Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8E86220268811F0A81A7CC5DAE4EC9C.roa
File: A8E86220268811F0A81A7CC5DAE4EC9C.roa (raw, json)
Hash identifier: Yd5H1xNc5hBVUI3a6yTIl6RwetkvnQAuBpHRU2EyFGQ=
Subject key identifier: C4:E8:27:34:0C:5E:8C:CD:32:8A:DD:1F:2C:DF:80:0B:80:E4:78:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8E86220268811F0A81A7CC5DAE4EC9C.roa
Signing time: Thu 01 May 2025 12:34:44 +0000
ROA not before: Thu 01 May 2025 12:34:39 +0000
ROA not after: Fri 28 Apr 2028 12:34:39 +0000
asID: 17561
IP address blocks: 154.81.64.0/24 maxlen: 24
154.81.65.0/24 maxlen: 24
154.81.66.0/24 maxlen: 24
154.81.67.0/24 maxlen: 24
154.81.68.0/24 maxlen: 24
154.81.69.0/24 maxlen: 24
154.95.42.0/24 maxlen: 24
154.95.43.0/24 maxlen: 24
154.95.44.0/24 maxlen: 24
154.95.45.0/24 maxlen: 24
154.95.46.0/24 maxlen: 24
154.95.47.0/24 maxlen: 24
154.95.56.0/24 maxlen: 24
154.95.57.0/24 maxlen: 24
154.95.58.0/24 maxlen: 24
154.95.59.0/24 maxlen: 24
154.95.60.0/24 maxlen: 24
154.95.61.0/24 maxlen: 24
154.95.62.0/24 maxlen: 24
154.95.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97788 (0x17dfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 12:34:39 2025 GMT
Not After : Apr 28 12:34:39 2028 GMT
Subject: CN=68136a64-1d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:e3:ac:db:ae:fe:f7:e2:b9:aa:12:f8:02:
42:70:ae:c2:df:ed:10:bb:7b:7f:63:5a:5e:0b:4c:
0d:19:da:9f:ad:0e:01:a7:de:cb:3e:8f:00:5b:71:
0c:ad:bb:f2:18:45:b1:f2:29:93:94:cb:7c:6b:30:
e7:85:41:4f:5c:18:f4:b8:65:49:84:b1:74:35:c4:
9a:44:81:09:2d:55:2b:f6:8a:83:f9:d2:0a:52:cd:
ac:1f:2b:fa:ab:11:9c:01:c0:b1:5a:cb:7a:85:5a:
55:95:fb:6a:2c:bb:22:8f:20:d8:30:a9:80:2e:a7:
f4:ff:d2:75:78:47:a6:66:8b:61:a8:70:34:09:f8:
4e:15:db:21:fa:0b:aa:53:79:0a:d8:b3:92:1a:27:
d3:92:09:fb:d1:93:d6:a8:1b:fb:89:e1:f9:76:2b:
54:47:2f:00:94:3f:e5:6d:73:9d:01:2f:db:96:9b:
27:10:dd:19:f1:e8:89:f7:41:f2:0a:3c:1b:6f:18:
62:a5:23:d8:d7:6b:d5:cb:7b:e0:e3:87:dd:ad:2e:
b2:9e:dd:76:d0:1a:4b:58:b6:1b:27:d2:da:d8:3c:
ee:86:57:61:a9:a9:fb:aa:0d:6e:ff:c3:1a:7d:53:
7d:24:38:df:fe:bf:e7:c3:a5:e3:96:90:9e:e7:ed:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:27:34:0C:5E:8C:CD:32:8A:DD:1F:2C:DF:80:0B:80:E4:78:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8E86220268811F0A81A7CC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.64.0-154.81.69.255
154.95.42.0-154.95.47.255
154.95.56.0/21
Signature Algorithm: sha256WithRSAEncryption
16:06:c9:1f:6b:af:11:7b:09:b8:1d:51:29:97:12:8e:0c:99:
b5:81:37:97:9c:07:28:b7:fb:56:e6:4d:09:15:bc:b7:a2:e4:
0e:22:fe:68:d0:d2:76:0b:d7:99:a5:44:b2:93:9c:1c:46:cf:
42:09:50:15:d4:a0:e1:3e:99:fc:89:85:f5:6e:01:be:f6:5e:
4b:6c:78:a2:e6:3e:da:bc:69:1e:63:f5:99:18:86:53:39:74:
b1:41:86:bd:5b:bb:14:ec:fd:39:42:11:13:2a:19:55:41:bf:
fa:98:8b:db:13:03:d1:16:ce:80:a3:3b:d1:84:4f:ba:bd:81:
2e:94:85:fd:91:16:af:4a:90:cf:6d:eb:d5:d0:1a:f6:52:7d:
4c:be:c7:ac:05:09:a3:7c:f4:ca:c3:08:da:dc:f5:2d:bb:aa:
df:f9:8a:39:ba:69:15:2e:fd:9b:a3:bc:94:1e:c9:9b:f6:e8:
63:58:df:56:5f:51:55:2a:b9:dd:a7:11:ba:88:ee:e8:53:d5:
2e:a8:61:98:67:a9:91:c3:e1:21:ba:20:a6:f9:e8:56:8e:6e:
4f:c8:af:5c:cd:d2:0a:1d:b2:33:71:ee:a3:f4:58:bb:0d:00:
14:b3:c0:75:d6:97:66:11:7e:f4:94:9c:6c:69:7a:b7:75:82:
46:5c:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:57:41 2025 by rpki-client