Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99CCDDDE1C5611F0A760F889DAE4EC9C.roa
File: 99CCDDDE1C5611F0A760F889DAE4EC9C.roa (raw, json)
Hash identifier: kL2bCFFgnhNCqNKTXsDiWJMlQu1vcbsquffTRCfn4hY=
Subject key identifier: EC:87:F3:70:C7:19:AD:A6:79:A8:23:B9:FA:EA:F5:0C:7C:71:F8:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01798B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99CCDDDE1C5611F0A760F889DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 13:11:12 +0000
ROA not before: Fri 18 Apr 2025 13:11:08 +0000
ROA not after: Sat 24 May 2025 13:11:08 +0000
asID: 8796
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96651 (0x1798b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 13:11:08 2025 GMT
Not After : May 24 13:11:08 2025 GMT
Subject: CN=68024f70-f78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:96:08:de:80:b3:95:35:78:8e:07:26:e7:
22:36:d2:86:91:aa:50:8c:e5:74:a7:03:c7:6f:28:
0f:7a:50:59:dc:6f:88:4e:60:7c:fd:59:52:8d:54:
b4:99:1d:aa:17:02:ec:4c:dc:3a:02:c6:5f:f0:5a:
3b:b8:fa:6c:77:47:e7:63:2e:7f:28:e5:2d:b2:b1:
54:5c:b1:30:4d:58:fe:ca:52:8d:12:d3:68:4f:1e:
61:bb:1e:64:a9:00:29:6f:0f:17:fa:67:57:1d:58:
b7:81:e5:be:c2:f6:d1:84:5d:ce:4d:59:e9:b0:85:
29:fd:12:03:f7:03:23:ad:42:db:22:26:54:70:37:
a9:59:70:41:93:06:41:c9:92:f2:2f:62:40:94:0d:
56:d0:8a:8f:f2:05:62:a0:a2:45:11:4b:dd:ff:ed:
06:43:78:bd:73:f9:4a:8e:1f:54:00:ed:a0:d3:81:
f0:00:3b:76:8b:aa:7d:a0:40:af:89:25:ef:1a:7b:
af:c6:6b:8a:2c:0f:81:ce:1e:03:be:64:53:bb:1c:
22:4a:40:0d:9f:54:db:df:b6:2f:92:8b:07:6a:83:
70:74:a2:a8:57:6c:47:19:55:ee:44:78:dc:d1:17:
2d:cd:ca:e5:60:d7:72:ad:b8:9d:04:89:34:d0:d9:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:87:F3:70:C7:19:AD:A6:79:A8:23:B9:FA:EA:F5:0C:7C:71:F8:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99CCDDDE1C5611F0A760F889DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
d7:c2:5f:85:e2:f5:ef:0f:ff:1f:2a:5c:0a:04:d4:df:52:6c:
0a:b5:b2:d8:ba:3f:09:f4:fe:c4:67:78:ed:63:21:6a:8c:e1:
86:50:9f:e6:4e:f1:a8:fb:c8:a2:13:a6:c8:2c:af:39:ee:f1:
20:6b:da:13:2a:fa:66:4c:40:86:e0:c4:cf:f7:db:23:48:c6:
d6:85:ec:0b:93:5a:58:1f:35:55:4c:d2:d3:4e:e9:5c:35:ae:
97:37:9a:e7:27:fd:e6:ad:5d:11:ec:ca:ef:c7:98:70:e4:a4:
c7:71:42:16:34:dc:d6:e7:a7:16:d1:30:0e:11:97:7b:85:f6:
7f:05:81:8b:b6:54:bb:f1:6e:09:b7:c4:7f:32:30:65:44:3d:
4f:3a:ff:54:b3:40:ee:c2:73:38:d2:43:68:dc:2e:9d:ab:03:
f9:bf:9c:f4:a1:27:76:b1:9a:f6:0b:bf:a8:00:0e:fc:30:1f:
44:c8:ba:6d:a3:ab:1a:f9:2e:4d:b4:aa:3f:5e:8c:8a:28:9a:
da:6c:75:9e:fe:d9:1a:8d:f1:aa:bd:be:bd:19:ad:29:67:65:
aa:2c:c8:32:29:f0:62:01:53:97:9d:68:21:61:70:11:9e:4a:
b4:a7:af:63:a9:f6:44:a3:3b:c4:6c:04:1a:3e:de:ab:d1:45:
7f:4d:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:53 2025 by rpki-client