Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E960888213EB11F0A5512DA6762E951A.roa
File: E960888213EB11F0A5512DA6762E951A.roa (raw, json)
Hash identifier: LolflECYNCN3Z2sd6lYQxRCGQRSdC+xs5m2gukUl+S4=
Subject key identifier: 94:70:61:DF:FC:84:37:B9:5F:7C:D3:E0:53:27:36:12:B7:4B:C6:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017839
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E960888213EB11F0A5512DA6762E951A.roa
Signing time: Mon 07 Apr 2025 20:07:20 +0000
ROA not before: Mon 07 Apr 2025 20:07:16 +0000
ROA not after: Wed 11 Jun 2025 20:07:16 +0000
asID: 203020
IP address blocks: 154.217.179.0/24 maxlen: 24
154.217.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96313 (0x17839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 20:07:16 2025 GMT
Not After : Jun 11 20:07:16 2025 GMT
Subject: CN=67f43078-35b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:44:aa:7a:a9:38:46:fe:f7:81:bf:46:b4:
25:87:b0:ed:6e:2f:88:88:e4:86:0b:95:65:0f:82:
9b:0f:80:23:d9:81:81:83:b6:21:8a:bc:cf:e7:19:
57:92:2b:40:66:b0:6b:a9:4c:6d:7d:87:a7:15:7a:
54:e3:87:b7:4f:07:94:9d:3f:79:67:70:69:7c:bc:
3b:a4:b4:bd:8f:ab:c4:b1:85:f2:6d:e2:a8:8e:2a:
83:b0:3c:d3:24:04:47:76:e5:0d:b2:d4:b1:c1:78:
f8:17:cc:ba:e1:04:c3:b6:11:c7:6c:ad:fb:eb:66:
43:e3:7e:ae:d4:27:d7:d7:7a:51:eb:a2:88:98:a0:
24:51:4f:ff:67:0a:bc:b4:db:e4:a7:e9:dd:ac:92:
e3:59:a3:bc:f7:7f:ad:6e:56:39:ff:17:94:64:6f:
42:cc:94:5a:37:80:00:6f:90:49:2d:92:86:d3:bb:
da:2e:80:c7:28:74:b3:9d:81:58:4b:f4:37:72:64:
80:33:df:2e:83:23:bb:1c:51:78:73:38:99:95:52:
46:94:ca:08:d9:b8:87:61:8b:94:4a:61:e3:ff:bd:
fc:ed:96:0e:b0:6a:d2:d8:2d:26:93:56:f0:2b:d7:
27:c3:df:81:c2:58:15:3f:11:26:c7:c2:aa:5a:13:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:70:61:DF:FC:84:37:B9:5F:7C:D3:E0:53:27:36:12:B7:4B:C6:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E960888213EB11F0A5512DA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.179.0/24
154.217.232.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:e5:2e:91:1c:96:b6:09:6e:47:f9:cf:3e:b8:b6:6c:7e:aa:
47:88:1a:a8:bc:bb:38:b4:c6:73:f5:f4:38:64:a1:e9:d0:dd:
dc:d9:97:3d:c8:36:8f:35:37:4e:52:1b:9e:8b:04:52:f2:15:
38:ae:ce:fa:61:9c:05:20:bf:5c:1a:3e:f9:67:1a:50:d7:13:
5d:e6:3b:24:73:40:a7:63:e4:e3:21:6a:9d:23:13:51:f8:d6:
de:27:3c:e6:13:51:db:c0:63:e7:45:ed:05:ae:f7:a4:61:b6:
50:e1:d1:51:35:be:60:a7:40:49:ca:d2:66:7b:aa:a9:d7:44:
3c:2f:10:f9:fe:5d:0a:f7:8c:63:8f:d4:e6:55:f8:55:c7:59:
dc:74:8a:a2:57:3c:b7:77:ea:9a:26:10:ca:a2:60:ae:c3:dd:
b3:60:a1:df:be:81:09:8d:6f:56:ae:63:81:29:50:59:e4:59:
4b:e8:9f:f4:31:10:79:c8:ce:93:f6:7d:73:06:40:78:7a:19:
b9:94:05:25:8d:59:76:b7:bb:14:af:ae:75:87:93:aa:55:19:
e1:d8:51:48:0e:ca:24:54:d5:19:63:03:fb:92:4b:ac:a1:de:
46:a7:91:8d:89:73:e3:ec:9f:6c:f4:b4:3d:bd:85:d7:82:fd:
31:8f:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:53 2025 by rpki-client