Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD04279824D511F0B067E0EADAE4EC9C.roa
File: CD04279824D511F0B067E0EADAE4EC9C.roa (raw, json)
Hash identifier: Kn6uR1fjl0FFZSc4g3Fp0/j1J62BQccPtKbtcyWP6Ro=
Subject key identifier: 8A:6A:CF:D1:B7:BA:86:A4:AC:D3:6C:F6:6D:42:B2:07:38:65:5C:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD04279824D511F0B067E0EADAE4EC9C.roa
Signing time: Tue 29 Apr 2025 08:41:54 +0000
ROA not before: Tue 29 Apr 2025 08:41:49 +0000
ROA not after: Sun 15 Jun 2025 08:41:49 +0000
asID: 138915
IP address blocks: 154.205.128.0/24 maxlen: 24
154.205.129.0/24 maxlen: 24
154.205.130.0/24 maxlen: 24
154.205.131.0/24 maxlen: 24
154.205.132.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.135.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.138.0/24 maxlen: 24
154.205.139.0/24 maxlen: 24
154.205.140.0/24 maxlen: 24
154.205.142.0/23 maxlen: 24
154.205.145.0/24 maxlen: 24
154.205.154.0/24 maxlen: 24
154.205.155.0/24 maxlen: 24
154.205.156.0/24 maxlen: 24
154.205.157.0/24 maxlen: 24
154.205.158.0/24 maxlen: 24
154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97479 (0x17cc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 08:41:49 2025 GMT
Not After : Jun 15 08:41:49 2025 GMT
Subject: CN=681090d2-d9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:1a:57:39:fa:fc:27:7e:41:21:a8:a9:9c:
bf:6c:67:8e:d6:81:a1:c3:1b:d5:84:20:9a:ef:9d:
b8:cc:0d:49:18:9d:ad:2a:e3:6f:05:fb:cc:cb:e5:
10:76:09:07:37:ab:71:0b:8b:3c:90:65:61:c6:46:
f4:70:74:f7:2e:69:73:c9:ca:ba:05:6a:1c:36:20:
68:d4:2b:8f:0d:6b:a8:df:b7:15:1c:4f:9e:74:0b:
4f:28:18:17:92:c2:2f:71:06:fa:6d:db:2e:10:16:
af:d2:3f:c2:58:5a:f5:2d:6d:a7:ae:1c:42:dd:49:
bb:3c:3d:7d:c0:11:9a:9a:a0:22:52:14:65:6b:90:
e1:b2:ca:39:2e:9b:94:8e:d0:a6:a2:07:de:cd:8b:
eb:bc:bd:b0:27:4d:0c:e3:48:9c:b8:7c:f4:74:6f:
f5:96:9d:de:d0:c8:b8:c8:87:3e:b0:f7:e4:aa:f4:
00:3b:55:58:24:67:11:a2:ad:78:f3:0e:dd:1e:21:
b0:eb:ca:0b:55:ed:44:d7:bf:e5:7d:4e:b0:81:66:
eb:14:e9:18:ba:b0:4a:d0:1a:f4:fe:c6:1d:25:71:
d2:ac:e5:30:cf:c9:db:19:25:76:3e:cd:11:d5:e7:
6b:3f:77:ea:69:21:ea:eb:df:ae:db:e7:c0:27:f6:
16:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6A:CF:D1:B7:BA:86:A4:AC:D3:6C:F6:6D:42:B2:07:38:65:5C:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD04279824D511F0B067E0EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.128.0-154.205.140.255
154.205.142.0/23
154.205.145.0/24
154.205.154.0-154.205.159.255
Signature Algorithm: sha256WithRSAEncryption
bd:c9:96:e3:6c:96:3b:5b:06:da:a1:ff:08:ff:2a:2c:a3:da:
60:4c:cb:14:e7:51:ea:00:31:a7:03:2e:df:3d:cc:48:13:37:
71:18:6f:75:24:c3:4e:59:ab:3f:97:b2:92:56:c2:90:ba:d8:
5c:8d:60:99:ab:bc:50:e2:29:85:94:39:3e:68:42:20:5e:04:
78:26:19:de:fc:4f:a2:22:7a:0b:0e:3e:de:5a:f8:7b:10:65:
dc:92:5e:39:82:7a:eb:3e:d0:7e:bf:c6:53:18:3a:e6:28:c2:
8a:34:5d:8a:52:1f:f0:2c:eb:e4:17:a0:50:eb:7a:f6:7e:d3:
b6:b4:54:db:fe:71:86:d7:0a:30:3a:75:e5:bf:58:bd:6b:28:
71:d7:3b:a4:5a:4b:b4:04:dd:35:a3:95:1a:f3:01:b3:8e:2a:
b4:be:e1:84:8e:a2:fa:6b:16:97:c6:f2:d4:e4:f7:0a:29:28:
3b:12:72:74:7b:4b:86:27:b1:ab:df:94:a8:8e:a0:51:de:cd:
7c:ed:dd:53:8d:1a:ea:97:0c:82:4c:5f:81:b0:b7:22:bc:86:
8c:68:37:42:6c:88:f1:15:55:83:28:6a:46:43:c8:41:b6:2f:
a7:1b:68:72:02:94:3a:38:0e:84:73:ec:9e:3b:65:07:85:0e:
28:79:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:47:34 2025 by rpki-client