Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB96198C11FB11F0BE19E472762E951A.roa
File: AB96198C11FB11F0BE19E472762E951A.roa (raw, json)
Hash identifier: 4xuF/QlYPbaCcFJqWqfjRbWCbpuACSnJad2y7dqNObU=
Subject key identifier: 59:E0:DD:95:D3:54:D6:56:5B:A7:C2:E4:26:3F:94:B8:A2:10:08:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB96198C11FB11F0BE19E472762E951A.roa
Signing time: Sat 05 Apr 2025 08:55:06 +0000
ROA not before: Sat 05 Apr 2025 08:55:00 +0000
ROA not after: Sun 11 May 2025 08:55:00 +0000
asID: 203020
IP address blocks: 154.217.32.0/23 maxlen: 24
154.217.34.0/23 maxlen: 24
154.217.36.0/24 maxlen: 24
154.217.37.0/24 maxlen: 24
154.217.38.0/24 maxlen: 24
154.217.79.0/24 maxlen: 24
154.217.179.0/24 maxlen: 24
154.217.224.0/22 maxlen: 24
154.217.228.0/22 maxlen: 24
154.217.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96222 (0x177de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 08:55:00 2025 GMT
Not After : May 11 08:55:00 2025 GMT
Subject: CN=67f0efea-c7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:37:0f:02:d9:4d:14:74:5a:87:d8:45:ac:
e8:c9:f6:14:3d:1b:2a:d3:af:d9:14:42:7c:5e:c9:
7d:17:0d:7b:93:ba:55:42:ae:3d:7b:4d:75:6b:1f:
9e:40:3b:ed:d8:3f:79:9b:38:74:48:af:84:19:dd:
43:fb:ba:89:10:12:5d:b7:de:57:91:65:6d:df:2f:
d5:77:4e:19:3b:32:24:e4:ad:f6:65:41:8b:7a:68:
7c:a1:e2:e5:9b:c4:c0:4d:01:ae:54:6b:4f:2a:af:
b8:28:31:41:57:77:99:e0:d5:ae:c1:39:78:91:03:
21:62:79:6b:f0:3e:cc:a1:44:c1:50:dc:b1:8f:fe:
e4:ec:38:88:97:2d:a9:c1:52:ab:c4:44:51:16:ab:
9c:08:77:00:8e:43:a1:24:f0:d7:4f:5b:65:74:de:
ad:b0:aa:8d:66:7e:83:6d:35:a2:08:7e:78:9b:e2:
8e:10:39:52:23:9b:8e:3a:aa:ec:eb:73:7e:e7:0f:
e2:1a:b6:06:80:43:7e:93:34:64:e6:e4:61:07:a0:
18:74:07:c9:a1:c1:71:ef:1f:ba:87:be:aa:28:20:
51:de:64:72:c5:3c:4e:55:b7:94:e7:b0:9b:85:65:
4a:5b:b3:a8:17:92:56:45:74:9a:bf:a9:06:40:04:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E0:DD:95:D3:54:D6:56:5B:A7:C2:E4:26:3F:94:B8:A2:10:08:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB96198C11FB11F0BE19E472762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.32.0-154.217.38.255
154.217.79.0/24
154.217.179.0/24
154.217.224.0-154.217.233.255
Signature Algorithm: sha256WithRSAEncryption
28:4f:12:02:ab:13:2d:71:1b:d3:25:9c:5b:65:39:f3:eb:bf:
02:cb:1b:fa:74:8e:6c:ce:53:4d:e8:d2:df:b3:54:df:f1:69:
41:e8:83:2d:ca:9a:a0:4f:b2:4f:fa:70:7e:0c:8f:b0:c6:7c:
16:d8:1a:4a:0e:00:7c:b3:22:ee:a4:d1:32:11:09:4f:69:34:
d9:a8:05:28:3a:0f:7e:4c:61:96:0c:88:ba:2a:2f:e2:ef:26:
6b:0b:03:eb:42:b8:ca:91:fe:a9:0a:83:b6:10:d2:f2:60:3c:
f9:3d:9a:da:a1:0f:bf:f4:c9:42:85:d5:78:62:98:26:bf:7f:
0b:91:e6:9c:99:01:6a:a1:18:8b:88:89:84:40:d2:5b:76:e7:
79:34:e2:00:26:43:c2:e8:9f:4b:23:4d:02:63:6a:89:5e:34:
c8:92:12:bc:41:43:ca:5e:bc:72:bf:e8:64:a8:9e:2a:d6:16:
c2:4b:d7:d6:69:26:25:3d:5a:5e:13:49:a1:f6:71:a1:4f:37:
6c:5d:35:fd:54:96:94:c7:a5:fc:95:83:dc:9e:d5:e4:54:ac:
27:e7:54:c6:dd:4f:60:8f:5c:93:ed:66:81:56:52:cb:ab:ab:
69:1e:70:2e:77:96:a0:44:38:21:f2:47:00:3a:a5:19:f5:8f:
35:60:60:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:55 2025 by rpki-client