Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748D00C60CB111F08AE1FA56762E951A.roa
File: 748D00C60CB111F08AE1FA56762E951A.roa (raw, json)
Hash identifier: bt26Wx9tTHr8dZAzFSNmF0/PcLH++zLZcIc3bINjSIM=
Subject key identifier: 01:C0:F1:BA:27:D8:26:CB:4D:70:1A:83:90:56:A3:CE:98:EB:98:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748D00C60CB111F08AE1FA56762E951A.roa
Signing time: Sat 29 Mar 2025 15:21:15 +0000
ROA not before: Sat 29 Mar 2025 15:21:11 +0000
ROA not after: Mon 20 Apr 2026 15:21:11 +0000
asID: 21859
IP address blocks: 154.89.5.0/24 maxlen: 24
154.93.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95919 (0x176af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 15:21:11 2025 GMT
Not After : Apr 20 15:21:11 2026 GMT
Subject: CN=67e80feb-8335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:33:c7:e4:81:c0:de:c6:e1:e1:be:bc:a7:
b9:ac:31:66:a4:9d:c4:a5:8b:56:87:00:23:aa:4d:
8e:2e:1a:ee:c6:62:96:71:b8:f2:16:6c:de:3b:65:
84:5f:9f:2d:4b:02:c5:fe:ea:2d:c3:56:b1:d6:f5:
75:a5:b8:7f:41:35:cb:a7:74:24:69:ae:c4:bf:57:
2b:48:d9:1e:fd:a1:3d:a9:b5:86:a1:81:80:4a:ad:
21:c8:f5:5c:b9:87:36:ea:13:0e:8d:88:c7:f5:c1:
c3:7a:3d:2a:f2:79:ba:6f:87:e6:b0:0e:96:d3:bf:
eb:0b:a0:74:85:68:49:68:c1:78:91:a5:bd:73:79:
b7:f4:4c:c7:47:f3:ff:ec:88:7d:65:24:21:ff:86:
99:9a:9d:61:92:51:11:91:1e:a7:b0:a7:e2:a2:a4:
18:58:31:12:69:9a:7e:5d:77:08:04:6c:e8:3f:f7:
29:63:ab:cf:ea:ed:4e:00:3b:56:9a:ab:68:df:07:
74:2f:09:ef:d3:32:c3:f7:d6:93:79:21:ff:e6:15:
44:d0:44:4d:2b:1f:64:bb:67:94:12:f8:8f:03:22:
3a:d5:f4:64:d9:30:2b:9f:dc:fa:c4:9d:20:0c:33:
97:3b:24:6b:74:fb:29:2a:52:98:2e:ee:9d:8a:02:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C0:F1:BA:27:D8:26:CB:4D:70:1A:83:90:56:A3:CE:98:EB:98:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748D00C60CB111F08AE1FA56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.5.0/24
154.93.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:d0:60:a0:c5:79:1b:11:6b:91:19:b8:64:8a:73:01:86:eb:
f7:b2:10:fe:76:3a:b5:5d:9c:7e:0f:19:d3:db:36:91:55:0f:
3e:07:30:4f:95:4b:47:b3:b5:9e:49:6c:83:a0:c2:07:1a:3e:
db:d8:8e:a7:2a:f0:99:2b:96:a3:ff:6a:e1:88:fb:dd:4f:1b:
eb:a7:fe:1b:08:f2:09:93:b3:81:6a:64:3a:13:4f:e1:54:ab:
c8:b8:c7:23:0b:6a:5c:7d:d0:cd:14:0f:91:65:1b:77:c9:d3:
2a:40:d0:54:dd:95:fb:a6:2e:86:60:98:21:4a:a1:29:fb:74:
35:38:8d:88:f4:23:bd:51:6b:06:0d:a0:53:6a:59:00:44:08:
6a:a6:a2:26:0c:e7:4c:8d:a7:95:6d:d3:c9:ea:a0:68:aa:88:
74:a6:44:81:13:24:74:7d:1e:c1:a6:4d:1c:e0:58:65:ee:0d:
e8:b7:f9:ca:41:5e:71:b6:d6:06:2b:08:2c:7c:f0:bb:23:06:
d7:fc:ed:62:ca:fa:d5:92:9d:cd:f4:21:6f:d5:d0:d1:e2:bc:
77:2a:b9:a1:25:97:79:2f:c2:b2:fb:fb:0d:04:79:4c:1d:53:
68:6d:22:92:45:ea:12:69:a3:c7:c9:78:fa:78:4e:b6:32:f7:
14:47:e5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:27:31 2025 by rpki-client