Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3555A2342F2311F0BD6ABAD2DAE4EC9C.roa
File: 3555A2342F2311F0BD6ABAD2DAE4EC9C.roa (raw, json)
Hash identifier: b4fNH24o7L4VFpIEwRSlaeM9o4z/eBugDMSJcsk5VWk=
Subject key identifier: DE:87:EF:77:C6:FD:97:49:72:EB:46:1C:29:D4:68:0F:C6:AA:CB:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3555A2342F2311F0BD6ABAD2DAE4EC9C.roa
Signing time: Mon 12 May 2025 11:21:12 +0000
ROA not before: Mon 12 May 2025 11:21:07 +0000
ROA not after: Sun 08 Jun 2025 11:21:07 +0000
asID: 45194
IP address blocks: 154.84.207.0/24 maxlen: 24
154.84.209.0/24 maxlen: 24
154.84.210.0/24 maxlen: 24
154.84.225.0/24 maxlen: 24
154.84.226.0/24 maxlen: 24
154.84.227.0/24 maxlen: 24
154.84.230.0/24 maxlen: 24
154.84.232.0/24 maxlen: 24
154.84.233.0/24 maxlen: 24
154.84.234.0/24 maxlen: 24
154.84.235.0/24 maxlen: 24
154.84.236.0/24 maxlen: 24
154.84.237.0/24 maxlen: 24
154.84.238.0/24 maxlen: 24
154.84.239.0/24 maxlen: 24
154.84.241.0/24 maxlen: 24
154.84.243.0/24 maxlen: 24
154.84.244.0/24 maxlen: 24
154.84.245.0/24 maxlen: 24
154.84.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98283 (0x17feb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 11:21:07 2025 GMT
Not After : Jun 8 11:21:07 2025 GMT
Subject: CN=6821d9a8-d1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:cc:20:d4:0c:41:45:9b:13:90:24:55:b8:
e2:c6:da:be:50:ae:c7:51:f2:d3:21:b6:5a:d9:58:
ba:d5:2e:8b:b9:cd:c7:01:46:5f:e5:b6:bb:25:16:
da:77:3a:fc:16:d9:87:ac:43:7b:1c:4b:50:d5:4b:
d0:82:20:05:ab:40:a6:cf:a9:0a:71:e8:9c:00:dc:
4d:60:fe:1a:f9:64:1f:df:78:a8:6e:96:bb:c6:34:
07:e4:b6:8b:61:9b:dc:e2:f1:f9:fe:bc:bb:b4:79:
43:05:3e:bc:a1:8c:4f:5c:a7:6f:63:f5:e9:17:38:
19:43:46:cd:e6:9c:fc:0c:df:55:32:d7:ec:46:73:
f9:48:1c:d2:8a:1b:3c:ec:40:43:54:c7:d5:22:14:
d6:ff:c3:78:4f:cb:e9:74:c8:f1:b8:ea:bf:c8:af:
69:fe:1e:83:a2:1e:4d:45:ae:06:28:d6:57:2c:01:
8b:d9:fc:2e:9c:b4:27:48:43:41:ea:81:22:66:bc:
92:6b:e6:0e:a0:b7:53:7a:93:38:ba:23:4e:e1:fc:
33:33:82:da:b0:f8:be:ed:11:1a:c9:50:d3:4c:f0:
d3:3a:74:78:b0:da:c5:18:99:6a:23:ba:9b:13:cf:
9d:fd:bc:53:38:c6:bf:0b:8c:f9:a3:f9:f8:57:4f:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:EF:77:C6:FD:97:49:72:EB:46:1C:29:D4:68:0F:C6:AA:CB:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3555A2342F2311F0BD6ABAD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.207.0/24
154.84.209.0-154.84.210.255
154.84.225.0-154.84.227.255
154.84.230.0/24
154.84.232.0/21
154.84.241.0/24
154.84.243.0-154.84.246.255
Signature Algorithm: sha256WithRSAEncryption
9c:07:58:68:39:68:87:e2:f0:25:03:f0:0f:19:79:22:2f:cd:
4d:52:62:73:98:5c:9d:4f:05:9b:58:42:ba:6e:e2:c8:b9:9c:
fb:bb:88:1b:c2:ee:0d:0e:a6:82:88:2d:ab:4a:5e:8d:be:25:
66:d7:fd:cd:b9:d0:57:aa:17:41:95:2a:1e:c8:15:7d:47:ef:
60:9c:f9:60:cf:76:b9:db:4b:04:46:23:dc:d7:07:7d:b3:af:
69:4d:f0:ff:03:ed:10:9a:2e:fe:69:f9:fe:b3:d7:b1:55:19:
1d:92:60:31:06:35:f0:98:3c:24:e0:cc:47:d8:9b:9f:32:2d:
8b:54:00:0d:cc:39:cd:0f:7c:8c:02:3b:15:42:e2:13:69:6a:
cc:63:d6:01:50:e8:5a:44:c6:86:f9:ee:85:fc:cc:4c:ea:a6:
d0:23:79:7e:d3:c2:5a:a3:1b:31:76:73:a7:f6:9e:af:fa:1b:
53:a8:00:f8:d2:6a:7c:9e:ca:e4:e5:d0:54:57:33:c6:65:3b:
99:a4:7d:d9:70:4f:6f:27:54:a6:34:a9:e2:11:b7:12:ca:2f:
35:00:58:a3:12:be:14:ce:aa:44:36:c9:6c:4f:8a:63:85:a7:
8e:ac:eb:64:84:e7:b4:12:24:33:02:b1:f6:39:48:6b:5e:0d:
19:6c:de:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:58:17 2025 by rpki-client