ZsWMJD4DtM1oXbegUkV+3ds1wHL2z8dUl+XkcuPAo=
Subject key identifier: B0:00:DA:0C:77:5A:20:60:65:94:35:17:FE:68:2D:97:9F:2A:F7:DB
Certificate issuer: /CN=F36E567DAF/serialNumber=C858754C80FAC839600BA98073FCF0A37CCCACEB
Certificate serial: 02
Authority key identifier: C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/78CEE0D6FE4311EFAC01C048762E951A.roa
Signing time: Tue 11 Mar 2025 06:38:41 +0000
ROA not before: Wed 12 Mar 2025 06:38:37 +0000
ROA not after: Mon 12 Mar 2035 06:38:37 +0000
asID: 327802
IP address blocks: 154.73.160.0/21 maxlen: 32
154.73.160.0/24 maxlen: 32
154.73.161.0/24 maxlen: 32
154.73.162.0/24 maxlen: 32
154.73.163.0/24 maxlen: 32
154.73.164.0/24 maxlen: 32
154.73.165.0/24 maxlen: 32
154.73.166.0/24 maxlen: 32
154.73.167.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 03:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E567DAF
Validity
Not Before: Mar 12 06:38:37 2025 GMT
Not After : Mar 12 06:38:37 2035 GMT
Subject: CN=67cfda71-77be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:db:15:69:10:14:c5:80:30:0e:54:83:00:f6:
c1:f6:17:00:84:84:ba:5e:34:73:cc:da:2c:7f:42:
76:9e:33:0f:a6:33:2f:cf:ce:44:0e:1f:d2:07:2e:
42:3b:91:f5:8b:0e:bf:b2:cb:4c:a8:cc:6d:dc:4e:
c8:a9:e2:b8:e3:99:f1:84:72:7f:db:ab:ff:b6:36:
eb:7d:ba:40:bd:38:ce:0d:36:d0:d6:0a:7c:24:2c:
8f:9a:94:6a:6a:2f:02:c3:ff:5c:4f:a7:39:0a:30:
44:9f:35:4f:49:42:18:2b:06:8c:0b:c7:18:0c:52:
9d:d3:11:19:02:ed:63:bf:b8:d9:fa:06:35:0c:c1:
5f:67:05:41:5d:3c:46:85:eb:09:b5:e2:09:0e:9b:
02:80:51:98:40:ea:9e:e7:4f:e7:12:4e:87:93:e5:
39:bd:ed:d0:51:ba:bb:57:2d:1b:be:eb:5f:ba:6f:
be:be:99:fc:b2:64:26:55:d7:ad:ff:7c:f0:14:0f:
43:f0:69:f4:10:d3:a4:6c:88:52:24:3a:6b:d7:6e:
27:bb:38:e8:5d:33:76:fc:e7:68:a9:90:cd:27:01:
84:64:9f:72:09:58:31:22:b4:45:85:eb:7d:7b:6d:
33:51:4f:9d:31:0f:79:97:d6:89:8a:23:2b:9d:89:
2f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:DA:0C:77:5A:20:60:65:94:35:17:FE:68:2D:97:9F:2A:F7:DB
X509v3 Authority Key Identifier:
keyid:C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/78CEE0D6FE4311EFAC01C048762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.160.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:e2:13:fe:13:c1:ee:c5:96:b2:2f:f5:81:82:75:2a:c7:2b:
10:86:ed:63:47:b1:66:9b:ff:45:3e:db:68:7f:11:86:d4:24:
ad:e7:23:2d:97:69:f8:8a:e9:c4:77:69:1f:77:87:f5:fd:d7:
96:52:81:97:c4:9e:48:42:d6:32:be:a7:35:91:a6:f5:70:0b:
00:46:30:c9:67:c1:41:71:69:d5:38:0f:e3:bd:86:b9:d2:68:
06:72:82:d9:54:42:2f:e5:8d:2b:74:07:10:72:77:75:70:0d:
aa:4d:f5:e7:61:a3:b1:77:c0:56:f0:c4:36:2c:46:50:0b:99:
cf:80:86:3b:ba:84:64:cc:a8:f4:57:c1:75:9d:3f:d3:f0:37:
d7:3d:93:34:44:74:c6:ab:9b:a1:71:83:d5:42:1e:69:9a:7d:
87:08:dc:e8:07:1b:6d:9e:7e:49:b8:26:ef:03:2b:ef:bf:23:
34:c5:9e:b1:af:85:95:16:d1:d6:06:93:32:80:3a:ee:d6:ba:
1d:88:91:d4:f8:b7:eb:7d:6a:f6:b0:39:f2:3a:89:dc:0a:39:
f6:71:b4:ea:a5:f4:64:95:35:77:90:c8:71:d0:cb:a7:f6:fe:
5b:75:90:9a:7a:c4:2f:a8:f4:f5:ab:0a:93:ff:66:96:28:d0:
0f:2b:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:40:56 2025 by rpki-client