Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2BF176E25B311F098FF52B6DAE4EC9C.roa
File: C2BF176E25B311F098FF52B6DAE4EC9C.roa (raw, json)
Hash identifier: x/wSjIepWHxJxIKIGzMre1NY4dh+hlJojh7/xFDsfYU=
Subject key identifier: 63:B3:9F:72:42:BB:7A:05:80:1A:37:0E:83:F4:B1:60:C5:2B:75:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2BF176E25B311F098FF52B6DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 11:10:45 +0000
ROA not before: Wed 30 Apr 2025 11:10:40 +0000
ROA not after: Wed 26 Apr 2028 11:10:40 +0000
asID: 17561
IP address blocks: 154.195.15.0/24 maxlen: 24
154.195.32.0/24 maxlen: 24
154.195.36.0/24 maxlen: 24
154.195.37.0/24 maxlen: 24
154.195.38.0/24 maxlen: 24
154.195.39.0/24 maxlen: 24
154.195.41.0/24 maxlen: 24
154.195.43.0/24 maxlen: 24
154.195.47.0/24 maxlen: 24
154.195.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 08:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97614 (0x17d4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 11:10:40 2025 GMT
Not After : Apr 26 11:10:40 2028 GMT
Subject: CN=68120535-6ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:61:ac:20:00:f4:5c:c0:22:b3:43:ac:55:
1a:46:42:be:31:92:1b:f9:f3:13:f2:87:e5:50:22:
fb:d2:a1:81:3f:38:5e:d0:7d:70:4d:74:fd:5a:0f:
80:d9:9c:b9:96:4b:67:81:b0:ac:27:f9:14:48:62:
50:2a:09:04:f4:3e:34:f9:c2:6a:c7:f6:8c:af:c5:
09:c7:b5:7c:69:63:58:a5:33:02:23:46:a8:3c:84:
46:7b:a5:70:fc:b0:3d:ec:fa:7f:bf:00:ca:11:49:
17:7c:e2:51:45:9d:3c:01:a9:e8:ca:a5:c3:df:3f:
1a:4c:53:8b:9f:36:84:39:06:17:ab:70:75:d0:d6:
da:6f:2e:53:ab:a7:42:20:22:5b:61:97:f5:1a:bf:
91:1b:f6:4c:8e:a4:79:47:5c:ef:be:18:b0:a8:15:
4a:a0:91:a0:05:8b:a8:20:11:48:dc:3f:38:16:72:
90:c9:7c:34:80:2f:47:9d:bf:8d:90:6c:9c:9c:61:
23:e4:a1:5a:31:bd:4a:2b:bb:15:8b:ba:93:7d:ad:
b7:18:41:77:c5:3d:ef:96:29:51:06:68:93:4b:85:
8b:61:ac:57:e2:17:b7:b3:63:5b:f9:c3:63:39:45:
2a:26:c0:71:41:60:a7:e2:2a:99:6f:5b:a8:ad:38:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B3:9F:72:42:BB:7A:05:80:1A:37:0E:83:F4:B1:60:C5:2B:75:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2BF176E25B311F098FF52B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.15.0/24
154.195.32.0/24
154.195.36.0/22
154.195.41.0/24
154.195.43.0/24
154.195.47.0-154.195.48.255
Signature Algorithm: sha256WithRSAEncryption
c6:f3:80:88:d2:d4:d7:3c:f8:c2:2b:5d:ac:a8:15:f5:b0:5b:
b1:4d:ac:84:fd:a1:5e:ff:ce:bd:ce:a7:e2:1e:73:a4:5b:5c:
aa:35:0f:02:fa:2e:c7:50:45:be:fe:6f:f3:51:60:39:a9:de:
2c:e4:a2:d0:8f:17:4c:17:a5:12:ba:61:b6:7c:3f:dc:c4:32:
ca:b5:19:34:9a:7e:22:ad:b8:26:b6:13:7b:80:bf:68:d0:eb:
36:fc:51:12:a5:de:7a:04:6d:14:44:85:6d:56:55:11:ce:c0:
5f:55:df:a0:ec:18:31:a0:ab:de:9c:a2:e3:d0:7c:61:ba:b3:
09:65:87:de:f3:9e:6d:e1:6a:e9:3d:e3:ff:f1:11:3e:84:b3:
56:49:1e:df:b0:76:99:c6:69:a2:92:81:f5:6a:7b:f6:e5:cb:
51:36:81:fd:2d:d9:95:73:e5:0d:49:54:a8:29:ee:42:d3:d1:
b8:a4:06:26:ea:8b:e8:5b:05:a4:07:4b:b0:74:4a:a2:91:ff:
9c:88:91:ed:c1:98:47:5a:c3:50:f0:fc:a8:0d:c3:a5:d5:72:
6c:cc:85:31:4f:56:e5:a9:62:90:40:8a:46:4d:bc:1b:ba:9e:
a2:38:e7:1b:84:05:83:f4:3b:7c:ac:bf:cc:90:b7:90:88:2f:
a8:13:19:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:09:05 2025 by rpki-client