Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD470A8A273011F0A89124ADDAE4EC9C.roa
File: AD470A8A273011F0A89124ADDAE4EC9C.roa (raw, json)
Hash identifier: N4y20tI2W8vsszbAJF6+UHIKcc/szZdDkKgCJRTIDbU=
Subject key identifier: CA:97:59:67:0D:3D:5A:68:BB:50:88:BA:D5:ED:6E:9D:99:D3:AE:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD470A8A273011F0A89124ADDAE4EC9C.roa
Signing time: Fri 02 May 2025 08:37:27 +0000
ROA not before: Fri 02 May 2025 08:37:22 +0000
ROA not after: Mon 02 Jun 2025 08:37:22 +0000
asID: 203020
IP address blocks: 154.205.186.0/24 maxlen: 24
154.223.137.0/24 maxlen: 24
154.223.138.0/24 maxlen: 24
154.223.139.0/24 maxlen: 24
154.223.140.0/24 maxlen: 24
154.223.141.0/24 maxlen: 24
154.223.142.0/24 maxlen: 24
154.223.143.0/24 maxlen: 24
154.223.160.0/24 maxlen: 24
154.223.161.0/24 maxlen: 24
154.223.162.0/24 maxlen: 24
154.223.163.0/24 maxlen: 24
154.223.172.0/24 maxlen: 24
154.223.173.0/24 maxlen: 24
154.223.174.0/24 maxlen: 24
154.223.175.0/24 maxlen: 24
154.223.184.0/24 maxlen: 24
154.223.185.0/24 maxlen: 24
154.223.186.0/24 maxlen: 24
154.223.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97866 (0x17e4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 08:37:22 2025 GMT
Not After : Jun 2 08:37:22 2025 GMT
Subject: CN=68148447-fa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:55:a6:93:f4:50:c3:33:5a:2a:a4:35:65:
55:c6:35:fb:ba:05:e7:f9:32:8c:64:f3:a7:ad:34:
36:ac:0f:c2:c1:c8:0d:5e:08:c5:77:79:2f:ac:d7:
e3:55:58:8d:a2:db:2f:9b:3d:65:77:90:9c:4a:57:
e3:13:35:af:a3:62:42:cb:a1:87:d5:76:f9:23:ab:
8c:37:d8:90:5b:d3:59:85:ff:7b:9c:43:bf:91:95:
fa:bb:0e:65:9e:ca:c3:a5:2e:f8:73:93:b7:22:18:
93:f8:c4:a7:32:a9:8b:bc:04:31:d1:9b:50:12:ca:
cb:34:e5:39:df:9b:0e:42:51:ab:62:de:33:9d:51:
74:8b:3f:27:20:eb:f7:74:cd:1f:ac:df:74:c4:35:
f3:75:22:7f:1d:69:dc:16:35:52:c3:a9:ae:d9:0d:
81:a9:36:fb:ad:9e:97:5e:ec:1d:74:af:c7:2f:ba:
9c:8c:e1:ab:f3:6f:ce:a6:b8:64:b3:68:d1:1f:0f:
b9:b2:52:28:aa:e7:f5:36:18:07:e0:39:6e:66:e3:
40:11:76:56:62:4d:d8:4d:c0:e8:b9:97:3e:3a:74:
ac:32:d5:3a:dd:a8:ee:c3:a2:73:87:45:f3:48:e4:
c6:16:23:4b:87:3b:f1:79:d1:ec:a0:e6:d5:b9:cc:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:97:59:67:0D:3D:5A:68:BB:50:88:BA:D5:ED:6E:9D:99:D3:AE:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD470A8A273011F0A89124ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.186.0/24
154.223.137.0-154.223.143.255
154.223.160.0/22
154.223.172.0/22
154.223.184.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:9d:84:71:b9:32:ed:e5:37:d1:f7:83:54:5b:e5:9a:68:e4:
78:61:3e:ac:f7:9f:53:f7:3b:40:26:7c:7e:30:ad:71:07:ee:
ff:14:3d:63:3d:99:92:d0:14:f3:25:6e:7a:de:a8:04:d3:c1:
8c:ee:d2:27:e5:0f:b4:75:7e:c7:14:6e:68:3e:b6:ee:29:4f:
29:81:96:8f:86:31:d0:1e:73:c1:ae:f4:e1:54:8a:d8:cd:67:
41:df:a9:c4:60:40:5c:e0:c8:d7:c9:85:67:bf:ef:9b:cc:4b:
f9:9c:8f:e1:28:a8:b7:a9:23:0f:c8:02:58:2b:06:19:90:0d:
5a:74:af:87:60:8c:dd:e3:cb:51:ce:94:b6:d8:28:fb:8c:b2:
5e:48:0e:56:1c:21:f9:b1:f2:8a:71:f7:0f:8a:ba:67:f6:ee:
21:fb:65:c4:e2:25:0f:9a:d2:11:95:fc:69:bb:8c:f9:0a:92:
77:64:ba:51:1a:38:88:db:ab:82:ff:e1:b5:a3:93:77:6a:ac:
f2:65:b4:84:0d:d9:d7:45:e4:0f:92:4d:17:c3:7f:2e:fb:66:
4b:6b:3b:40:3d:81:20:92:e7:ed:21:6c:89:89:e1:2f:f5:1f:
b7:03:f3:63:7d:f3:e7:70:02:d6:cf:89:61:fe:07:0a:7e:58:
f1:79:d0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:35:55 2025 by rpki-client