Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD581F0298D11F08B7B767DDAE4EC9C.roa
File: DCD581F0298D11F08B7B767DDAE4EC9C.roa (raw, json)
Hash identifier: GODR+vM5ovpzxXLkPnaIgFXrGPyLCyVPMDUjIVyPLZs=
Subject key identifier: 17:C4:EE:D9:27:80:B5:27:39:E5:D8:A6:E3:3F:40:B3:7A:07:4A:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD581F0298D11F08B7B767DDAE4EC9C.roa
Signing time: Mon 05 May 2025 08:49:33 +0000
ROA not before: Mon 05 May 2025 08:49:27 +0000
ROA not after: Thu 10 Jul 2025 08:49:27 +0000
asID: 203020
IP address blocks: 154.217.0.0/24 maxlen: 24
154.217.1.0/24 maxlen: 24
154.217.2.0/24 maxlen: 24
154.217.3.0/24 maxlen: 24
154.217.4.0/24 maxlen: 24
154.217.16.0/24 maxlen: 24
154.217.17.0/24 maxlen: 24
154.217.39.0/24 maxlen: 24
154.217.40.0/24 maxlen: 24
154.217.41.0/24 maxlen: 24
154.217.42.0/24 maxlen: 24
154.217.43.0/24 maxlen: 24
154.217.44.0/24 maxlen: 24
154.217.45.0/24 maxlen: 24
154.217.46.0/24 maxlen: 24
154.217.96.0/19 maxlen: 24
154.217.160.0/22 maxlen: 24
154.217.164.0/22 maxlen: 24
154.217.168.0/21 maxlen: 24
154.217.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 09:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98033 (0x17ef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 08:49:27 2025 GMT
Not After : Jul 10 08:49:27 2025 GMT
Subject: CN=68187b9c-65d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:80:df:2e:1c:9a:46:c9:37:3f:86:7b:31:
2f:cb:f0:ee:65:f7:40:c3:0f:65:a7:1f:66:b9:d6:
42:4b:c8:d4:5c:65:d1:17:8a:62:5e:50:ff:69:d0:
26:83:81:12:fa:8e:e6:38:68:8b:85:37:fc:79:ad:
b0:6f:8f:06:be:f3:6b:92:49:1f:b8:ad:e4:10:4b:
81:50:4b:aa:6a:fb:8e:4e:2e:e5:7d:c6:ee:ca:6a:
aa:c5:81:01:19:7c:86:c5:74:bb:87:57:9f:c1:6a:
37:80:99:c5:09:0e:17:8d:70:75:0e:17:2b:a3:ec:
85:93:1f:73:71:bb:aa:14:5e:6c:5d:a8:93:94:18:
8d:4c:d7:ce:b2:11:1b:01:b3:28:60:15:44:ff:00:
30:56:95:c4:3e:2c:a1:9c:3e:82:fe:06:b6:39:dd:
ea:82:68:2d:df:03:f2:7d:5a:ba:6c:cb:16:d3:d9:
25:67:0c:8a:7d:62:53:ae:44:2e:d6:62:af:e4:81:
eb:92:c4:28:40:f9:d8:78:eb:f5:ba:eb:c4:ce:87:
76:1a:0d:fc:9a:21:b7:34:e5:b7:13:33:ef:dd:bd:
f6:c4:16:fc:00:70:13:cd:c8:5c:c2:36:f0:68:8d:
63:a9:3d:db:58:90:c9:58:aa:b4:21:46:75:d4:0e:
75:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C4:EE:D9:27:80:B5:27:39:E5:D8:A6:E3:3F:40:B3:7A:07:4A:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD581F0298D11F08B7B767DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.0.0-154.217.4.255
154.217.16.0/23
154.217.39.0-154.217.46.255
154.217.96.0/19
154.217.160.0/20
154.217.178.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a1:09:b9:e4:02:77:a3:4b:63:94:d3:a6:f2:71:47:7a:99:
69:69:b9:f4:46:36:29:f2:8a:2f:ac:c5:c2:e8:89:10:32:f6:
5c:79:71:83:8a:a2:2c:4e:87:cc:c1:ac:34:42:64:5e:6e:66:
4e:bd:b9:b7:f0:8c:28:b3:c4:7c:f1:73:85:2d:8f:67:60:71:
8d:86:0a:50:52:77:5e:5a:31:a3:92:03:b8:fd:ac:cf:d7:f0:
ae:16:f9:63:01:4e:ca:81:5d:53:62:39:3b:8e:45:ec:28:b5:
42:00:84:c8:e0:38:19:97:fb:55:6b:c1:21:a6:92:0a:b7:44:
16:31:df:02:04:2d:c2:ee:ad:7f:91:37:dd:6a:d4:95:a3:df:
96:d7:e4:e3:6a:f3:1d:19:e0:84:37:7b:ee:a5:e1:eb:5b:7e:
d9:e8:0e:3b:38:8a:35:98:8c:c7:de:97:98:f4:dd:91:cf:1a:
8f:71:9a:57:ea:42:d4:44:20:10:4c:ed:be:c8:ba:29:e9:ed:
f4:d3:88:41:68:69:44:0f:90:d6:21:5d:8a:88:91:7d:db:7a:
b3:39:5f:f0:9a:7f:9f:67:3a:97:bd:72:ab:f7:c4:3c:a2:b4:
4e:97:ee:e4:f5:ee:22:56:d1:62:4d:d5:6b:58:98:4c:d8:87:
5b:a3:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:49:03 2025 by rpki-client