Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA00BEE21C5911F092CCDC9DDAE4EC9C.roa
File: BA00BEE21C5911F092CCDC9DDAE4EC9C.roa (raw, json)
Hash identifier: ICezWGUr34+WAGQ0ZyQv1ZCNDtrddeH+d0cM+UV6URo=
Subject key identifier: AA:0D:7E:6C:BD:7E:21:57:7A:FC:54:0A:C8:F9:07:F9:9B:88:30:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017993
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA00BEE21C5911F092CCDC9DDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 13:33:35 +0000
ROA not before: Fri 18 Apr 2025 13:33:31 +0000
ROA not after: Sat 24 May 2025 13:33:31 +0000
asID: 18013
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96659 (0x17993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 13:33:31 2025 GMT
Not After : May 24 13:33:31 2025 GMT
Subject: CN=680254af-7d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:d6:df:be:f1:ef:9f:06:0a:98:1c:dc:38:
2a:d6:8a:ad:b5:c6:e5:ef:92:2b:15:51:2e:e7:c8:
ab:04:85:47:1c:90:1c:f5:c8:53:a2:b6:95:11:1a:
1d:f8:1e:65:22:72:1d:7c:c3:21:6e:5e:a9:62:61:
0d:05:a7:7f:70:e4:81:4e:bb:8f:81:9c:9a:65:fe:
27:0a:75:99:52:83:e0:43:bd:ce:df:87:5d:ae:ee:
5b:b3:58:2f:00:48:f1:14:cb:54:7e:bd:26:ae:8c:
80:13:5e:15:d4:db:95:cb:28:1d:48:2e:f8:54:7c:
8f:79:fb:6d:3b:11:ee:8e:86:34:f5:68:00:78:22:
4b:1e:20:99:57:c8:31:b9:cd:d7:dd:26:76:7d:e6:
a7:d8:e0:1c:91:f1:60:ea:4f:0d:59:52:12:7c:9f:
73:4c:ca:1a:81:9a:ec:82:f6:83:e6:65:d7:32:49:
a7:52:d6:2f:23:03:64:07:84:4f:4b:74:e2:e2:b3:
c6:23:81:14:a4:ab:b9:08:8c:4e:a5:a8:f2:0e:27:
c5:d8:03:5d:8b:7c:9c:a6:3d:1b:bd:6d:df:4a:d4:
07:76:0d:33:8e:78:49:8c:37:a9:4a:d3:43:86:32:
88:28:47:ed:37:9d:e5:f3:61:93:44:66:e5:8b:98:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0D:7E:6C:BD:7E:21:57:7A:FC:54:0A:C8:F9:07:F9:9B:88:30:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA00BEE21C5911F092CCDC9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
67:11:a4:d4:a4:21:94:96:42:dd:7d:06:22:a9:be:59:b6:4d:
9a:9c:70:5c:0d:47:d7:87:0a:6a:2d:28:ed:d3:15:1a:12:d5:
04:19:2d:3a:6d:82:e6:7c:ee:1e:c8:ce:9b:a5:cc:af:b0:fb:
c5:64:2b:ba:f2:64:56:d8:09:1e:d8:8d:27:8c:85:46:a0:e6:
ef:4d:f8:05:8f:e7:5d:87:79:57:8d:de:58:17:77:71:05:ea:
05:bb:ec:a2:ff:43:c8:cc:7c:34:08:23:ed:24:4c:87:d8:2f:
ee:8d:8b:c3:e7:22:db:fc:b8:36:e2:16:5d:f8:f5:ff:35:d5:
e5:34:e5:28:ab:b0:b7:76:69:25:60:b8:84:b7:31:8f:8b:29:
33:ad:7d:54:5d:85:fb:32:56:b8:d9:b4:93:22:c0:6a:62:41:
2a:82:10:15:e5:4a:10:ff:08:0d:e2:c8:d0:ad:e1:c2:b2:be:
c1:5e:4b:20:d1:3d:5e:6d:48:80:65:c0:cc:56:f7:fc:62:ff:
63:c2:8d:96:87:6f:07:db:c6:0f:90:32:a6:47:2e:23:21:74:
37:c4:64:78:d0:d4:aa:4c:b6:cd:a9:c8:a8:28:22:1d:79:3d:
17:c7:7e:50:b1:11:4a:30:17:a8:8c:c7:bb:7a:8a:40:d0:04:
28:86:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:15:56 2025 by rpki-client