Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46710FDC24DC11F0B3F12B95DAE4EC9C.roa
File: 46710FDC24DC11F0B3F12B95DAE4EC9C.roa (raw, json)
Hash identifier: RsKbbSO929wyBBH5pBqbk7aIMsO0FDudn/UbYQsWG3Q=
Subject key identifier: 73:0A:DF:51:21:4F:B7:27:29:59:22:90:8E:59:3B:EB:3A:8F:63:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CCF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46710FDC24DC11F0B3F12B95DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 09:28:15 +0000
ROA not before: Tue 29 Apr 2025 09:28:10 +0000
ROA not after: Mon 23 Jun 2025 09:28:10 +0000
asID: 138915
IP address blocks: 154.90.44.0/23 maxlen: 24
154.90.46.0/23 maxlen: 24
154.90.50.0/23 maxlen: 24
154.90.58.0/23 maxlen: 24
154.90.60.0/23 maxlen: 24
154.90.62.0/23 maxlen: 24
154.93.34.0/23 maxlen: 24
154.93.36.0/23 maxlen: 24
154.93.38.0/23 maxlen: 24
154.93.40.0/23 maxlen: 24
154.93.42.0/23 maxlen: 24
154.93.44.0/24 maxlen: 24
154.93.45.0/24 maxlen: 24
154.93.46.0/24 maxlen: 24
154.93.47.0/24 maxlen: 24
154.93.48.0/24 maxlen: 24
154.93.49.0/24 maxlen: 24
154.93.52.0/23 maxlen: 24
154.93.54.0/23 maxlen: 24
154.93.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97487 (0x17ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 09:28:10 2025 GMT
Not After : Jun 23 09:28:10 2025 GMT
Subject: CN=68109bae-c158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:c9:ca:e2:74:3b:93:1a:32:e6:d1:41:7b:
e5:2b:c2:d7:e9:dc:68:0b:b8:8f:67:61:37:90:d7:
a4:d2:a4:34:fe:b9:26:78:85:6e:a8:01:0f:65:99:
c9:56:2d:0c:89:0f:e8:33:bc:6d:e0:b0:26:e4:1b:
2e:0b:11:4a:6a:e4:a2:e1:d6:12:97:6a:aa:ba:5a:
44:f9:db:11:9c:81:34:70:52:df:68:3a:d7:31:40:
f3:f2:fa:76:66:c6:8c:16:ac:9b:a8:9e:e7:e1:f5:
e8:24:0c:c3:1d:32:37:75:b9:77:4f:39:0b:4b:9f:
54:a8:da:50:b1:a6:b8:7a:d8:7a:44:85:bb:e3:81:
a4:bb:8a:ee:10:18:d8:18:c5:a0:8a:a0:0a:95:08:
06:f2:b6:99:1f:b4:5d:e0:97:68:da:a1:7f:88:33:
a3:4a:e7:35:b3:16:9a:e2:85:b8:79:b0:03:4f:85:
bd:60:65:5d:37:ec:3a:4e:ba:ad:9e:6d:73:c6:ca:
11:33:16:2a:ee:1b:c0:29:66:1f:50:5a:86:f3:db:
70:61:8b:4e:1d:0d:63:13:fe:0a:75:73:29:d6:0a:
68:f3:1b:e1:07:ce:5f:24:3a:45:cb:e0:69:e8:ab:
f7:9e:5c:bd:0f:9f:d1:b3:94:9d:b1:54:71:88:e5:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0A:DF:51:21:4F:B7:27:29:59:22:90:8E:59:3B:EB:3A:8F:63:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46710FDC24DC11F0B3F12B95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.44.0/22
154.90.50.0/23
154.90.58.0-154.90.63.255
154.93.34.0-154.93.49.255
154.93.52.0-154.93.57.255
Signature Algorithm: sha256WithRSAEncryption
5b:b9:bc:09:88:1c:c9:cd:3c:79:65:0e:82:6e:2d:bf:a5:cc:
22:e9:19:84:33:0a:d6:ab:0a:53:28:c6:1f:65:20:07:ef:3d:
a7:24:d7:2e:cc:0b:43:6c:92:d0:e3:35:ff:9e:dd:1d:5d:32:
c5:c7:94:9e:cd:a2:f0:c6:7d:47:82:d7:28:99:a2:a2:12:17:
c1:a2:06:50:7c:dd:de:02:b1:6b:01:82:11:8c:06:ef:20:32:
64:23:c8:2b:69:15:5c:44:37:4f:d7:17:b5:ac:f8:55:c7:30:
86:7c:31:44:71:e3:37:b3:70:3d:e2:33:f8:79:30:15:be:77:
a3:56:f3:cb:ed:f6:82:6e:af:54:8b:75:26:c6:ac:7c:21:91:
aa:8e:74:ed:74:38:d4:2f:43:e4:2a:30:bb:b9:bb:1f:e0:1e:
ba:1e:d7:8b:0c:b8:66:30:02:dc:92:57:bb:ca:42:26:1a:34:
c6:95:fd:e1:b6:3e:dc:75:0a:78:c1:0d:9a:06:98:f6:21:f0:
6d:8c:83:1f:8f:22:95:9d:b3:35:f9:3b:ee:7d:3d:fe:7e:6f:
fa:e4:b8:6a:f6:35:ed:86:19:e0:c6:2e:0f:f6:61:f0:bc:e2:
6b:fc:d9:d6:f1:48:8a:5e:c5:b4:d9:61:1d:50:15:d6:f4:08:
c3:db:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:46:29 2025 by rpki-client