Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73BA8ABC1CF911F0B90111D2DAE4EC9C.roa
File: 73BA8ABC1CF911F0B90111D2DAE4EC9C.roa (raw, json)
Hash identifier: k2ubgTppJBCv4lF/0Cw3QPVL/EGrFG1sXHTwlv0WclM=
Subject key identifier: 46:0A:43:B6:DA:7F:8E:C1:24:EA:06:1A:55:C6:C0:47:B6:93:F0:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73BA8ABC1CF911F0B90111D2DAE4EC9C.roa
Signing time: Sat 19 Apr 2025 08:36:57 +0000
ROA not before: Sat 19 Apr 2025 08:36:52 +0000
ROA not after: Mon 28 Apr 2025 08:36:52 +0000
asID: 139880
IP address blocks: 154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96779 (0x17a0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:36:52 2025 GMT
Not After : Apr 28 08:36:52 2025 GMT
Subject: CN=680360a9-0eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:21:bf:27:50:4b:d6:64:51:aa:80:dc:08:
1f:49:14:fd:bb:44:29:26:b0:99:0f:71:57:d8:a2:
50:83:f7:58:c9:e6:d8:90:23:e2:6f:03:72:50:d9:
01:df:83:31:f4:e5:22:36:65:09:29:d0:49:5b:ed:
a3:98:1f:09:55:d5:63:c5:b7:58:c0:3d:af:98:42:
9e:48:1b:d8:c7:2e:27:32:1b:03:1e:5d:33:27:64:
42:b3:5b:8f:e0:d3:85:09:f4:0f:8c:6d:d5:66:e2:
44:e4:be:8e:c2:f3:cf:61:bc:9c:99:7a:24:08:68:
cb:11:73:63:1d:cd:1b:f7:1e:22:7a:fd:69:51:c2:
2a:bb:01:51:0a:e3:24:a5:4c:50:94:f1:c6:8a:d4:
f3:59:4d:36:06:3e:af:b4:1e:18:7e:37:9b:ec:4e:
54:c7:7c:84:d5:0e:43:e8:0d:3a:34:c5:9a:66:09:
87:57:ff:14:2b:b3:29:2e:73:e9:bd:01:e6:f5:17:
0e:b7:7b:d9:ef:34:5e:20:34:e8:21:c9:fe:65:41:
8e:89:53:b8:28:b6:fd:b0:d3:9d:1f:13:66:cc:da:
f4:64:36:51:42:d1:dd:ea:88:c2:9d:95:ad:09:52:
8e:a1:b8:02:b4:83:a0:00:14:aa:cc:53:7a:49:c8:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0A:43:B6:DA:7F:8E:C1:24:EA:06:1A:55:C6:C0:47:B6:93:F0:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73BA8ABC1CF911F0B90111D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
154.214.64.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
98:fc:d7:1c:b7:66:f3:4a:f3:92:82:e5:7c:9c:a6:3b:25:20:
31:2e:d1:71:41:1c:33:2c:ad:ba:50:a3:36:42:79:73:f1:c5:
8e:0a:20:aa:99:d4:ae:2e:90:53:7c:d9:44:16:1e:03:f9:2d:
ed:26:d6:77:2a:7c:88:c0:e4:65:30:b2:9a:49:05:45:36:6a:
cb:85:fd:95:63:7a:29:a3:75:c5:1c:4a:ba:e1:4d:9c:85:5c:
41:c4:9a:4b:c1:ba:51:07:e3:e5:f5:90:4a:5a:0d:99:41:cc:
3f:86:72:5e:94:57:89:6d:56:b2:3c:93:ac:a9:d5:7a:bc:a2:
82:df:10:b6:c1:bc:62:72:9d:51:b6:d7:c5:49:93:57:89:67:
b2:f0:c4:c5:26:78:03:73:70:a8:fa:81:bb:7a:86:a2:a0:0e:
f5:56:cf:42:c0:ef:5e:b5:6c:75:85:bc:c0:3e:07:e0:ce:66:
42:91:85:80:fc:b4:cd:22:76:fe:e0:fd:a9:f9:f3:3d:27:97:
be:16:35:ad:39:a2:0f:be:9b:36:6e:d7:46:fb:fe:db:d6:ba:
b6:e0:10:87:04:f2:66:7a:48:73:5b:43:04:31:e9:94:5a:38:
bb:c9:95:b7:3f:ad:50:d9:7c:1f:bc:e6:5e:4d:d0:78:f2:26:
e8:97:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:16:12 2025 by rpki-client