Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA80D0421F411F09D03309DDAE4EC9C.roa
File: FCA80D0421F411F09D03309DDAE4EC9C.roa (raw, json)
Hash identifier: C0HGUy7DeqnzVbcH5KusqmjCWFCRK01lfPznntDgyIc=
Subject key identifier: 2A:BB:4E:99:AE:AE:12:A0:D2:2C:35:90:05:40:D4:C6:69:58:AB:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA80D0421F411F09D03309DDAE4EC9C.roa
Signing time: Fri 25 Apr 2025 16:47:35 +0000
ROA not before: Fri 25 Apr 2025 16:47:30 +0000
ROA not after: Fri 02 May 2025 16:47:30 +0000
asID: 54801
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.201.7.0/24 maxlen: 24
154.201.8.0/22 maxlen: 24
154.201.40.0/23 maxlen: 24
154.213.176.0/20 maxlen: 24
154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
154.222.77.0/24 maxlen: 24
154.222.78.0/24 maxlen: 24
154.222.136.0/23 maxlen: 24
154.222.146.0/23 maxlen: 24
154.223.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97046 (0x17b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 16:47:30 2025 GMT
Not After : May 2 16:47:30 2025 GMT
Subject: CN=680bbca7-6e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:e3:3c:cf:dd:12:aa:10:c2:ae:34:64:f8:
ec:22:a1:37:6e:bc:79:3a:1c:c2:eb:ee:ad:db:33:
a3:c0:1c:a6:b3:df:a9:a6:69:6b:1d:5e:b7:2e:59:
81:8e:06:73:76:04:c3:8a:12:55:bd:02:40:f5:df:
8d:f4:b7:70:ba:c1:c7:66:3d:63:18:3f:3c:6d:33:
84:a0:6b:71:53:3f:30:fc:49:c8:e8:3d:cb:73:61:
c6:39:b4:4d:0e:08:01:a6:17:7f:1d:52:f8:a8:ce:
c3:a9:69:53:64:0b:f5:cd:c8:96:ff:1a:d8:6a:31:
01:b3:a8:40:51:2e:6b:48:f8:a3:3c:2b:00:27:75:
03:1e:f7:bd:5d:ea:b9:c9:02:42:b3:d8:30:eb:31:
4d:47:92:0c:77:b4:1f:de:83:77:79:b8:42:75:62:
74:b1:d7:dc:20:50:16:2b:ba:1d:bb:5c:3e:8d:80:
a2:df:13:c8:f8:1d:ff:49:12:6c:cb:cc:99:98:a2:
67:d1:7e:34:c9:21:7d:48:8d:c6:e4:ff:82:f7:6c:
e5:2d:d3:e4:b9:83:08:ed:76:0f:31:d3:79:13:c5:
81:f5:e7:31:75:43:47:fe:05:ec:91:e6:f3:df:6b:
fc:94:8e:3e:4a:be:29:93:9e:a3:65:2f:7d:41:a2:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BB:4E:99:AE:AE:12:A0:D2:2C:35:90:05:40:D4:C6:69:58:AB:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA80D0421F411F09D03309DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.200.241.0-154.200.242.255
154.201.7.0-154.201.11.255
154.201.40.0/23
154.213.176.0/20
154.213.211.0-154.213.212.255
154.222.77.0-154.222.78.255
154.222.136.0/23
154.222.146.0/23
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:1f:30:34:4e:aa:32:f6:96:0b:56:cb:ba:0a:56:5f:d4:f9:
21:69:ca:de:0e:1e:e8:6b:c8:7b:7e:e1:22:15:44:34:e3:c4:
94:60:db:a9:ab:0f:a2:c1:a3:7f:17:a1:5f:94:cf:32:24:3b:
f7:74:5c:a1:39:87:49:76:32:7b:ef:35:4d:73:40:fa:9b:91:
1c:77:95:28:d5:a5:92:8e:bb:64:2b:93:17:38:a2:f5:7c:40:
db:fb:d5:33:5b:81:00:91:da:fb:52:b6:23:8d:f2:1f:c9:28:
b5:6a:28:da:5f:4a:b1:ce:81:5e:0b:90:0b:a0:22:6a:94:89:
bf:32:80:2f:43:81:5a:85:a7:ce:d7:a1:7f:57:4d:ea:88:af:
00:e6:a9:73:06:0d:e7:30:58:9f:c8:46:74:4e:db:da:95:f6:
6e:3a:5d:d0:1d:33:e4:eb:94:34:2a:13:7e:db:aa:cc:e7:90:
c0:7c:80:a7:9f:bf:54:af:63:e1:aa:83:2d:44:53:84:38:5c:
5e:4e:22:89:4e:44:96:db:40:00:cc:7d:75:97:55:9f:9d:d0:
fc:d1:0e:88:97:b1:a1:e6:af:6b:f5:ff:cc:50:2e:87:98:00:
66:65:77:7c:ad:79:b8:95:a6:c2:1f:3d:7c:ec:19:09:bc:21:
e3:58:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:06:46 2025 by rpki-client