Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/352660A4267D11F0B707647ADAE4EC9C.roa
File: 352660A4267D11F0B707647ADAE4EC9C.roa (raw, json)
Hash identifier: 0h/CoAzVsomSv2UwYR7tc9JrC36RD4xwi2IoYIcHCuQ=
Subject key identifier: FE:BB:25:00:4F:DD:9C:31:2E:32:99:71:73:2A:1A:85:70:60:45:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/352660A4267D11F0B707647ADAE4EC9C.roa
Signing time: Thu 01 May 2025 11:12:46 +0000
ROA not before: Thu 01 May 2025 11:12:41 +0000
ROA not after: Fri 14 Apr 2028 11:12:41 +0000
asID: 17561
IP address blocks: 154.85.225.0/24 maxlen: 24
154.85.226.0/24 maxlen: 24
154.85.227.0/24 maxlen: 24
154.85.228.0/24 maxlen: 24
154.85.229.0/24 maxlen: 24
154.85.230.0/24 maxlen: 24
154.85.231.0/24 maxlen: 24
154.85.232.0/24 maxlen: 24
154.85.233.0/24 maxlen: 24
154.85.234.0/24 maxlen: 24
154.85.235.0/24 maxlen: 24
154.85.236.0/24 maxlen: 24
154.85.237.0/24 maxlen: 24
154.85.238.0/24 maxlen: 24
154.85.239.0/24 maxlen: 24
154.85.240.0/24 maxlen: 24
154.85.241.0/24 maxlen: 24
154.85.242.0/24 maxlen: 24
154.85.243.0/24 maxlen: 24
154.85.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97768 (0x17de8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:12:41 2025 GMT
Not After : Apr 14 11:12:41 2028 GMT
Subject: CN=6813572e-efe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:89:35:bf:8e:b8:f3:ad:7a:c1:29:df:ec:
9e:9d:70:b4:7f:a7:5c:e8:82:bd:c4:c6:1d:02:f3:
80:21:81:4a:80:84:98:0d:48:8f:34:d8:57:11:1e:
7d:d2:aa:13:31:af:28:2c:36:10:4f:91:7c:0f:cc:
77:d6:69:78:76:25:43:d7:97:b7:6f:2b:37:20:25:
19:53:57:74:b0:b6:b8:7b:25:f5:7d:11:b3:d0:fe:
6e:17:5e:ac:25:80:be:4d:ff:24:da:f5:1c:84:f5:
34:d9:92:4b:3d:e5:c5:28:90:fb:00:62:90:15:58:
5e:ac:84:8e:4b:44:24:f9:65:5d:94:20:c0:99:00:
e1:f0:3b:48:40:e2:98:4b:89:ed:c3:0f:87:12:13:
54:3b:ec:0c:2a:fc:8b:6b:0a:b6:bb:1c:51:63:5b:
5a:ee:ff:66:bb:0a:76:99:50:97:7b:24:2b:ab:32:
f2:08:40:c7:54:21:cf:fb:d1:b7:0c:9d:3d:04:b9:
41:7f:78:62:2e:b2:00:32:dd:19:a4:50:f4:48:98:
e2:40:b3:5c:e4:e1:12:b5:82:2d:2d:03:4e:61:78:
6a:88:ff:ad:1b:66:7c:cc:2e:87:78:79:5e:8b:5c:
33:fc:5d:de:91:ed:eb:cb:42:06:ca:a5:e6:32:97:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:25:00:4F:DD:9C:31:2E:32:99:71:73:2A:1A:85:70:60:45:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/352660A4267D11F0B707647ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.225.0-154.85.244.255
Signature Algorithm: sha256WithRSAEncryption
aa:05:f5:7a:20:16:8b:60:68:ed:a3:5c:69:cb:b2:81:3e:dc:
03:b7:25:3e:40:6a:0b:59:70:91:92:cf:84:79:1c:17:e3:4d:
3d:0d:98:08:c0:ea:75:3a:ab:d3:f6:ce:1f:92:62:96:5d:91:
3a:0a:2a:72:9c:cd:f7:06:da:ae:82:1d:5f:b6:84:f4:ed:03:
39:48:06:f7:11:18:6e:02:95:97:17:ac:79:56:2a:c5:ca:d6:
af:84:e5:0f:db:33:cc:2a:02:12:23:75:25:18:5c:08:d4:5c:
0c:ec:ab:76:23:32:f1:fb:8a:47:51:96:ff:b3:ab:49:91:10:
2f:1e:72:0d:13:9e:b1:48:57:4f:55:63:b1:a0:20:b4:b2:ba:
ea:c9:b2:b0:7b:fd:e9:ab:b9:e6:3a:bd:32:19:78:dd:d4:1a:
42:ea:1d:87:ca:d2:17:24:2a:40:22:18:87:eb:b9:68:ae:74:
eb:e0:b3:a8:57:3c:49:e9:2b:85:36:87:e5:d5:04:36:82:d4:
f0:4e:a4:c0:31:2f:2c:54:bc:2e:8d:14:5c:ad:85:5b:02:39:
c8:3b:2c:d1:ce:6c:c3:14:20:e8:30:8a:33:66:4e:d2:c6:71:
db:01:22:88:c8:4c:f2:e3:03:ce:aa:a8:4c:30:e2:e6:c0:1f:
2c:f1:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:20:57 2025 by rpki-client