Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/341D3D921C6211F08C395BD5DAE4EC9C.roa
File: 341D3D921C6211F08C395BD5DAE4EC9C.roa (raw, json)
Hash identifier: JyADuvKSI3iLxu0qKTKSHwkAPvRimS1ePDGGM/hEXtc=
Subject key identifier: 82:4B:39:CE:CF:AA:EE:37:3B:0E:97:BB:A2:3E:7B:05:D0:5F:BC:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/341D3D921C6211F08C395BD5DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:34:16 +0000
ROA not before: Fri 18 Apr 2025 14:34:11 +0000
ROA not after: Sat 24 May 2025 14:34:11 +0000
asID: 395886
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96689 (0x179b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 14:34:11 2025 GMT
Not After : May 24 14:34:11 2025 GMT
Subject: CN=680262e8-77f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:40:ba:f5:cc:0a:a6:85:31:b2:3d:60:fb:
d3:56:da:4d:7e:a3:4b:21:b3:d5:b5:67:28:ee:01:
a2:c4:3a:ef:82:14:0e:24:19:8d:9c:31:da:4e:42:
d9:e9:fc:75:85:4d:15:f6:c5:3c:3e:4a:bb:05:ec:
04:66:50:d6:4c:e3:c1:77:c4:99:80:4b:e8:45:52:
9c:8a:ca:d6:2b:54:6d:47:91:a1:3a:a4:fe:e0:1c:
89:8f:ce:38:fa:1d:42:f6:09:56:33:76:11:96:8f:
79:b2:a4:fd:63:41:10:c5:5a:ad:2b:9e:2b:1d:0c:
71:ce:3a:8c:c7:2f:38:e3:87:51:21:06:13:be:8a:
c2:11:5b:26:f0:d5:ab:3b:03:0e:04:d9:e5:56:84:
48:4a:85:fe:69:fd:21:77:a8:ef:e1:c1:f1:89:22:
7b:42:68:7b:02:d2:c9:c7:c2:a8:c2:dd:05:1c:e3:
c4:7a:b4:e0:5d:91:fd:e7:73:5e:7d:47:03:b0:91:
0f:f1:ad:5a:01:c2:6e:3b:29:10:d1:38:c7:c5:8a:
03:90:fb:96:28:fd:1e:c9:e4:04:c5:ae:1a:71:2c:
e9:40:a4:5a:6a:42:48:8b:a2:17:0b:e0:04:7a:70:
56:35:21:1d:78:07:8b:84:15:fe:24:43:75:7d:02:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4B:39:CE:CF:AA:EE:37:3B:0E:97:BB:A2:3E:7B:05:D0:5F:BC:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/341D3D921C6211F08C395BD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ab:00:68:e9:72:32:b2:c8:e2:43:b0:e3:db:11:ee:92:29:
55:3e:88:e6:69:a8:2a:c3:55:c8:52:f7:eb:7a:2e:17:bf:af:
c8:71:20:ff:87:f6:8f:61:af:88:13:ce:e5:2a:2c:1c:51:a0:
b6:51:76:d6:88:70:b8:56:25:8b:47:18:c9:80:34:44:38:60:
6d:8b:a9:0e:85:fa:b5:dc:dc:27:f3:2c:92:38:20:a6:e8:0d:
24:f9:8c:4f:75:a3:03:c9:cd:a4:1a:55:4e:0e:60:36:f2:a2:
e0:0b:ca:b6:54:75:1e:1e:d9:9a:fe:cb:5a:41:96:ca:40:e1:
b2:b0:e2:a0:47:09:f7:bb:70:46:9e:cc:96:1b:9b:db:08:28:
30:bd:c4:00:ee:87:6c:59:79:0e:da:40:6a:81:44:92:32:3a:
4b:6f:63:74:df:c7:73:15:46:7a:69:77:f4:ef:49:f8:58:fd:
34:9d:59:1d:bb:93:dd:b2:f7:73:8a:c8:7f:a0:bf:5d:cc:10:
e5:7b:3e:f3:a7:2b:f0:2a:7e:3e:a1:8f:54:d0:e2:30:bf:a1:
07:21:e6:7b:4f:d0:43:3c:f4:57:76:21:eb:4f:b7:58:dd:83:
20:d3:88:48:29:0f:b3:c7:2f:c8:71:eb:15:9e:9c:a0:b1:c5:
75:e9:6f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:50:04 2025 by rpki-client