Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B8F8F2268111F0AD3D2698DAE4EC9C.roa
File: C6B8F8F2268111F0AD3D2698DAE4EC9C.roa (raw, json)
Hash identifier: u4M81JCWST86UL3OLBxLUfKyh9/pmo4Pg/lPTWVjtJA=
Subject key identifier: 17:0D:DF:A5:7F:AE:96:4D:DF:1D:18:6C:5A:69:4C:06:9A:11:83:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B8F8F2268111F0AD3D2698DAE4EC9C.roa
Signing time: Thu 01 May 2025 11:45:28 +0000
ROA not before: Thu 01 May 2025 11:45:23 +0000
ROA not after: Wed 26 Apr 2028 11:45:23 +0000
asID: 17561
IP address blocks: 154.83.225.0/24 maxlen: 24
154.83.227.0/24 maxlen: 24
154.83.228.0/24 maxlen: 24
154.83.231.0/24 maxlen: 24
154.83.232.0/24 maxlen: 24
154.83.233.0/24 maxlen: 24
154.83.236.0/24 maxlen: 24
154.83.237.0/24 maxlen: 24
154.83.238.0/24 maxlen: 24
154.83.239.0/24 maxlen: 24
154.83.248.0/24 maxlen: 24
154.83.249.0/24 maxlen: 24
154.83.250.0/24 maxlen: 24
154.83.251.0/24 maxlen: 24
154.83.253.0/24 maxlen: 24
154.83.254.0/24 maxlen: 24
154.83.255.0/24 maxlen: 24
154.84.28.0/24 maxlen: 24
154.84.29.0/24 maxlen: 24
154.84.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97776 (0x17df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:45:23 2025 GMT
Not After : Apr 26 11:45:23 2028 GMT
Subject: CN=68135ed8-e52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:cb:a0:57:b3:46:c1:da:23:3e:de:09:d8:
04:6d:97:08:40:3e:13:37:11:da:8d:4b:1b:9e:5e:
96:ea:fd:e8:6f:38:27:c2:95:d0:79:24:f4:c4:9f:
68:1c:ca:c5:9a:d8:2d:03:92:18:9e:b7:28:b0:9f:
a3:bf:44:87:5f:eb:fd:ff:5d:09:59:05:82:25:af:
7c:8b:3a:be:87:39:be:fd:2c:0f:f3:d8:d0:c4:5a:
62:81:06:c9:56:75:c4:7b:63:ff:66:7d:f0:ec:a8:
52:a6:ad:64:61:92:91:cf:21:c6:f1:9a:ea:57:80:
92:17:a4:96:fb:39:6a:60:2b:5e:04:e1:cd:03:14:
f9:ca:d1:7d:b2:6f:80:65:ea:b8:7d:c7:ae:ed:9d:
ad:0b:12:b5:b1:3f:2f:6e:36:01:c7:a5:15:75:41:
95:ca:6c:79:0b:27:38:76:f8:5d:e9:4c:67:4c:7b:
23:fc:59:48:a3:e9:ba:c1:05:56:69:66:a2:40:6e:
f9:25:2d:70:13:e3:6e:21:f4:87:80:e1:86:fe:bb:
0c:a2:3c:92:4a:a8:ef:1f:d2:bd:58:e3:40:83:04:
85:26:33:e1:09:19:47:29:03:2c:df:f0:55:7d:f2:
26:5c:47:d5:0a:45:25:fa:03:b6:f9:84:0c:58:59:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0D:DF:A5:7F:AE:96:4D:DF:1D:18:6C:5A:69:4C:06:9A:11:83:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B8F8F2268111F0AD3D2698DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.225.0/24
154.83.227.0-154.83.228.255
154.83.231.0-154.83.233.255
154.83.236.0/22
154.83.248.0/22
154.83.253.0-154.83.255.255
154.84.28.0-154.84.30.255
Signature Algorithm: sha256WithRSAEncryption
3b:67:71:f0:5e:0b:d6:59:62:25:6b:57:f0:c6:52:62:f3:d9:
8a:a5:8c:a7:d1:09:6d:e5:ec:c1:a0:4b:19:13:42:9b:f6:82:
12:1d:d9:6b:32:01:e4:73:6d:4a:fc:e7:7c:c3:b0:0e:27:97:
57:fc:ce:76:c3:3a:bd:e6:82:f7:e0:72:c1:68:81:2f:f3:b0:
83:97:30:98:fe:2b:7c:11:45:01:65:7b:a2:06:95:01:c5:82:
bb:97:f6:7c:93:60:36:0c:83:9a:84:08:89:37:70:49:e3:fd:
b7:11:10:ba:cf:9d:d2:0c:a1:6a:60:34:2f:b8:17:e9:14:91:
c5:d5:cb:5d:fb:d6:6e:3e:d2:0f:1a:09:82:6a:56:96:78:53:
62:54:4e:11:f1:0a:d8:cf:3a:74:d3:6e:40:7f:e8:5e:98:57:
57:cd:66:a8:4e:c5:46:a9:35:f5:a5:a9:d6:7d:76:ef:88:ac:
37:2f:dc:80:fd:e9:e9:d1:f8:db:e9:cb:c1:66:e7:1a:a0:69:
b5:31:35:fb:f1:8b:72:86:db:ed:c0:fc:00:27:a2:92:7d:78:
f0:82:c6:c4:07:39:26:50:33:1d:3f:7f:20:d6:e9:46:6a:47:
d1:8b:29:d5:3a:ec:5e:ef:38:28:28:7a:b3:91:b0:8c:8a:dc:
07:dd:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:29:38 2025 by rpki-client