Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56A0EDA1CA311F0ABE33486DAE4EC9C.roa
File: F56A0EDA1CA311F0ABE33486DAE4EC9C.roa (raw, json)
Hash identifier: xjWr3i9YwfOESMK978fFlR5M/qmakPEws6tfPUjX4yc=
Subject key identifier: 93:60:D2:FD:91:C7:4F:48:70:61:29:75:F6:F5:13:20:93:DF:52:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56A0EDA1CA311F0ABE33486DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 22:24:57 +0000
ROA not before: Fri 18 Apr 2025 22:24:53 +0000
ROA not after: Wed 04 Jun 2025 22:24:53 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.90.224.0/19 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96764 (0x179fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 22:24:53 2025 GMT
Not After : Jun 4 22:24:53 2025 GMT
Subject: CN=6802d139-ae68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:51:57:80:9f:34:cc:fc:d3:c9:0d:8e:1c:
71:f0:13:ca:b1:e5:bd:a9:29:91:ac:90:12:20:5c:
fe:6f:fd:48:2d:a7:fe:db:a5:2c:19:7c:05:d2:57:
fb:84:61:19:bf:d3:44:75:41:90:19:13:6d:96:6a:
96:e9:69:01:ee:8f:48:45:ff:8e:7f:9f:92:46:ef:
c9:6c:2d:b9:eb:1f:f3:01:49:e5:5c:c4:ed:2b:76:
a4:59:9c:f3:f0:f0:ea:f2:bc:80:ac:4d:a8:ef:a6:
e4:27:e5:35:c5:65:f3:29:f2:ea:3e:3d:e3:ac:6f:
48:d3:5f:97:e8:b0:74:57:87:57:9a:e8:b9:d0:bd:
c1:d3:50:1a:41:26:d1:03:d0:71:79:f4:32:ff:26:
e2:b5:ad:21:9f:cc:af:2d:d4:90:ee:15:41:ca:04:
8d:83:f4:cb:f6:83:81:7d:ff:02:75:50:a0:d4:80:
7f:f8:74:7c:df:ee:c4:63:b2:e0:f0:97:4a:11:89:
a1:98:3d:68:02:59:f2:b1:92:54:2c:3f:99:ca:77:
0d:8d:75:ee:97:be:a0:d0:f1:27:78:f2:d6:37:61:
8e:e6:32:ef:f9:c4:1b:9d:2f:dc:13:68:fd:c4:98:
b7:a2:56:5d:a2:6e:40:48:3b:28:a2:d7:eb:52:86:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:60:D2:FD:91:C7:4F:48:70:61:29:75:F6:F5:13:20:93:DF:52:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56A0EDA1CA311F0ABE33486DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.90.224.0/19
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f0:c5:6d:f7:87:f7:7b:8a:3d:d9:d1:f2:48:a4:97:ab:81:
c4:fa:0f:3f:47:ff:f5:9b:05:87:5e:3a:74:6f:12:ad:72:01:
16:4f:a4:16:a2:c8:c9:ad:9f:82:1f:2f:ee:62:39:97:44:04:
f9:1e:9a:51:10:f7:9d:a9:02:85:ac:f4:af:c8:0a:96:a0:9f:
5b:71:a5:ca:1f:c4:54:92:23:48:4a:fb:2a:84:61:cc:ae:3f:
38:56:b9:27:1a:29:ee:86:b3:35:59:e7:29:b9:2a:46:d5:ed:
3b:d4:28:6a:77:24:30:c7:89:53:ef:a1:70:16:59:d7:49:89:
e8:e0:be:93:7b:e4:15:b8:e2:ee:9d:8f:0c:57:0f:d3:6b:da:
15:ce:d7:a2:52:7d:2a:e5:bb:38:97:43:06:78:65:b3:d0:ec:
ca:11:28:da:c5:62:07:9c:4a:52:a8:df:37:3a:7f:14:b4:7b:
a1:da:2c:df:71:62:29:ab:65:d4:36:82:0b:54:22:a6:5e:83:
7c:68:f0:68:27:ac:a3:0c:0d:3b:95:35:0f:54:1d:b5:1e:da:
97:ee:f9:24:55:4c:43:22:bb:cb:40:7e:2a:b6:be:e3:97:2d:
9e:27:a1:0d:41:88:1d:90:42:f0:95:9b:3a:a0:a2:ff:6d:d8:
77:3f:ef:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:18 2025 by rpki-client