Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ECB9B62179E11F0AF6E1A236EB8BCC6.roa
File: 8ECB9B62179E11F0AF6E1A236EB8BCC6.roa (raw, json)
Hash identifier: kKDM9pbU5AX9ANdDtjqbLNkgRUV6WzeERn91AwwCn00=
Subject key identifier: 90:3C:59:18:65:70:6A:07:56:58:D0:7E:60:C4:A2:9D:A5:EE:38:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ECB9B62179E11F0AF6E1A236EB8BCC6.roa
Signing time: Sat 12 Apr 2025 13:03:42 +0000
ROA not before: Sat 12 Apr 2025 13:03:34 +0000
ROA not after: Sat 17 May 2025 13:03:34 +0000
asID: 203020
IP address blocks: 154.204.96.0/19 maxlen: 24
154.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96509 (0x178fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 13:03:34 2025 GMT
Not After : May 17 13:03:34 2025 GMT
Subject: CN=67fa64ae-7375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:73:80:05:fe:41:6d:93:90:e5:6b:e5:42:
7e:32:a0:73:1e:4f:98:d5:85:ce:e0:9e:72:60:c9:
34:db:dd:9d:3b:e4:e1:ab:82:92:85:c2:6f:b9:03:
ef:d1:71:54:af:58:f9:d8:bb:4e:e0:1c:32:11:d4:
d0:0c:3b:49:98:5d:ba:14:0d:d7:11:b0:05:b0:b7:
8f:6a:9e:79:c8:7c:52:10:2f:8b:9c:23:f5:a2:d0:
73:54:a9:d9:83:26:1f:56:40:ab:bd:a1:9f:22:0b:
53:84:06:92:de:a2:9a:aa:22:27:62:ad:03:9f:4c:
03:12:a9:ba:af:d2:d2:2f:23:c3:27:a9:ce:2f:25:
da:71:03:4a:66:d7:61:ab:58:b5:57:03:ef:dc:06:
9b:54:e0:b8:33:c9:2e:d3:fb:e6:07:aa:ed:01:99:
a6:3f:95:69:a6:32:d3:08:74:e4:29:09:19:8a:75:
68:e3:58:ae:56:8c:88:65:c1:c0:4b:04:0d:9f:e1:
08:bf:23:10:b8:a8:9d:55:89:b4:80:0c:0b:6c:d3:
c5:94:da:21:d4:7f:67:38:c0:7f:97:d5:e0:30:3e:
fa:9e:fb:f5:6a:8f:cf:7f:eb:58:2c:73:f8:27:76:
3b:da:ad:ec:2f:ea:3b:6a:65:d0:df:52:fd:85:64:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3C:59:18:65:70:6A:07:56:58:D0:7E:60:C4:A2:9D:A5:EE:38:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ECB9B62179E11F0AF6E1A236EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.96.0/19
154.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
92:3c:56:9b:75:db:b9:a7:fa:c0:a8:b1:28:31:f0:f1:79:05:
b7:68:df:36:00:cf:8b:83:d3:33:7f:14:19:94:86:56:85:37:
d1:9f:f2:99:ae:ea:7c:a1:92:d1:0f:b7:1f:40:7d:91:d3:1c:
6e:b0:48:ec:8a:c9:c5:e2:d6:6d:19:49:2a:9b:d3:f8:16:cd:
08:20:6d:03:4f:31:8c:f2:6d:e2:9b:d3:3a:46:59:47:b6:3c:
4f:8e:8e:53:61:51:8d:59:14:24:d7:a2:7c:97:94:16:8c:dd:
41:dc:20:81:4c:99:50:51:b2:02:b6:0c:be:7d:23:92:5d:2d:
7a:f1:a8:43:1d:90:b4:0f:ae:2e:5e:56:1e:a4:ba:7f:50:ba:
ff:c9:bd:e8:89:5f:93:3b:3b:56:e1:cf:a3:85:77:e2:20:db:
64:80:2e:58:4a:6f:da:22:92:e0:50:84:42:8c:7c:06:80:e7:
1c:14:81:d4:18:1c:af:6e:d6:63:02:0a:2e:5b:c9:12:46:fc:
61:16:6d:f1:8e:8d:8b:3e:a5:04:18:8c:02:c8:10:9c:17:3e:
e7:0f:36:9b:b4:db:ee:58:3b:65:80:3f:e8:b8:72:12:f5:12:
25:ad:31:92:b4:a8:0e:1d:ee:c6:e7:f1:b1:72:d4:eb:bf:e0:
30:d9:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:17 2025 by rpki-client