Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32C9E61E11F611F08E138752762E951A.roa
File: 32C9E61E11F611F08E138752762E951A.roa (raw, json)
Hash identifier: u0U/rzcVyRNjuJNjkgJ0w0C0YZod2jwuigEIzTsI+UQ=
Subject key identifier: D3:A7:2F:5E:FA:3C:6E:66:28:5A:B7:9A:34:5C:1C:2A:73:6D:80:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32C9E61E11F611F08E138752762E951A.roa
Signing time: Sat 05 Apr 2025 08:15:56 +0000
ROA not before: Sat 05 Apr 2025 08:15:52 +0000
ROA not after: Sat 10 May 2025 08:15:52 +0000
asID: 203020
IP address blocks: 154.217.0.0/24 maxlen: 24
154.217.1.0/24 maxlen: 24
154.217.2.0/24 maxlen: 24
154.217.3.0/24 maxlen: 24
154.217.4.0/24 maxlen: 24
154.217.39.0/24 maxlen: 24
154.217.40.0/24 maxlen: 24
154.217.41.0/24 maxlen: 24
154.217.42.0/24 maxlen: 24
154.217.43.0/24 maxlen: 24
154.217.44.0/24 maxlen: 24
154.217.45.0/24 maxlen: 24
154.217.46.0/24 maxlen: 24
154.217.47.0/24 maxlen: 24
154.217.48.0/24 maxlen: 24
154.217.96.0/19 maxlen: 24
154.217.160.0/22 maxlen: 24
154.217.164.0/22 maxlen: 24
154.217.168.0/21 maxlen: 24
154.217.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96211 (0x177d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 08:15:52 2025 GMT
Not After : May 10 08:15:52 2025 GMT
Subject: CN=67f0e6bc-0a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:da:5b:d6:c8:6d:aa:d6:37:10:93:d7:03:
13:73:98:96:88:31:8c:93:51:06:31:9b:5a:fa:56:
ef:24:bf:21:5d:d0:65:63:ae:1e:4b:58:c7:99:2a:
8e:a0:dc:62:62:f5:55:81:e7:d7:87:e7:c9:fc:88:
42:f9:85:18:61:5e:84:94:b1:e6:c1:90:ae:88:d9:
54:89:45:00:b3:d9:a8:df:75:18:0c:b3:9c:d6:c2:
40:43:8d:15:48:34:85:08:0f:a4:38:59:72:d0:0d:
a2:54:22:e7:cf:23:e4:71:5a:71:92:2b:53:3e:a7:
6f:24:7e:0e:0c:1f:6e:7c:85:5e:59:f8:94:87:95:
7b:97:c4:b5:ae:fc:01:78:4b:90:4f:cb:3b:90:d3:
b6:20:b6:ad:cd:3e:f0:6a:73:43:ab:9d:dd:30:56:
45:80:24:ab:01:d9:08:52:f7:e3:96:7a:19:a0:5e:
64:34:98:92:79:39:d1:c1:66:a7:d5:de:50:06:54:
f0:c5:bb:49:9c:81:9d:22:69:ef:2f:73:19:46:e1:
34:c2:ef:a6:c1:09:9d:09:af:a2:f6:41:29:69:aa:
0a:47:1a:ba:3c:0e:a6:a2:38:cf:dd:d6:36:5c:52:
47:58:b9:e3:2d:d0:a5:2e:98:0f:49:36:45:6e:a9:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:2F:5E:FA:3C:6E:66:28:5A:B7:9A:34:5C:1C:2A:73:6D:80:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32C9E61E11F611F08E138752762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.0.0-154.217.4.255
154.217.39.0-154.217.48.255
154.217.96.0/19
154.217.160.0/20
154.217.178.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:31:54:9a:79:f2:38:69:04:be:03:f0:bc:bd:4f:0d:88:e8:
69:d1:18:a4:4e:5f:c6:ea:8d:ed:a2:03:e9:d4:14:8e:ff:cf:
46:e3:36:3a:38:4f:d6:10:f0:f2:82:0f:27:59:ed:3f:34:a8:
94:31:72:1e:4e:4e:7f:bc:aa:e5:a8:08:2d:6f:f7:cb:ef:27:
7a:01:0e:8e:5f:d3:a7:07:4b:57:29:db:53:70:75:72:32:9f:
9b:ff:0b:16:c7:1f:c2:31:cf:d3:6e:04:59:fb:a8:74:7c:97:
c1:25:50:60:e8:35:e3:ea:96:b6:5b:83:1d:b8:40:cd:37:75:
ce:90:f3:ad:2a:25:d4:dc:31:24:df:d3:7e:f7:df:f3:b8:04:
eb:96:b9:81:4b:20:e3:02:ad:f9:b3:31:96:7c:80:54:92:e6:
df:9c:51:89:c3:03:3a:5b:91:47:39:49:fd:3b:1c:b6:fa:6c:
db:84:24:23:e7:7c:2a:fd:bd:c9:ef:61:15:d6:7b:e0:bb:ab:
9e:ae:0d:7a:9e:82:83:81:70:4b:40:07:c6:68:34:1b:e3:43:
1d:73:36:4a:77:c8:44:d4:b7:ab:2b:ec:10:fa:86:48:0f:5c:
3d:de:12:f2:48:14:8c:b5:f0:95:e1:14:e9:a8:06:f6:21:71:
72:99:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:37 2025 by rpki-client