Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34D3206261C11F0874A06E8DAE4EC9C.roa
File: C34D3206261C11F0874A06E8DAE4EC9C.roa (raw, json)
Hash identifier: 7Aoz5KtEnXjm4buv796pQhmaLUyAUL0GiBM/Fq24KBQ=
Subject key identifier: B6:CB:26:D0:05:3D:C1:F9:F1:1A:99:0D:CC:D3:88:54:93:75:0A:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34D3206261C11F0874A06E8DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 23:42:24 +0000
ROA not before: Wed 30 Apr 2025 23:42:17 +0000
ROA not after: Fri 14 Apr 2028 23:42:17 +0000
asID: 17561
IP address blocks: 154.85.175.0/24 maxlen: 24
154.85.176.0/24 maxlen: 24
154.85.177.0/24 maxlen: 24
154.85.178.0/24 maxlen: 24
154.85.179.0/24 maxlen: 24
154.85.180.0/24 maxlen: 24
154.85.181.0/24 maxlen: 24
154.85.182.0/24 maxlen: 24
154.85.183.0/24 maxlen: 24
154.85.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97697 (0x17da1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 23:42:17 2025 GMT
Not After : Apr 14 23:42:17 2028 GMT
Subject: CN=6812b55f-2c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:0d:ed:88:c6:ed:b0:4d:90:34:3a:1d:93:
19:39:81:8a:87:af:c4:e8:64:53:a2:24:ea:5c:22:
d9:5e:54:b5:84:09:e4:11:c3:4b:b2:b8:78:f7:80:
ec:be:3c:b2:f8:db:79:88:88:01:08:19:90:45:08:
3b:35:c4:97:f8:07:eb:2e:7f:8b:07:16:75:2f:eb:
7b:8e:4f:8c:7c:f1:a1:64:01:75:62:2e:94:7c:10:
98:2d:31:47:9d:90:aa:05:2e:3c:52:17:2c:c8:78:
0e:57:3d:72:b2:11:03:92:7f:8a:f3:b1:0d:ec:3a:
01:fb:5c:01:f8:f7:25:6c:18:4b:92:14:da:88:ee:
58:6c:f3:d6:99:75:b8:da:f4:b4:95:17:9d:06:c4:
40:18:82:e5:d8:1a:c2:06:77:42:a7:07:d5:31:74:
6b:25:2e:ce:db:17:77:8c:e9:f7:aa:67:0e:12:f0:
8e:3d:33:0f:2a:78:78:92:36:ef:a3:a9:0f:4f:3b:
40:fb:10:42:1d:dc:97:87:c8:79:ed:be:fa:18:3a:
21:ce:f8:00:aa:8d:a3:bc:8d:6f:1c:ba:c6:c5:6d:
23:80:d1:ec:76:98:f9:f7:2d:ae:bb:92:ed:38:41:
4a:ff:17:4b:8c:78:37:53:e7:a8:74:15:e4:73:45:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:26:D0:05:3D:C1:F9:F1:1A:99:0D:CC:D3:88:54:93:75:0A:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34D3206261C11F0874A06E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.175.0-154.85.184.255
Signature Algorithm: sha256WithRSAEncryption
d2:33:05:c1:22:13:7f:45:01:ea:db:78:d1:58:95:43:71:ec:
da:60:50:f9:1b:18:7b:36:60:ff:e0:0e:5a:6c:9b:e1:9e:ac:
ed:32:16:a2:85:b9:82:35:29:93:0f:71:37:76:2b:a8:24:67:
10:fa:ab:91:f2:05:9b:51:19:1f:1d:e7:e7:30:89:b9:62:0f:
84:a1:dd:a6:7b:19:22:1f:e1:4c:ec:3f:26:52:6a:f7:d6:4c:
64:dc:d1:be:12:ee:64:d3:a6:6c:b8:73:bc:37:76:07:16:6f:
93:9f:df:8b:b2:0e:5e:56:7d:35:25:81:dd:77:a2:a0:c0:92:
ed:00:26:55:38:49:f9:ca:4e:34:05:9c:fd:0b:a8:e3:0a:78:
38:bb:25:66:d2:f1:e1:34:90:ff:cb:c6:ad:d3:d5:9e:82:e7:
1a:24:3a:c4:4b:27:c7:7a:76:af:12:8f:6f:c6:a0:a0:7d:31:
3f:c0:c8:84:fb:0f:fd:85:84:15:0a:c1:90:98:d0:51:0a:2c:
f2:07:cb:d3:4f:79:71:84:c1:08:ca:b7:cc:a7:40:80:fa:e7:
ad:6a:51:2c:2e:b9:ce:14:62:ce:72:19:e2:8d:ab:7f:33:1a:
40:da:af:d7:9d:89:38:e9:5c:f6:a9:aa:41:0b:69:ec:31:23:
3c:70:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:46:55 2025 by rpki-client