Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB75E32C269711F08EA4FFA7DAE4EC9C.roa
File: BB75E32C269711F08EA4FFA7DAE4EC9C.roa (raw, json)
Hash identifier: 7TUWp313bj+opCi3QFigd8/1tzt/xhm+v6aU2h4EvYI=
Subject key identifier: 33:1B:E5:75:14:A0:A7:5D:B2:97:2B:BE:91:A5:88:30:59:6A:B8:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB75E32C269711F08EA4FFA7DAE4EC9C.roa
Signing time: Thu 01 May 2025 14:22:38 +0000
ROA not before: Thu 01 May 2025 14:22:33 +0000
ROA not after: Fri 28 Apr 2028 14:22:33 +0000
asID: 17561
IP address blocks: 154.93.190.0/24 maxlen: 24
154.93.191.0/24 maxlen: 24
154.93.192.0/24 maxlen: 24
154.93.193.0/24 maxlen: 24
154.93.194.0/24 maxlen: 24
154.93.195.0/24 maxlen: 24
154.93.196.0/24 maxlen: 24
154.93.197.0/24 maxlen: 24
154.93.199.0/24 maxlen: 24
154.93.200.0/24 maxlen: 24
154.93.201.0/24 maxlen: 24
154.93.203.0/24 maxlen: 24
154.93.204.0/24 maxlen: 24
154.93.205.0/24 maxlen: 24
154.93.206.0/24 maxlen: 24
154.93.207.0/24 maxlen: 24
154.93.209.0/24 maxlen: 24
154.93.212.0/24 maxlen: 24
154.93.213.0/24 maxlen: 24
154.93.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97818 (0x17e1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 14:22:33 2025 GMT
Not After : Apr 28 14:22:33 2028 GMT
Subject: CN=681383ae-59fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:a8:7f:63:12:40:fe:d4:19:cf:f1:58:a7:
2f:ef:ea:6a:07:ed:07:1b:c0:0d:f0:6b:5e:d0:3d:
46:5f:5e:44:c4:0c:45:8f:44:80:5c:f4:1a:56:55:
62:88:74:99:ce:6c:cc:2f:a7:b9:39:96:11:6e:35:
70:96:a7:77:45:d8:27:fd:83:df:22:66:10:dc:74:
64:00:38:2a:53:f8:2d:79:80:cc:84:53:5b:22:9d:
24:27:d3:9f:16:60:8a:54:c4:b8:bf:7d:cd:ba:26:
5a:d1:ec:19:b6:24:7e:c8:94:2e:1e:ae:5f:e5:09:
a9:4e:bd:20:86:2c:13:d3:98:27:65:a6:ba:77:87:
2d:a0:29:28:ab:2b:40:8e:41:9a:22:6d:33:9e:1d:
98:10:28:f4:d0:7f:4c:6b:ab:93:f8:97:a7:a6:4d:
12:77:58:e6:19:8c:98:2b:cd:35:36:c2:bb:e3:5a:
fe:58:9f:2d:41:28:bc:4e:70:b7:44:91:33:de:ff:
88:17:ec:bc:3e:dd:3e:cf:aa:0c:f5:2b:0e:d5:04:
6d:30:4e:ce:2d:38:83:8f:3d:17:f8:17:c8:e6:1b:
3a:9d:86:a8:53:4a:92:e2:0b:07:18:1d:c6:02:3b:
df:b2:30:61:85:2e:53:83:b2:d0:50:5e:32:56:d4:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1B:E5:75:14:A0:A7:5D:B2:97:2B:BE:91:A5:88:30:59:6A:B8:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB75E32C269711F08EA4FFA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.190.0-154.93.197.255
154.93.199.0-154.93.201.255
154.93.203.0-154.93.207.255
154.93.209.0/24
154.93.212.0-154.93.214.255
Signature Algorithm: sha256WithRSAEncryption
be:b0:b2:7d:3a:c8:19:51:f6:17:3a:46:7a:63:20:fb:16:b4:
00:86:2f:6e:67:74:9d:85:6c:e0:f9:94:21:c7:77:36:af:7c:
5c:9f:bf:ad:40:f8:7c:6a:0b:89:5b:3e:1f:07:38:11:9e:c6:
fa:9b:cf:a7:c2:6e:d5:72:06:82:00:5a:5b:1a:fd:46:f4:8e:
82:66:29:5b:c5:38:85:fa:f9:22:4a:12:32:40:63:29:44:73:
5b:57:08:33:21:aa:71:a1:d3:d1:e5:6a:20:d4:7e:e9:cc:b2:
67:f9:3d:48:69:02:87:ae:96:86:3c:4f:27:fe:e5:d3:68:f2:
6c:16:74:9b:19:24:fb:0b:6c:25:a2:82:62:4e:a5:97:0a:b1:
e5:11:fb:98:73:93:37:10:53:df:a4:c0:95:64:6f:39:b5:32:
75:51:93:9a:12:d4:0e:45:11:8a:12:f8:d7:43:f2:6d:8c:c4:
71:f2:ec:87:ab:58:cd:a4:aa:cc:10:8c:fe:41:8b:d0:f7:cb:
6d:5a:46:1f:73:1f:af:82:2b:4c:f9:b3:9f:03:4d:a0:ab:e0:
56:9d:87:83:49:49:02:5b:5a:dd:b2:af:a3:65:a1:6d:04:03:
68:47:62:be:10:d7:88:30:a0:7f:82:51:7b:da:01:c0:51:d7:
6a:7f:d5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:06:28 2025 by rpki-client