Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5759D2A269011F09FA6CC7ADAE4EC9C.roa
File: B5759D2A269011F09FA6CC7ADAE4EC9C.roa (raw, json)
Hash identifier: cjlG+PfJpxzSQ2KOR5Wtw/TIgQ/Kj8eft8EWr9ZMIsA=
Subject key identifier: 87:D9:76:D3:35:87:4E:D7:F1:37:12:3E:75:A9:CF:BC:E3:18:F3:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5759D2A269011F09FA6CC7ADAE4EC9C.roa
Signing time: Thu 01 May 2025 13:32:21 +0000
ROA not before: Thu 01 May 2025 13:32:16 +0000
ROA not after: Fri 28 Apr 2028 13:32:16 +0000
asID: 17561
IP address blocks: 154.84.126.0/24 maxlen: 24
154.84.127.0/24 maxlen: 24
154.86.192.0/24 maxlen: 24
154.86.193.0/24 maxlen: 24
154.86.194.0/24 maxlen: 24
154.86.195.0/24 maxlen: 24
154.86.196.0/24 maxlen: 24
154.86.197.0/24 maxlen: 24
154.86.198.0/24 maxlen: 24
154.86.199.0/24 maxlen: 24
154.86.200.0/24 maxlen: 24
154.86.201.0/24 maxlen: 24
154.86.202.0/24 maxlen: 24
154.86.203.0/24 maxlen: 24
154.86.204.0/24 maxlen: 24
154.86.205.0/24 maxlen: 24
154.86.206.0/24 maxlen: 24
154.86.207.0/24 maxlen: 24
154.86.208.0/24 maxlen: 24
154.86.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97804 (0x17e0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 13:32:16 2025 GMT
Not After : Apr 28 13:32:16 2028 GMT
Subject: CN=681377e5-29e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:f5:f9:a8:7c:a5:3b:4f:e0:ea:ee:a3:d0:
4e:1e:3e:f0:a2:05:a2:08:4f:ca:d2:c8:da:34:5e:
db:36:00:99:ae:95:78:db:17:aa:f4:df:b5:f9:6b:
99:e0:02:61:22:40:fa:dc:69:d7:3c:1b:45:6c:02:
7a:b6:30:8a:ad:86:e0:17:14:fb:80:87:6d:9e:22:
82:af:96:6f:01:45:07:35:6a:c7:ae:37:82:a4:b5:
85:b1:71:13:fa:f9:17:bb:e8:a4:fb:8e:4b:d7:b5:
8d:de:dd:51:87:d5:8c:64:af:96:bf:56:6c:f3:2c:
f8:dd:72:51:78:2a:54:6f:04:e8:40:00:0b:66:7e:
60:57:4f:4f:06:25:1b:6b:44:78:0e:d5:66:0d:f5:
66:5d:0a:b0:78:71:c1:66:dc:75:c9:4b:2c:06:b1:
a3:63:9d:7f:9b:46:58:91:f0:6d:b4:72:10:89:06:
c6:5a:a9:6b:26:0c:c5:76:71:36:db:43:0c:32:6a:
72:2c:44:88:2c:2a:44:f8:fe:cd:48:71:77:e8:9c:
7d:90:33:d1:75:db:cb:b3:2a:64:fa:ef:82:c6:ec:
fa:a1:65:2e:f7:de:f3:3a:95:8a:1e:be:0b:f8:20:
0a:78:c5:f9:3d:18:c3:05:0b:8e:4e:d9:49:d5:9b:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:76:D3:35:87:4E:D7:F1:37:12:3E:75:A9:CF:BC:E3:18:F3:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5759D2A269011F09FA6CC7ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.126.0/23
154.86.192.0-154.86.209.255
Signature Algorithm: sha256WithRSAEncryption
61:ae:8f:93:da:26:11:ab:d9:41:d5:c5:95:83:3d:95:50:8c:
03:5f:f8:55:50:4b:51:08:25:50:28:f2:af:e1:d8:b6:6e:18:
5d:cc:a1:ca:40:65:67:b1:ce:27:6c:19:60:21:cf:92:98:94:
c9:28:ca:d2:40:8b:64:e5:65:1f:dd:57:f4:59:da:63:e0:7d:
55:d5:78:da:1d:ae:0d:7f:1b:81:09:a9:6d:48:20:d4:8c:72:
9f:4f:43:53:0c:71:a5:93:d6:40:22:42:90:39:43:34:e7:d6:
7f:f2:48:ae:b7:6e:7d:c8:56:67:e3:a7:7b:57:f0:14:ab:ce:
73:63:2c:d5:71:34:73:07:b3:a5:d1:05:8b:b1:ad:9b:41:9c:
70:a3:45:d9:3f:52:58:70:f6:66:34:df:ec:5c:54:ce:aa:fe:
ba:8e:fe:9f:b2:0b:e0:a9:1d:9f:f2:30:66:08:81:65:7a:d4:
cd:28:89:43:c6:e5:22:8c:ec:e8:82:58:57:e7:fb:e7:f9:96:
f6:7e:0e:4a:fb:13:cb:80:c3:e1:3a:19:2c:a9:b7:c3:17:bf:
3c:dc:b7:02:33:fd:a3:9c:2d:1a:9a:61:ae:d2:58:cf:50:df:
e9:1c:b0:38:7f:d3:16:a0:c3:48:db:f5:4e:db:d4:a0:1d:7d:
d4:59:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:34:41 2025 by rpki-client