Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF09AFC613E411F093D5F675762E951A.roa
File: FF09AFC613E411F093D5F675762E951A.roa (raw, json)
Hash identifier: UUqi0vu9tTCTF3mmgglBSixmw/ITJxe3sFjRFKRHsZ0=
Subject key identifier: F7:80:98:AA:BF:7B:B9:FC:CA:83:2A:94:5E:16:CE:5C:8D:A5:6B:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017829
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF09AFC613E411F093D5F675762E951A.roa
Signing time: Mon 07 Apr 2025 19:17:50 +0000
ROA not before: Mon 07 Apr 2025 19:17:46 +0000
ROA not after: Tue 10 Jun 2025 19:17:46 +0000
asID: 203020
IP address blocks: 154.217.52.0/24 maxlen: 24
154.217.53.0/24 maxlen: 24
154.217.54.0/24 maxlen: 24
154.217.55.0/24 maxlen: 24
154.217.56.0/24 maxlen: 24
154.217.57.0/24 maxlen: 24
154.217.58.0/24 maxlen: 24
154.217.59.0/24 maxlen: 24
154.217.60.0/24 maxlen: 24
154.217.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96297 (0x17829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 19:17:46 2025 GMT
Not After : Jun 10 19:17:46 2025 GMT
Subject: CN=67f424de-a24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d7:c5:ea:02:48:84:a8:09:70:df:2f:f7:98:
6d:8d:a9:97:c3:82:66:db:2d:7d:f4:42:91:9b:57:
55:77:95:27:19:47:0b:75:85:44:4a:f8:a5:37:94:
19:79:22:98:4d:13:60:57:97:75:64:12:b5:bd:66:
3f:d9:cf:f4:a3:16:18:18:a3:e6:2b:d1:3b:5a:c5:
7c:f4:02:52:d6:5e:a9:f9:b4:59:e4:f1:18:21:63:
26:26:75:b7:9c:f0:45:df:a0:36:7f:30:6b:52:bf:
06:ab:35:ab:9b:e5:5d:9d:25:05:6f:1b:c5:4c:99:
27:c4:f2:a7:c6:e5:0f:25:7a:aa:a0:20:28:b0:be:
cc:39:a8:6f:98:56:81:21:66:6c:21:f2:08:2b:ea:
8c:64:5e:58:1a:82:1e:55:cb:c9:85:bd:3c:78:fb:
61:cf:59:da:81:7d:28:43:3a:e5:18:82:e9:e7:3b:
51:85:6d:89:a0:0b:9a:b8:12:70:94:87:96:77:64:
8a:9c:23:b5:68:da:7d:45:99:ab:bb:4a:50:62:7b:
4f:26:9d:e0:1c:4c:28:22:8b:92:cb:23:91:b1:64:
36:48:50:ac:20:e9:eb:40:f5:32:e5:ae:58:68:8f:
0e:38:1a:1f:6f:db:1d:3a:a3:70:db:f8:f9:0d:4d:
36:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:80:98:AA:BF:7B:B9:FC:CA:83:2A:94:5E:16:CE:5C:8D:A5:6B:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF09AFC613E411F093D5F675762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.52.0-154.217.61.255
Signature Algorithm: sha256WithRSAEncryption
b9:e2:de:0b:c7:44:bf:0d:e5:f3:5c:c7:a5:62:6a:88:67:9b:
86:60:d0:e7:7e:48:99:39:0f:30:a1:a8:71:b3:ce:22:b6:0d:
16:05:13:23:e6:4c:75:ef:c1:8d:18:d4:20:86:7d:97:14:1a:
04:8d:c2:73:df:3d:fe:9e:fe:81:86:4d:85:fd:a9:ad:50:2c:
02:d0:1a:9d:90:16:3c:f3:40:6b:2e:39:08:a2:73:9a:f5:f0:
26:a7:db:f2:c7:b8:f0:74:95:58:d7:04:3b:88:58:fe:84:59:
a9:79:f8:51:1c:23:dd:07:3c:8f:fb:29:ee:74:99:bb:d2:9d:
00:dc:2a:df:97:4c:c7:67:d9:d3:4e:e8:7a:76:6b:b2:7a:b9:
90:3b:59:0a:53:c1:03:f3:78:3a:d7:e7:dd:ac:e1:33:9e:f1:
21:8e:6f:81:f8:d5:91:00:eb:fb:59:65:4b:2e:1e:5a:0a:d9:
e4:c7:3c:57:48:39:8a:e1:4d:63:b9:e9:76:bf:f7:43:01:02:
9a:72:4f:84:bd:4d:94:8a:aa:c1:0a:05:4f:bb:30:0c:ce:89:
5f:85:71:20:36:bc:50:c3:43:e7:1f:d0:4e:9a:df:19:d7:e5:
94:8c:74:73:98:c6:e2:09:37:53:c9:ba:39:ec:26:e9:67:a9:
bb:c2:92:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:22 2025 by rpki-client