Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A50FEC026A811F0BEA4AA94DAE4EC9C.roa
File: 2A50FEC026A811F0BEA4AA94DAE4EC9C.roa (raw, json)
Hash identifier: LrWoPCxRcxMtP8JkFwM7gnrylQXk+ffkayPwoe9m1lw=
Subject key identifier: 63:E6:AA:71:7D:5D:54:B6:5F:64:8E:D8:4A:78:96:91:F3:51:FF:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A50FEC026A811F0BEA4AA94DAE4EC9C.roa
Signing time: Thu 01 May 2025 16:20:16 +0000
ROA not before: Thu 01 May 2025 16:20:11 +0000
ROA not after: Mon 01 May 2028 16:20:11 +0000
asID: 17561
IP address blocks: 154.214.142.0/24 maxlen: 24
154.214.143.0/24 maxlen: 24
154.214.144.0/24 maxlen: 24
154.214.145.0/24 maxlen: 24
154.214.146.0/24 maxlen: 24
154.214.147.0/24 maxlen: 24
154.214.148.0/24 maxlen: 24
154.214.149.0/24 maxlen: 24
154.214.150.0/24 maxlen: 24
154.214.151.0/24 maxlen: 24
154.214.152.0/24 maxlen: 24
154.214.153.0/24 maxlen: 24
154.214.154.0/24 maxlen: 24
154.214.155.0/24 maxlen: 24
154.214.156.0/24 maxlen: 24
154.214.157.0/24 maxlen: 24
154.214.158.0/24 maxlen: 24
154.214.159.0/24 maxlen: 24
154.214.160.0/24 maxlen: 24
154.214.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97846 (0x17e36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 16:20:11 2025 GMT
Not After : May 1 16:20:11 2028 GMT
Subject: CN=68139f40-0b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:9d:54:93:3c:99:a4:22:58:df:13:be:ad:
60:62:52:ff:75:c0:84:e1:ea:45:d2:80:fa:94:55:
6b:c6:35:d6:38:1e:f5:4b:90:f4:eb:0e:13:91:d6:
c8:10:62:19:6a:af:de:62:71:a5:cd:df:54:17:65:
97:93:31:67:b3:a9:5c:3c:62:b4:9f:3f:13:97:1e:
3c:e9:8f:dc:d2:12:49:5b:a5:24:61:ef:e8:89:ca:
21:8e:f5:a4:63:33:4b:b5:6b:d6:66:5d:c9:8d:76:
da:af:ea:8a:96:a2:0f:24:18:7a:13:8d:dc:2f:a3:
da:2b:d3:8b:07:80:36:58:3f:6f:6d:77:7b:ca:06:
52:44:dc:63:a3:0f:97:08:3d:74:5b:d3:14:c3:57:
4f:79:8c:40:b2:e0:1e:5d:b3:61:69:fa:3a:6e:40:
b1:21:33:d9:81:69:22:84:08:31:e2:ee:1f:7d:7a:
f6:a3:9e:63:e4:48:08:43:43:73:be:ac:da:e1:c5:
bf:43:00:19:63:2a:21:b0:c0:a8:2d:f7:5d:43:ca:
6d:bb:94:58:aa:92:2c:4a:3b:43:a2:5f:8c:b7:84:
5a:4b:87:cd:3a:2c:36:0d:2a:84:85:25:7b:9b:1a:
40:86:6f:43:56:72:54:76:7c:0f:a8:c7:b6:95:83:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E6:AA:71:7D:5D:54:B6:5F:64:8E:D8:4A:78:96:91:F3:51:FF:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A50FEC026A811F0BEA4AA94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.142.0-154.214.161.255
Signature Algorithm: sha256WithRSAEncryption
5a:f4:b4:ff:df:8d:da:6d:8a:eb:d6:fd:bf:e1:7f:30:06:9f:
2d:d3:a2:41:01:f0:1a:6f:94:f0:a1:4c:9d:97:f5:5e:1d:ff:
6d:6c:e6:fd:be:91:09:56:40:1c:24:99:a2:29:72:51:31:65:
9f:80:e7:9f:3d:d2:6e:8c:05:43:b4:c0:18:34:66:aa:00:f3:
40:ab:93:6a:c6:1c:06:4a:11:1d:11:23:e3:b5:02:ef:12:c7:
9f:63:75:17:c9:87:b5:e2:fc:a2:de:30:d7:4f:8a:f4:00:72:
f6:51:fb:61:a4:73:c8:1d:16:08:1c:4f:66:56:1c:a0:c6:dd:
71:77:84:d0:07:d7:8f:c1:15:f9:37:28:1c:47:d5:08:9f:f3:
c0:c1:23:ff:db:8e:82:1c:56:43:a1:cc:2d:b1:84:63:61:db:
95:cb:b2:8e:81:03:b4:d2:78:e8:74:f6:65:8e:29:83:f2:f0:
6d:ad:47:58:a3:fb:0a:11:da:5d:31:a4:db:95:63:88:e1:9f:
fc:07:cc:4d:2c:20:87:29:d1:36:09:a8:f9:5c:96:10:97:d3:
e5:73:cd:a1:3c:df:06:0f:ad:fe:63:13:46:40:8c:ab:3a:e3:
42:2b:e0:41:d2:bc:83:45:67:46:ec:9a:1f:3a:13:19:ef:5b:
d8:9d:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:51:08 2025 by rpki-client