Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FCE98AC1F4811F0AEE6CDC3DAE4EC9C.roa
File: 6FCE98AC1F4811F0AEE6CDC3DAE4EC9C.roa (raw, json)
Hash identifier: bQW6GYG3RsW0q/8y7gSpSsEBKSY8z9hkjF644fsyU+s=
Subject key identifier: 66:36:22:DC:60:6C:05:76:BB:B4:30:69:A0:6C:A9:AB:99:8A:01:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FCE98AC1F4811F0AEE6CDC3DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 07:07:23 +0000
ROA not before: Tue 22 Apr 2025 07:07:17 +0000
ROA not after: Thu 01 May 2025 07:07:17 +0000
asID: 63888
IP address blocks: 154.207.226.0/23 maxlen: 24
154.207.252.0/23 maxlen: 24
154.209.65.0/24 maxlen: 24
154.209.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 00:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96862 (0x17a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 07:07:17 2025 GMT
Not After : May 1 07:07:17 2025 GMT
Subject: CN=6807402b-cc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:ac:d4:06:31:8b:ba:00:dd:ab:e9:71:6a:
b9:46:fc:14:da:a6:6f:bf:70:bc:97:ed:fa:a9:30:
81:70:ad:5c:d7:81:ea:d2:ff:e8:a6:ff:53:df:2b:
ac:3e:b9:af:b2:1e:21:c7:81:45:55:3d:5e:c6:c4:
11:e3:ae:49:0e:e3:36:a2:d2:9e:b1:f1:ac:66:67:
2c:72:b0:fe:3f:c4:cf:91:1f:ef:72:46:12:3b:ad:
cf:4b:4c:3b:79:07:41:9b:37:bf:de:16:94:48:8b:
01:57:20:be:0b:d0:df:b0:8f:74:31:89:d7:b0:8d:
6f:89:ce:d2:b0:73:d7:2b:e7:66:d3:49:ee:21:c1:
42:52:8f:a6:6a:83:0c:12:99:ec:13:3f:cc:40:4a:
f6:82:8d:37:37:c4:f9:06:80:f1:4e:4c:bd:c6:ea:
94:85:6f:f9:0c:3f:a7:5f:26:a5:a6:de:8f:fa:02:
e6:b9:64:7e:2c:67:28:b5:0f:30:3c:c6:bc:0b:b5:
88:f7:cf:fc:10:90:22:60:67:a1:e5:58:a2:ce:31:
78:94:ce:98:18:fd:a8:7a:37:95:58:25:7c:11:8b:
61:16:12:7a:79:3c:df:45:81:8b:e5:53:1c:ef:03:
af:92:17:f8:32:3c:d3:f3:61:65:77:2e:9f:6a:9f:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:36:22:DC:60:6C:05:76:BB:B4:30:69:A0:6C:A9:AB:99:8A:01:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FCE98AC1F4811F0AEE6CDC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.226.0/23
154.207.252.0/23
154.209.65.0/24
154.209.70.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a9:1d:42:4e:b0:ac:7e:57:0c:43:55:d0:56:cc:e4:4e:a2:
6a:43:4d:97:d3:e4:9e:83:58:08:a2:50:ec:e8:b5:71:a3:d6:
65:69:e8:5b:92:e9:ca:29:65:0b:fd:5b:d0:d8:94:69:26:5a:
db:1c:63:5d:4c:78:16:cf:a5:94:03:5b:e8:56:1a:a0:61:8b:
9b:9a:96:04:6c:7d:a9:bc:c5:52:49:d7:12:c9:af:9c:f6:bd:
12:c7:9c:ad:1a:1f:60:c9:7d:0e:68:92:a8:17:92:be:e1:45:
63:cf:bc:0d:b4:d9:35:c1:4a:34:08:fb:fe:f4:d1:b6:a8:b0:
94:69:e5:31:f3:58:f1:44:f2:0b:ee:d2:08:2e:e9:31:b3:f6:
2b:ac:7d:cb:1c:bd:ca:fe:03:df:3d:22:70:5d:17:0d:3d:03:
76:3e:2c:96:86:85:6a:4d:14:64:bf:28:8a:46:1a:0f:b7:bd:
c0:c4:52:79:47:b3:57:2e:a0:5b:d7:29:c2:d7:27:81:8b:80:
13:7b:e3:2f:68:2e:fb:6c:6d:33:53:c7:c8:14:36:99:a2:12:
24:46:7c:0f:38:06:25:26:64:d0:6e:42:64:f1:65:d0:10:ee:
9e:d6:a3:d6:a4:8a:72:f8:e1:ea:9e:37:67:59:8e:27:cd:e0:
85:16:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:04:31 2025 by rpki-client