Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1438AC7C115011F0958E8B5F762E951A.roa
File: 1438AC7C115011F0958E8B5F762E951A.roa (raw, json)
Hash identifier: iL4W+wVHSrfjRD8XTKPmRYqaJwQEsP5r2/9bZywg/Q8=
Subject key identifier: 3A:70:F3:D1:6E:BD:AA:8C:05:40:99:A0:FC:9D:26:16:5C:30:EE:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1438AC7C115011F0958E8B5F762E951A.roa
Signing time: Fri 04 Apr 2025 12:26:48 +0000
ROA not before: Fri 04 Apr 2025 12:26:44 +0000
ROA not after: Tue 24 Jun 2025 12:26:44 +0000
asID: 135097
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96202 (0x177ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 12:26:44 2025 GMT
Not After : Jun 24 12:26:44 2025 GMT
Subject: CN=67efd008-a38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:0c:29:80:f3:e5:3b:86:c8:1c:3f:86:61:
a8:b4:f0:83:2a:7b:da:79:56:53:67:e4:0a:ce:09:
39:bf:cb:f0:56:ef:62:29:09:3d:d0:0d:e3:70:69:
a7:13:d1:a7:d6:fd:3d:fb:c6:09:d0:0d:46:54:3a:
cf:4d:37:5f:83:13:8f:7f:1b:56:2f:23:d4:dc:65:
15:46:ad:e3:49:6b:f3:9a:42:21:17:ec:06:35:bd:
83:e2:1d:1d:fd:12:6e:d6:e1:cb:62:7c:82:91:a5:
3b:93:6e:02:a7:76:eb:8a:9e:12:95:96:19:41:b3:
4b:6f:01:e7:56:a3:2d:83:4f:fa:30:23:8e:2b:74:
d5:4b:1c:2f:70:b0:8f:1d:3c:ca:cd:18:42:f6:33:
f0:43:b1:d8:a4:e3:33:9e:8e:d9:42:b8:75:de:ec:
a1:66:84:1b:71:92:75:04:fb:89:fe:2a:f4:d5:64:
99:95:9b:69:65:12:fe:2b:74:a4:fd:de:00:94:38:
77:86:8a:fc:a9:10:22:16:06:ff:0c:08:28:87:bf:
d3:13:2c:45:f8:c3:40:ea:f5:e4:e9:82:fe:b5:8c:
83:cf:79:d3:60:e3:d5:9f:01:49:ec:ee:25:d7:6a:
b6:ba:6e:03:f9:81:1e:3b:e4:3e:cf:16:17:12:fa:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:F3:D1:6E:BD:AA:8C:05:40:99:A0:FC:9D:26:16:5C:30:EE:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1438AC7C115011F0958E8B5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:1f:17:f0:75:d2:27:82:b4:a2:f8:d8:d6:f9:83:f0:ef:7e:
f8:70:04:de:26:d1:83:ed:50:9d:a4:99:fc:1a:38:c8:35:bd:
52:4f:6d:3b:1f:a7:4e:90:dd:c7:e3:45:ac:c0:b0:9b:d2:00:
4c:34:5a:b2:4b:fe:f7:6d:2f:7f:0e:b0:20:b5:84:2f:e1:75:
ae:4b:7c:d7:6c:87:89:92:75:ab:7b:00:c0:48:62:29:b7:dd:
ee:54:d4:9e:56:37:c4:03:5e:0d:99:64:ee:c1:8e:d5:02:2e:
73:58:82:fc:66:47:b7:79:d6:c2:7a:c3:ea:06:56:0f:59:85:
52:d7:04:4c:f0:d4:a0:19:b8:be:84:78:11:b3:74:52:71:33:
a5:fe:3d:62:56:47:1d:16:7b:e6:67:34:8a:f6:b1:63:c5:1a:
54:a2:b2:9b:e6:f0:34:94:11:11:09:f4:ba:ec:54:27:65:40:
f8:1a:1d:ef:6e:fc:b1:bf:4c:72:14:d3:14:b2:09:66:da:68:
fe:c9:14:15:41:f5:3a:27:46:1d:97:73:cd:1b:69:5c:66:7a:
97:a2:8a:b1:12:89:28:ce:3a:21:17:b0:38:86:b3:f5:70:de:
42:51:1d:e4:d5:de:4f:c4:c7:e9:b0:14:d3:4f:ca:df:2d:7e:
86:27:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:52:47 2025 by rpki-client