Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB7BB44C152211F08C191D0F6EB8BCC6.roa
File: EB7BB44C152211F08C191D0F6EB8BCC6.roa (raw, json)
Hash identifier: 7KAnGnAjjaNSbq6HyfjawQdQv2OGbAZWR40ynmCnp9Y=
Subject key identifier: F9:76:5B:D1:CA:9C:42:96:FB:F8:03:85:07:CE:1C:78:74:9E:9B:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01789A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB7BB44C152211F08C191D0F6EB8BCC6.roa
Signing time: Wed 09 Apr 2025 09:13:37 +0000
ROA not before: Wed 09 Apr 2025 09:13:33 +0000
ROA not after: Mon 20 Apr 2026 09:13:33 +0000
asID: 38638
IP address blocks: 154.91.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 03 May 2025 00:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96410 (0x1789a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 09:13:33 2025 GMT
Not After : Apr 20 09:13:33 2026 GMT
Subject: CN=67f63a41-ec78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0e:03:fa:73:bf:eb:4f:02:b7:a0:22:b8:36:
f9:2f:25:b0:e6:a0:38:af:cf:73:1b:09:29:c9:92:
49:45:83:84:b8:01:eb:66:77:04:a7:a8:8f:71:d1:
de:43:9c:49:40:88:21:ab:e5:41:41:5b:d2:fd:f0:
8a:b1:c6:e8:54:b4:4c:01:57:ff:b5:22:b1:10:61:
36:e0:ea:2e:0f:3b:4b:41:c2:93:b9:bd:71:62:ba:
1e:b1:1f:8c:0b:84:41:12:d2:61:34:5c:36:9a:9d:
b5:00:e5:14:96:8a:57:c9:32:5e:81:31:e2:a5:2b:
e4:94:d9:ee:0a:3e:44:32:9a:a4:4c:db:84:16:00:
31:1c:75:8b:58:12:de:84:b8:4d:aa:6e:fe:fa:26:
ab:07:ba:09:03:5c:f0:c0:16:81:8a:c2:93:1d:d6:
db:30:b8:ad:0d:c7:00:34:50:62:08:56:b5:93:9a:
ce:10:57:81:cc:78:4d:58:13:8a:2a:c9:39:c0:52:
bd:7e:d8:87:06:d9:dd:6c:eb:f3:dd:16:01:db:b6:
b2:cc:53:b8:c5:fa:49:37:5c:59:c7:5d:4a:a6:20:
78:1e:23:6e:fa:d6:0f:f2:b3:39:aa:d2:bf:7f:e2:
c3:71:44:35:61:75:01:3a:14:75:0c:ff:dd:37:1a:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:76:5B:D1:CA:9C:42:96:FB:F8:03:85:07:CE:1C:78:74:9E:9B:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB7BB44C152211F08C191D0F6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.168.0/24
Signature Algorithm: sha256WithRSAEncryption
09:33:00:be:86:b5:ff:5e:6d:d1:dd:91:fc:33:07:0c:35:8f:
18:0c:3b:bc:6a:71:65:01:82:b6:29:0e:aa:64:ec:b3:dd:17:
32:d8:ef:c0:cf:b9:d2:69:39:cd:1b:e5:65:32:8d:2b:4f:aa:
48:64:d1:3b:79:ef:69:f7:6a:d4:b3:91:ff:34:9b:a8:7c:64:
c6:e3:f9:b0:5e:40:51:98:b5:fd:b6:1b:31:67:23:09:3c:b0:
01:2f:1d:e9:f2:1a:b5:6a:31:10:eb:0a:1f:a4:32:52:53:8b:
bd:eb:a3:b0:47:e6:84:41:44:07:fd:cf:e5:a2:35:f5:74:e1:
e4:49:a4:aa:9f:e9:56:6c:72:7d:d0:38:9f:c7:ff:2b:26:5a:
d9:1c:b5:cb:73:e8:1d:63:3f:7c:28:6f:42:7c:53:a1:f2:31:
f4:8e:02:6b:26:f8:e8:28:c8:fb:8d:83:da:7f:26:28:0b:ee:
76:a1:82:b9:30:69:95:09:b9:46:fe:e7:41:04:16:39:f9:21:
50:53:db:53:d9:e0:86:84:55:c4:86:1a:b8:be:94:cb:91:5e:
fb:bd:1b:cf:ac:54:4f:9c:c7:cb:16:10:46:5b:a3:1c:fe:59:
d3:1d:8a:91:33:f9:9a:c3:6d:50:2c:99:d4:da:0e:dc:5f:32:
05:19:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:35 2025 by rpki-client