Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034FCC8C151611F0863BB6BC6DB8BCC6.roa
File: 034FCC8C151611F0863BB6BC6DB8BCC6.roa (raw, json)
Hash identifier: rxXUV7U0zm5HhRVyzHgx3l20winC76wZaYscHyu5cRo=
Subject key identifier: A6:6F:2E:72:4C:E9:FD:00:3A:9D:BA:3F:38:D3:81:8E:D2:49:33:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017872
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034FCC8C151611F0863BB6BC6DB8BCC6.roa
Signing time: Wed 09 Apr 2025 07:41:14 +0000
ROA not before: Wed 09 Apr 2025 07:41:10 +0000
ROA not after: Thu 08 May 2025 07:41:10 +0000
asID: 45194
IP address blocks: 154.84.212.0/24 maxlen: 24
154.84.213.0/24 maxlen: 24
154.84.214.0/24 maxlen: 24
154.84.215.0/24 maxlen: 24
154.84.216.0/24 maxlen: 24
154.84.217.0/24 maxlen: 24
154.84.218.0/24 maxlen: 24
154.84.219.0/24 maxlen: 24
154.84.220.0/24 maxlen: 24
154.84.221.0/24 maxlen: 24
154.84.222.0/24 maxlen: 24
154.84.223.0/24 maxlen: 24
154.84.224.0/24 maxlen: 24
154.84.249.0/24 maxlen: 24
154.84.250.0/24 maxlen: 24
154.84.251.0/24 maxlen: 24
154.84.252.0/24 maxlen: 24
154.84.253.0/24 maxlen: 24
154.84.254.0/24 maxlen: 24
154.84.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 00:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96370 (0x17872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 07:41:10 2025 GMT
Not After : May 8 07:41:10 2025 GMT
Subject: CN=67f6249a-263c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:d7:17:fd:c4:84:ee:d5:fa:90:a4:13:3c:
75:f5:0b:e1:b6:7b:55:a0:2a:ba:d9:fd:fc:4a:be:
ac:c8:0e:37:a8:fd:6b:81:5a:97:44:dc:23:7a:6a:
c4:c9:ca:61:90:67:8b:5b:4e:cb:10:66:c7:fc:07:
ba:d8:41:6f:ab:21:05:b5:f6:41:af:6e:d5:bf:af:
7a:fa:45:6b:25:ee:f5:76:2c:43:00:0a:cf:31:01:
57:1f:36:7d:82:02:be:e6:12:0f:a6:e5:ee:45:60:
df:c9:8f:cb:42:d8:e1:15:6c:3e:10:1f:81:d5:84:
17:6d:61:cb:29:d0:de:09:65:98:4f:ea:b9:cb:28:
00:a0:e7:8f:34:da:36:ff:e7:86:05:5a:ca:f0:74:
ee:d0:5e:90:98:b2:b0:c3:6b:01:ab:9a:60:7a:4e:
dd:f2:b0:9b:73:03:8a:75:b3:4c:af:a6:3c:e8:ca:
c1:b2:bc:e3:58:a1:aa:bb:1b:2b:a2:7a:85:61:a3:
3a:c0:21:77:82:0b:a8:cc:06:84:5c:b5:df:e5:11:
22:ba:ad:d9:10:56:05:99:e8:ce:e7:8d:e9:c2:51:
95:5e:2c:3e:6d:02:2c:aa:1c:e2:5e:e9:21:af:4a:
8a:aa:70:13:42:9d:05:2a:1a:45:76:a4:27:40:33:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6F:2E:72:4C:E9:FD:00:3A:9D:BA:3F:38:D3:81:8E:D2:49:33:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034FCC8C151611F0863BB6BC6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.212.0-154.84.224.255
154.84.249.0-154.84.255.255
Signature Algorithm: sha256WithRSAEncryption
ce:d8:29:24:78:24:8f:27:ed:86:69:5f:4d:99:53:21:82:a2:
57:e6:5f:b9:a0:a2:94:df:cd:0d:30:73:60:e9:ee:7b:a4:8e:
9f:ec:2b:6c:d0:3e:38:c1:55:33:37:f9:8c:25:ea:ac:30:63:
c3:72:e7:97:25:17:44:37:5c:9e:96:94:c1:b1:b1:b2:10:82:
30:42:7f:55:e7:fc:9e:43:20:82:4f:59:16:e6:83:c3:05:22:
39:6b:24:46:31:f8:1a:ad:26:37:79:3b:5f:4b:6f:98:67:f8:
ae:07:bf:48:18:59:ae:90:73:67:5e:a4:40:a7:75:30:ad:52:
5c:a3:80:b9:1b:27:01:bd:a5:5e:b9:34:b1:dc:0d:ec:5a:ff:
a8:5d:8c:ea:29:5c:b4:a7:fd:76:8b:79:64:6b:1a:8a:1e:65:
90:5f:63:71:2f:8c:01:a0:6a:55:1a:bb:bc:72:e6:3d:d6:22:
b0:9a:21:52:53:c2:f6:20:14:2f:5c:ce:88:ba:41:40:77:84:
3b:f3:03:01:1b:77:48:70:96:f7:63:de:90:a3:85:d6:19:f9:
d6:9d:e6:2f:40:30:8a:8c:c6:2e:4b:c1:65:ee:d5:da:28:0c:
25:bb:1e:1f:19:30:e9:ff:2c:6b:31:ec:1e:f5:05:7a:9d:29:
62:c7:10:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:25:25 2025 by rpki-client