Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCCE0FFA26A011F0B56559E3DAE4EC9C.roa
File: DCCE0FFA26A011F0B56559E3DAE4EC9C.roa (raw, json)
Hash identifier: +GZFhos/6vE87Qjj5Imxhr5jzIioPeqCdEtjve07omA=
Subject key identifier: 3A:84:A4:8E:80:30:9D:90:10:55:DB:46:23:3F:EE:8C:24:8C:75:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCCE0FFA26A011F0B56559E3DAE4EC9C.roa
Signing time: Thu 01 May 2025 15:27:59 +0000
ROA not before: Thu 01 May 2025 15:27:54 +0000
ROA not after: Fri 28 Apr 2028 15:27:54 +0000
asID: 17561
IP address blocks: 154.95.234.0/24 maxlen: 24
154.95.235.0/24 maxlen: 24
154.95.236.0/24 maxlen: 24
154.95.237.0/24 maxlen: 24
154.95.238.0/24 maxlen: 24
154.95.239.0/24 maxlen: 24
154.95.240.0/24 maxlen: 24
154.95.241.0/24 maxlen: 24
154.95.242.0/24 maxlen: 24
154.95.243.0/24 maxlen: 24
154.95.244.0/24 maxlen: 24
154.95.245.0/24 maxlen: 24
154.95.246.0/24 maxlen: 24
154.95.247.0/24 maxlen: 24
154.95.248.0/24 maxlen: 24
154.95.249.0/24 maxlen: 24
154.95.250.0/24 maxlen: 24
154.95.251.0/24 maxlen: 24
154.95.252.0/24 maxlen: 24
154.95.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97834 (0x17e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 15:27:54 2025 GMT
Not After : Apr 28 15:27:54 2028 GMT
Subject: CN=681392ff-b84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:02:bf:d5:1f:1e:b5:c7:ff:aa:1c:61:11:
a5:73:a3:39:00:b3:3e:2c:07:c7:b2:5f:bb:d8:ff:
c5:c3:19:de:ac:cb:7c:ba:84:10:1d:25:32:b9:6d:
ba:7c:82:83:37:14:4c:42:94:da:23:86:4f:5e:96:
ee:52:f3:30:d0:5a:f1:29:43:ee:b5:1d:d7:1b:4b:
fc:f3:40:17:f4:71:7c:33:13:26:87:db:6b:50:ac:
7a:4a:9f:2f:83:cc:af:ec:08:cc:47:b0:b9:9f:38:
97:60:e5:ba:05:81:f7:04:31:cf:bc:b1:c9:88:9e:
13:72:5f:cb:24:5b:f1:00:f5:7a:14:89:16:1a:6e:
f2:81:f9:ad:6a:1b:4c:41:57:ae:4e:29:d7:4e:16:
f5:1a:f7:d9:a9:1a:64:b9:f9:e7:af:34:86:79:98:
8b:d6:93:ed:d1:d4:cb:d7:9d:60:52:02:f3:d7:87:
7a:d6:af:55:10:81:52:e1:b6:c5:05:e7:63:3e:26:
24:0b:2f:d4:7d:83:c2:3f:06:4c:17:f1:8a:9e:f8:
81:39:cb:57:c0:bc:4d:fe:5d:24:88:1b:03:d6:54:
69:78:e0:f1:c3:be:7f:f7:5b:f2:ff:ff:c2:b9:87:
22:61:1c:36:07:ea:4a:48:e7:64:c9:5e:8e:1b:d6:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:84:A4:8E:80:30:9D:90:10:55:DB:46:23:3F:EE:8C:24:8C:75:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCCE0FFA26A011F0B56559E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.234.0-154.95.253.255
Signature Algorithm: sha256WithRSAEncryption
0e:7d:a1:44:b5:22:5e:ef:39:88:50:72:c3:d5:ab:57:b3:0a:
25:20:b6:8d:a7:39:62:89:97:7c:12:a9:71:05:9e:42:27:b5:
ce:ee:85:d6:5f:79:6e:9e:8b:c2:cb:2d:97:db:57:bd:45:d2:
89:58:a9:82:83:11:17:45:90:eb:89:e0:5c:82:f1:bb:22:89:
b3:aa:e8:de:b3:93:cb:ee:d4:87:71:2d:dd:0a:8b:92:3d:cb:
c8:7a:61:7a:70:bf:b1:50:40:9a:65:d9:8f:18:b1:69:6d:23:
4d:c9:f8:ad:9c:cf:6b:18:2a:7c:a0:2b:ce:b8:87:07:3c:8e:
4e:4d:33:17:e4:6c:ae:ed:54:df:aa:8e:08:f1:12:23:88:7f:
87:b5:6c:9d:f6:9a:b8:97:98:b9:bf:1e:43:bd:96:d9:41:b5:
48:ec:73:ce:0c:e4:54:00:0f:06:ea:fa:9b:71:a0:bc:40:60:
c5:5f:f2:af:a9:17:2a:f5:0c:3f:b2:94:d0:38:5f:11:40:14:
8c:aa:a2:40:b7:9e:70:ec:ea:b7:e2:d5:c3:d3:f8:00:f8:92:
6d:42:5a:80:a8:f1:5d:80:5d:05:6d:10:7d:90:91:8e:1a:74:
fa:6b:a9:c9:44:e2:5b:6f:85:84:06:12:8b:e9:b4:ef:ad:71:
17:23:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:39:54 2025 by rpki-client