Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45405F7213E911F0B7185193762E951A.roa
File: 45405F7213E911F0B7185193762E951A.roa (raw, json)
Hash identifier: /OPcNvS3morZd01klGIXbxDSgWqJQlSDk1sTGG2macE=
Subject key identifier: 0F:C7:C3:1C:46:2A:C0:F7:FA:35:6D:A9:78:FF:C7:1F:F5:DC:13:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017833
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45405F7213E911F0B7185193762E951A.roa
Signing time: Mon 07 Apr 2025 19:48:26 +0000
ROA not before: Mon 07 Apr 2025 19:48:22 +0000
ROA not after: Tue 10 Jun 2025 19:48:22 +0000
asID: 203020
IP address blocks: 154.217.64.0/24 maxlen: 24
154.217.65.0/24 maxlen: 24
154.217.66.0/24 maxlen: 24
154.217.67.0/24 maxlen: 24
154.217.68.0/24 maxlen: 24
154.217.69.0/24 maxlen: 24
154.217.70.0/24 maxlen: 24
154.217.71.0/24 maxlen: 24
154.217.91.0/24 maxlen: 24
154.217.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96307 (0x17833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 19:48:22 2025 GMT
Not After : Jun 10 19:48:22 2025 GMT
Subject: CN=67f42c0a-d7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:92:23:4f:a9:0d:6b:f3:5e:48:4d:bf:c1:
3c:82:92:9b:46:43:6a:fe:84:75:56:f2:a8:4d:9d:
c2:a2:82:c3:e6:38:5d:2e:dd:16:8b:71:b9:7e:3f:
8c:d7:4a:cb:68:c2:5d:33:ee:d5:13:a9:7f:5d:83:
1b:f7:b6:2d:5e:e6:41:be:4b:58:e4:06:17:1f:4b:
89:e2:fb:04:01:ac:6d:ad:74:c1:a8:9a:3f:6c:b1:
12:18:c0:da:b7:cf:c0:7e:93:f2:ab:59:5e:f0:c7:
ea:86:9f:4a:01:c8:c8:f6:6b:a9:b4:f7:a6:88:18:
5a:2f:96:9a:20:9b:e1:6f:61:3b:d5:26:6c:6a:53:
f9:73:6d:9f:80:fd:c8:15:38:e2:5e:b2:58:4e:06:
bc:ca:0e:07:f3:81:9e:2f:26:56:74:1b:56:f4:bf:
d8:99:21:8e:e1:68:44:ab:f4:ba:21:b1:45:5a:4d:
f7:eb:a0:23:4d:19:8b:12:15:75:21:fb:18:92:b5:
a4:9f:06:5f:f5:e9:5b:bb:85:0d:cf:c9:c4:f4:72:
ba:dc:0c:c6:36:d8:f6:98:37:94:ad:ae:3c:98:2b:
28:d3:79:2b:8d:2a:04:6a:89:72:2f:e2:03:ce:b6:
57:47:6a:10:61:fa:79:37:37:52:7f:8f:bd:8e:82:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C7:C3:1C:46:2A:C0:F7:FA:35:6D:A9:78:FF:C7:1F:F5:DC:13:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45405F7213E911F0B7185193762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.64.0/21
154.217.91.0/24
154.217.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d0:ab:f0:ef:cb:19:84:55:a7:38:05:b7:b3:ef:72:8a:6c:
20:21:22:26:e6:c8:ea:0d:01:2a:4f:0e:f1:19:be:c9:6f:58:
53:f8:b7:79:8c:25:28:35:2b:ce:c6:4d:03:8c:7d:ac:c2:7d:
22:77:4e:38:b8:8a:f3:18:b6:5a:f6:1b:69:25:81:45:e4:3f:
a7:cb:e2:ba:1d:ac:43:8e:ca:f7:5c:c5:78:14:f6:d4:0d:f5:
1c:91:7c:5c:6c:d0:f1:98:60:03:36:7a:7f:73:0d:65:ed:fe:
8d:d4:b8:64:a3:28:dd:44:12:21:f3:a8:92:f9:00:67:62:bc:
f5:82:fb:36:f5:a7:b8:02:50:0c:91:3c:34:92:3a:f7:89:ca:
8b:0e:42:9d:78:eb:e3:78:04:2b:84:6f:ce:87:50:18:ca:33:
2f:a8:1c:52:4e:6c:2e:42:ed:49:6a:15:9b:7d:6f:8d:2c:46:
27:88:35:30:04:ed:f0:d4:87:ce:73:3c:4c:ef:68:68:eb:6b:
e7:b9:ac:06:37:5d:4a:3b:55:a0:8f:57:72:c0:1b:61:f2:67:
0a:b5:fa:7b:c6:1f:b4:97:17:cd:8d:fe:c9:8b:2d:d1:93:eb:
e9:e7:45:87:89:e7:e0:87:11:95:6a:e6:37:c0:cf:75:79:83:
d7:e8:b4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:59 2025 by rpki-client