Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D926E5E1F5A11F0B56072B7DAE4EC9C.roa
File: 0D926E5E1F5A11F0B56072B7DAE4EC9C.roa (raw, json)
Hash identifier: 5eSh7cqKZqbHaZMK8uCUk0wzw9R8v1qVWMRl/hn/EEo=
Subject key identifier: 46:F8:D8:49:45:39:64:76:A4:46:E1:E9:E7:FE:A4:36:93:52:8B:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D926E5E1F5A11F0B56072B7DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 09:13:29 +0000
ROA not before: Tue 22 Apr 2025 09:13:23 +0000
ROA not after: Mon 02 Jun 2025 09:13:23 +0000
asID: 174
IP address blocks: 154.88.32.0/24 maxlen: 24
154.88.33.0/24 maxlen: 24
154.88.34.0/24 maxlen: 24
154.88.35.0/24 maxlen: 24
154.88.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96900 (0x17a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 09:13:23 2025 GMT
Not After : Jun 2 09:13:23 2025 GMT
Subject: CN=68075db9-96a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:cd:b5:d5:51:24:c9:b3:71:85:5d:ed:e7:
83:98:0c:c8:94:0e:86:9a:0d:77:07:0b:59:75:39:
0b:6f:92:42:aa:88:63:74:af:4b:f1:d0:5e:2d:98:
0a:5e:ce:6b:50:5d:10:17:a6:7b:ec:1f:c0:00:76:
6e:18:a4:ee:63:11:7d:d0:49:51:1b:90:5e:7d:f4:
76:c5:33:4d:31:06:a1:7f:e2:ce:df:d1:41:37:14:
7d:c7:ad:03:dc:51:1e:f5:78:f7:d0:3b:18:af:10:
b9:65:04:45:fa:b2:b3:0c:05:0b:64:aa:19:59:2b:
9a:15:d6:5f:d4:bc:de:c7:5d:2b:a4:c6:4a:d8:f5:
05:4f:74:5c:eb:7e:d7:25:a9:e3:0d:89:a1:7f:56:
64:f3:60:7d:2b:de:56:71:ef:15:04:42:a5:c8:52:
3c:08:e9:08:11:17:22:7e:75:ba:c0:47:1f:3b:1f:
64:44:3d:39:8a:9d:59:8a:ff:e9:66:e3:7c:87:46:
52:01:a6:d7:f2:a6:f8:02:e3:bf:7f:9d:61:c7:30:
3f:a3:ae:b6:58:10:c1:8e:2a:ed:a1:93:7f:53:45:
bb:8e:62:cb:70:13:c9:bb:a1:b9:1d:b5:9c:e9:19:
d6:d6:fb:51:6b:5e:1f:a5:c8:77:5e:32:eb:12:4d:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F8:D8:49:45:39:64:76:A4:46:E1:E9:E7:FE:A4:36:93:52:8B:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D926E5E1F5A11F0B56072B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.32.0/22
154.88.41.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e9:d5:fb:c7:2b:b9:ed:58:5d:57:93:c5:47:a6:89:f3:9b:
f0:8c:ea:ba:e0:4e:3d:d3:e8:94:fc:8c:54:08:2d:8a:6e:62:
f3:57:f2:ad:75:be:20:7d:37:32:97:79:ed:c3:93:2c:40:93:
ea:16:f3:fe:36:66:97:e5:41:93:6b:30:a1:a3:0c:d0:bf:47:
4d:b4:07:19:b9:54:5d:76:c4:32:de:a8:37:ec:f4:2e:80:36:
0d:aa:e6:5a:1c:5e:2a:52:04:30:fa:11:73:46:45:92:54:00:
7d:89:e3:fb:a9:d1:1b:ce:42:96:5b:0d:85:5b:37:23:6b:80:
85:4e:c4:23:60:81:cf:9a:23:68:64:1c:c3:a9:33:9b:80:ee:
16:86:ed:eb:a3:f6:a4:46:a9:10:d0:35:dd:e4:52:d2:18:cb:
80:6a:1a:70:2b:e0:f9:89:7b:a3:b3:5a:a2:3c:ca:cf:d4:df:
d9:cf:e5:a3:a7:84:d5:d6:21:ac:89:f4:e4:2b:4b:4e:99:3e:
ca:a5:04:bf:62:e3:ca:a8:0c:3c:a9:de:74:36:51:29:19:52:
76:17:d4:44:13:81:76:63:74:df:3c:da:6c:77:7d:bf:78:01:
79:6b:0c:5b:5b:dd:bd:ac:94:71:60:04:17:de:0c:8d:a9:27:
be:14:19:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:29 2025 by rpki-client