Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5321FC61C9D11F09D39EBDBDAE4EC9C.roa
File: A5321FC61C9D11F09D39EBDBDAE4EC9C.roa (raw, json)
Hash identifier: 6QfBZ1SHe2X0M+svp0HBhAEC1UlNnABhxoOn/Qdzm10=
Subject key identifier: 2F:5D:5F:C0:68:F3:B5:F5:6A:E4:5D:C6:30:07:46:A6:FF:9A:44:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5321FC61C9D11F09D39EBDBDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 21:39:46 +0000
ROA not before: Fri 18 Apr 2025 21:39:41 +0000
ROA not after: Sat 31 May 2025 21:39:41 +0000
asID: 44559
IP address blocks: 154.198.37.0/24 maxlen: 24
154.198.38.0/24 maxlen: 24
154.198.39.0/24 maxlen: 24
154.203.206.0/24 maxlen: 24
154.203.207.0/24 maxlen: 24
154.203.212.0/24 maxlen: 24
154.203.213.0/24 maxlen: 24
154.203.214.0/24 maxlen: 24
154.203.215.0/24 maxlen: 24
154.203.217.0/24 maxlen: 24
154.203.226.0/24 maxlen: 24
154.203.227.0/24 maxlen: 24
154.203.228.0/24 maxlen: 24
154.203.229.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.205.28.0/24 maxlen: 24
154.205.29.0/24 maxlen: 24
154.205.241.0/24 maxlen: 24
154.205.242.0/24 maxlen: 24
154.205.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96750 (0x179ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 21:39:41 2025 GMT
Not After : May 31 21:39:41 2025 GMT
Subject: CN=6802c6a2-0de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:b2:fb:a5:d4:1f:27:cd:cf:aa:62:d1:79:
79:6f:39:d1:9a:25:79:f7:ad:e2:14:a0:a3:10:17:
f9:eb:bf:b6:f3:66:23:b1:3d:f6:02:dc:32:f1:ec:
4f:4e:1b:54:a5:93:ca:19:1d:7e:3e:c5:91:47:dc:
e6:1f:d6:a7:60:5b:61:ba:57:f8:8d:53:f6:6d:7d:
de:80:85:57:74:e3:96:e6:45:19:cc:6f:56:2e:95:
cc:86:e3:63:30:34:2e:73:66:02:eb:9c:cb:12:ee:
59:8c:70:d3:c1:4a:d4:3f:64:ea:b9:72:9a:a7:e9:
e2:32:0d:11:c4:2f:50:41:78:5e:3d:e2:c7:9c:6c:
5f:5a:53:29:aa:b5:e3:5c:2a:57:af:4a:75:8e:19:
32:04:31:bf:52:d6:d7:18:be:9b:08:5f:b5:65:3b:
a9:d9:80:58:c1:05:7e:24:c9:2e:ea:18:cf:b8:11:
c6:2c:18:a9:33:f1:08:ed:a8:f7:8a:06:21:b3:16:
f0:83:ef:fd:24:3f:a8:23:d3:a0:bb:df:92:4b:e5:
b4:14:cf:94:6d:9e:2d:d5:18:91:d3:a4:ba:aa:85:
30:e9:be:59:39:56:cf:62:04:17:c1:1c:ac:a3:e7:
bc:c5:05:df:a3:43:18:e2:a3:cd:e7:e9:5c:62:02:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:5F:C0:68:F3:B5:F5:6A:E4:5D:C6:30:07:46:A6:FF:9A:44:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5321FC61C9D11F09D39EBDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.37.0-154.198.39.255
154.203.206.0/23
154.203.212.0/22
154.203.217.0/24
154.203.226.0-154.203.229.255
154.203.250.0/24
154.205.28.0/23
154.205.241.0-154.205.243.255
Signature Algorithm: sha256WithRSAEncryption
ac:65:5b:3d:34:5a:9d:75:1c:af:02:0d:86:3f:a6:9c:4e:3c:
ab:cd:2f:7e:29:61:94:6f:92:da:fc:48:6a:7b:9b:96:dd:2f:
1d:57:8a:40:b8:23:72:6c:df:0b:9b:9a:52:c6:cc:f3:88:81:
cf:7f:78:cb:a2:bf:75:b9:72:3f:01:74:28:bc:86:30:6f:49:
97:13:f4:11:4e:12:5c:02:99:c2:0b:58:17:41:dd:0b:9b:93:
b8:9f:f9:13:f9:2c:64:08:c8:af:da:84:5a:d9:ff:b2:9e:bd:
fe:fc:32:6e:f6:75:75:ed:10:1c:7d:c6:0b:0a:6a:84:c8:3c:
13:c4:2d:fb:53:cf:ec:73:6b:bb:31:10:d5:bf:b0:69:9f:7a:
8c:6c:b9:11:e1:b6:66:82:25:84:9c:c1:ad:fe:1e:7c:6f:a7:
96:fa:61:62:cf:4c:f9:b9:36:6e:ae:95:85:b2:51:68:83:6d:
ca:f5:e0:df:5d:62:ca:b2:ed:77:8a:e0:a7:0d:94:b4:57:6f:
1e:e4:8e:a8:df:b0:0b:7c:60:89:d8:ae:da:62:e5:bb:55:d5:
3a:34:2b:b2:6c:55:04:66:6c:cc:2c:e2:1c:41:ad:42:74:bc:
2c:ca:20:ab:b7:77:7b:32:33:91:1e:99:9e:70:03:a1:13:e3:
99:14:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:08 2025 by rpki-client