Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB49119C268911F085EE7ACCDAE4EC9C.roa
File: CB49119C268911F085EE7ACCDAE4EC9C.roa (raw, json)
Hash identifier: 9fYxylhe2FY4pVxsBRZbavU77/aLYcHmFH2QZTkCSc8=
Subject key identifier: 3D:3E:BC:49:AF:B1:E5:E3:37:5A:76:01:2B:10:3B:60:62:F1:1D:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB49119C268911F085EE7ACCDAE4EC9C.roa
Signing time: Thu 01 May 2025 12:42:52 +0000
ROA not before: Thu 01 May 2025 12:42:46 +0000
ROA not after: Fri 28 Apr 2028 12:42:46 +0000
asID: 17561
IP address blocks: 154.81.70.0/24 maxlen: 24
154.81.71.0/24 maxlen: 24
154.81.72.0/24 maxlen: 24
154.81.73.0/24 maxlen: 24
154.81.74.0/24 maxlen: 24
154.81.75.0/24 maxlen: 24
154.81.76.0/24 maxlen: 24
154.81.77.0/24 maxlen: 24
154.81.78.0/24 maxlen: 24
154.81.79.0/24 maxlen: 24
154.81.80.0/24 maxlen: 24
154.81.81.0/24 maxlen: 24
154.81.82.0/24 maxlen: 24
154.81.83.0/24 maxlen: 24
154.81.84.0/24 maxlen: 24
154.81.85.0/24 maxlen: 24
154.81.86.0/24 maxlen: 24
154.81.87.0/24 maxlen: 24
154.81.88.0/24 maxlen: 24
154.81.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97790 (0x17dfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 12:42:46 2025 GMT
Not After : Apr 28 12:42:46 2028 GMT
Subject: CN=68136c4b-4c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:1b:3f:ed:db:55:0c:e5:3b:c6:31:6e:47:
e9:dc:33:91:58:64:5b:fa:0c:f7:98:41:73:0c:07:
92:f3:66:13:bd:e8:6e:73:79:23:c3:f4:77:37:81:
c4:c8:52:9d:43:ca:5f:bf:ce:6f:55:5b:25:2d:06:
ea:fe:1c:8a:4d:3c:e3:a7:2e:5b:69:93:9e:71:4e:
2a:da:fe:35:64:52:35:a2:b6:b9:13:95:5f:04:97:
ab:c8:2a:97:2d:d9:6e:65:96:8b:fc:4f:06:47:35:
78:2b:c5:14:99:e1:c2:7f:71:ae:23:7c:df:f6:e1:
02:9a:19:b1:b5:68:97:d8:c4:56:d1:c8:9d:6b:1b:
c7:37:22:d6:fd:98:61:71:05:64:be:5d:ef:af:4e:
e3:ab:9f:cb:0a:e9:72:a5:ea:bc:e6:1a:cf:33:91:
d8:fc:a6:3b:e8:5b:96:d5:74:26:3c:c4:08:a4:d2:
4b:85:24:af:71:7c:bc:2e:47:f9:7d:6c:49:af:7b:
15:1b:b5:d1:33:4d:ea:f7:4b:df:f1:58:26:81:5c:
9f:43:1c:af:b9:5c:18:20:a4:5d:24:21:22:e3:f6:
21:f1:38:8f:22:e1:36:6f:d0:63:ca:9a:2e:85:c9:
a4:88:f8:3f:59:fe:70:a5:7d:78:46:f3:de:b5:95:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3E:BC:49:AF:B1:E5:E3:37:5A:76:01:2B:10:3B:60:62:F1:1D:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB49119C268911F085EE7ACCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.70.0-154.81.89.255
Signature Algorithm: sha256WithRSAEncryption
3f:45:46:52:e4:84:85:7c:cc:fa:78:34:c4:f2:60:c3:10:5c:
2c:29:92:5c:24:b6:db:09:2d:da:12:62:32:e7:b6:48:a4:76:
85:5d:0b:9c:a8:f7:94:df:b5:5f:14:de:a0:46:76:b4:80:5a:
b7:3d:11:d1:f5:b6:3c:ba:54:cc:c3:6d:3a:58:55:7c:92:83:
17:27:b8:18:1b:66:5d:54:b3:c4:97:f5:46:fd:4b:92:de:7f:
60:5b:4f:e4:95:b3:88:d1:43:fb:02:ec:11:d6:69:e9:c4:63:
5b:cc:73:31:6e:56:a7:32:5f:80:76:c1:6a:1e:85:ab:02:83:
97:cc:12:38:31:8b:16:c4:f0:6c:06:b2:fa:6e:72:66:e4:f9:
d4:b0:a1:ba:c8:a5:11:22:7d:26:55:b4:79:66:f5:56:15:6d:
fc:5c:1d:5b:dd:28:66:6d:62:84:1b:75:4a:e7:93:9c:3e:95:
39:95:e6:de:05:c0:fd:cd:60:39:a3:77:9d:a8:ad:f9:2f:47:
f4:5c:a5:53:8d:98:c8:f7:2a:c8:91:49:a7:4a:d1:8f:67:af:
f5:38:a3:9b:67:65:a7:36:c6:6a:d6:50:29:8a:f7:b8:10:56:
7e:b0:d2:0b:00:a1:f5:6e:28:9d:93:50:a6:e7:d8:b3:80:78:
2c:23:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:18:24 2025 by rpki-client