Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA802EC1C9411F0BB66569EDAE4EC9C.roa
File: 0CA802EC1C9411F0BB66569EDAE4EC9C.roa (raw, json)
Hash identifier: QqXden6XhZ3kuSzWF+N15UkWEarBMmS3CyWQYEBHa78=
Subject key identifier: 7F:DB:31:08:CC:8D:D3:B4:F9:7A:87:BE:C3:B3:65:27:85:3A:9F:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA802EC1C9411F0BB66569EDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 20:31:05 +0000
ROA not before: Fri 18 Apr 2025 20:31:00 +0000
ROA not after: Fri 30 May 2025 20:31:00 +0000
asID: 62240
IP address blocks: 154.195.108.0/24 maxlen: 24
154.195.111.0/24 maxlen: 24
154.195.112.0/24 maxlen: 24
154.195.120.0/24 maxlen: 24
154.195.124.0/24 maxlen: 24
154.195.136.0/24 maxlen: 24
154.195.137.0/24 maxlen: 24
154.195.138.0/24 maxlen: 24
154.195.140.0/24 maxlen: 24
154.196.30.0/24 maxlen: 24
154.196.31.0/24 maxlen: 24
154.196.33.0/24 maxlen: 24
154.196.36.0/24 maxlen: 24
154.196.42.0/24 maxlen: 24
154.196.44.0/24 maxlen: 24
154.196.45.0/24 maxlen: 24
154.196.46.0/24 maxlen: 24
154.196.47.0/24 maxlen: 24
154.196.48.0/24 maxlen: 24
154.196.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 07:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96734 (0x179de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 20:31:00 2025 GMT
Not After : May 30 20:31:00 2025 GMT
Subject: CN=6802b688-68e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:71:ed:dc:eb:af:55:d3:b0:80:4f:a0:74:
91:4f:04:6a:8a:1f:e0:84:07:f8:a9:f3:88:c6:4d:
64:b5:b7:45:eb:e9:b4:f5:16:2d:d6:e0:66:0b:a6:
3f:9f:8d:27:23:33:a3:89:08:19:61:07:27:3d:a3:
11:a2:c9:ee:8a:9d:36:9d:41:cf:c2:68:d4:60:d0:
0c:7c:a4:37:64:a1:93:69:cf:e2:a9:f0:25:ab:3d:
7c:b3:dc:5c:3f:a9:2e:f4:3b:ea:57:9b:29:a1:be:
d1:6d:56:f9:82:03:1d:6f:c5:08:7b:c4:cd:42:f3:
97:47:31:e4:99:7f:79:8d:15:af:c1:e3:38:5c:b8:
24:a0:43:14:d3:1c:78:6e:16:0d:46:33:d1:86:17:
c3:49:ae:36:13:fe:90:7f:e2:ce:f6:26:37:8d:ac:
0b:e6:98:ac:3b:ac:13:3c:e3:72:d0:de:05:4f:36:
e1:e7:b6:e2:57:3c:04:73:32:44:99:39:fd:5f:51:
fd:15:5f:ff:62:f1:64:32:76:2c:78:b6:8f:c3:43:
0e:7c:00:54:16:25:7a:c4:8c:03:6d:60:17:e4:ac:
a3:10:e1:a6:db:a2:10:e0:20:82:e7:d2:4e:1a:86:
af:6a:78:54:23:ba:b9:97:67:95:23:aa:53:45:b1:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DB:31:08:CC:8D:D3:B4:F9:7A:87:BE:C3:B3:65:27:85:3A:9F:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA802EC1C9411F0BB66569EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.108.0/24
154.195.111.0-154.195.112.255
154.195.120.0/24
154.195.124.0/24
154.195.136.0-154.195.138.255
154.195.140.0/24
154.196.30.0/23
154.196.33.0/24
154.196.36.0/24
154.196.42.0/24
154.196.44.0-154.196.49.255
Signature Algorithm: sha256WithRSAEncryption
83:53:62:a6:bb:e4:8a:44:f8:70:35:85:dc:be:ab:1c:e6:88:
c4:4d:8a:89:3f:68:0f:ac:64:1b:b0:1d:4e:1d:4a:1a:ac:36:
6b:dc:9b:c5:29:13:6c:fc:ab:2f:cb:07:d6:54:b6:dc:11:c0:
c8:76:25:83:25:cd:38:7e:30:81:d8:b9:61:70:8c:39:f0:e6:
65:f6:69:30:30:ab:c1:f1:70:2d:65:25:be:bc:3e:d1:80:ec:
f8:70:21:55:7b:09:40:7c:46:04:73:c7:7b:4d:ae:5e:b5:9c:
b5:6d:ea:72:17:0d:88:ae:74:e8:e6:d4:5d:f3:ee:9b:69:dc:
bb:af:d8:42:ae:31:5c:2d:bd:74:e4:ae:12:25:8b:af:32:5f:
01:79:86:c9:c6:ee:fb:85:64:b4:03:fb:06:a1:80:ae:78:f7:
5c:78:db:76:de:85:ce:b6:c2:03:f4:d8:7a:a1:d1:30:03:8a:
17:53:82:5a:9a:51:19:94:e1:85:07:f7:f4:24:2c:54:de:99:
13:5a:c3:69:fa:78:3a:34:c5:8a:c3:cf:98:c3:08:90:82:6b:
10:60:d7:63:10:62:27:14:cf:da:28:ed:2e:e9:02:ba:1f:ca:
d1:74:1d:91:87:7c:ad:ee:5b:1f:fa:c0:78:ff:56:b5:59:83:
94:33:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:36:29 2025 by rpki-client