Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B69F392C190211F08B0683F66DB8BCC6.roa
File: B69F392C190211F08B0683F66DB8BCC6.roa (raw, json)
Hash identifier: +amyQqS1o0xYfcAilVBezb8sAAnYBzZn8AfcDWmdODY=
Subject key identifier: E1:2F:70:6F:EF:5B:91:92:32:82:87:C4:C1:77:EC:48:33:3D:9D:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017911
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B69F392C190211F08B0683F66DB8BCC6.roa
Signing time: Mon 14 Apr 2025 07:33:09 +0000
ROA not before: Mon 14 Apr 2025 07:33:04 +0000
ROA not after: Sat 28 Mar 2026 07:33:04 +0000
asID: 132513
IP address blocks: 154.85.98.0/24 maxlen: 24
154.91.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96529 (0x17911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 14 07:33:04 2025 GMT
Not After : Mar 28 07:33:04 2026 GMT
Subject: CN=67fcba35-dce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:fe:5c:76:2e:f0:f0:64:eb:de:d4:00:6e:
c7:05:21:fc:c4:07:49:bf:d0:77:2c:9e:7e:61:d9:
d9:9d:e7:46:41:9d:01:0c:6d:65:a1:bf:76:fa:64:
3a:52:82:1c:59:3f:25:6f:e8:4f:98:21:98:b0:1b:
4a:cf:e0:15:16:eb:f6:e0:fe:f6:cb:84:25:d7:08:
0e:73:84:4f:b3:5b:b2:fb:e5:eb:ed:44:f1:06:a2:
90:06:75:53:a1:0b:92:96:78:5b:3c:4a:3e:53:62:
5b:f1:39:20:71:73:5a:c1:e2:61:c9:71:74:8a:d4:
c7:e0:bf:7c:6e:73:2b:e7:c9:c4:d5:15:b4:44:a3:
d3:61:c6:7e:6a:68:20:4e:02:0c:e6:86:73:cb:7d:
ab:2f:0c:30:ea:66:c1:e3:c9:84:95:c6:73:ff:c4:
b3:6e:fa:39:f9:25:12:61:80:dc:1e:4d:c5:dc:c6:
9e:92:91:38:5d:a7:6f:35:f0:8a:00:d4:ce:0d:0f:
48:87:5c:cf:e7:9c:ac:72:81:0f:fa:35:49:57:8f:
e0:d5:56:5e:34:43:86:0b:73:82:0b:ee:c0:3c:2f:
a4:39:31:d8:60:0b:9c:be:7a:25:70:64:ea:1a:4b:
c9:9d:b6:e1:07:54:db:b2:63:94:4c:a0:0c:58:a9:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2F:70:6F:EF:5B:91:92:32:82:87:C4:C1:77:EC:48:33:3D:9D:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B69F392C190211F08B0683F66DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.98.0/24
154.91.139.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:6a:03:d4:de:ba:4b:a9:a1:4c:b4:97:5f:e6:ff:ee:7c:a2:
e7:9a:81:a7:c6:7e:ac:d4:8e:94:2c:e3:fe:7a:0f:a2:d7:1a:
37:66:ce:7b:68:52:4a:ed:7d:bf:be:a5:c3:e0:91:f4:a5:c4:
b7:57:f6:a8:fe:d5:2d:3c:ba:45:a6:07:9f:21:36:da:9f:8b:
c5:6a:1c:36:9d:01:c9:f8:95:3f:5e:3f:1e:d8:17:ef:ae:59:
31:81:9f:af:80:b6:f2:0f:ef:77:05:90:c7:5e:2a:a6:45:26:
55:d8:d3:a7:fb:df:cc:46:85:61:c8:ee:53:23:31:97:1a:f2:
fe:56:ea:be:ba:ed:01:7e:dc:38:09:f5:f8:8c:e4:6e:2c:7f:
04:9d:9e:cd:db:51:b9:50:c6:9c:99:e8:fa:82:9c:dc:09:7f:
af:49:08:2c:57:72:c9:f0:17:64:a0:38:52:b4:3c:13:9e:41:
ed:17:30:a7:d1:9a:10:8e:00:4f:1f:73:22:50:b0:fa:dd:13:
47:4d:bc:a8:50:05:a6:a0:f1:ba:7d:e4:9b:df:98:05:9e:4c:
ef:12:7e:0b:aa:37:62:37:73:8d:f8:3e:12:34:48:8e:72:ea:
34:1a:01:b6:62:fe:5e:5d:c8:a0:80:0a:45:90:75:14:aa:ce:
ec:1a:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:10 2025 by rpki-client