Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08FC4A66FCCF11EF8A006279762E951A.roa
File: 08FC4A66FCCF11EF8A006279762E951A.roa (raw, json)
Hash identifier: Azj04tGgOkw3S5v9Poz4+hIf9Jqg9/TV0U/aKmTm3v4=
Subject key identifier: CF:78:B4:9A:A5:BA:22:F7:E8:63:24:27:5F:DA:B3:71:10:5E:02:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017312
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08FC4A66FCCF11EF8A006279762E951A.roa
Signing time: Sun 09 Mar 2025 10:12:41 +0000
ROA not before: Sun 09 Mar 2025 10:12:37 +0000
ROA not after: Tue 15 Apr 2025 10:12:37 +0000
asID: 54801
IP address blocks: 154.81.136.0/24 maxlen: 24
154.81.166.0/24 maxlen: 24
154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94994 (0x17312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 9 10:12:37 2025 GMT
Not After : Apr 15 10:12:37 2025 GMT
Subject: CN=67cd6999-eb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:67:55:08:d6:1e:db:95:66:2d:27:d2:3a:
5e:89:0c:b4:78:bf:9c:be:ac:a4:89:70:45:3a:e2:
04:b3:7a:b4:04:4b:f3:2d:4c:97:0a:37:ea:d5:83:
84:fc:f6:7b:e5:0b:a3:51:43:57:20:2b:b2:d6:4b:
17:93:d7:21:35:2a:5d:3e:10:b1:bf:8d:f2:6b:77:
05:0b:94:79:68:83:a0:9c:04:43:a7:e0:a9:f0:52:
9c:80:9c:5f:14:2d:f3:6b:e1:d6:c4:da:f0:66:a1:
14:40:5f:14:a7:98:80:9b:25:18:7d:9d:07:9b:06:
4c:08:73:5b:2c:10:79:d6:ad:d5:0a:be:77:80:09:
5b:54:52:03:95:69:0f:ab:6c:d9:73:61:78:2e:d8:
22:a2:f6:a2:8d:4d:4c:07:d8:1a:db:41:d0:c3:bd:
75:02:a3:c8:f7:a7:3e:95:66:1b:26:c5:39:45:16:
56:b9:a6:4c:18:bf:be:10:d9:50:05:f6:c7:14:d7:
30:d5:4a:26:8b:54:c5:2e:65:71:d8:4e:8d:af:d3:
c4:92:52:a4:35:bc:85:a0:e5:a8:fe:4b:dd:a6:1c:
0c:bd:66:e2:9b:e5:55:dc:eb:c5:7f:6c:0d:c5:2d:
d7:74:27:f8:7f:bf:fb:75:92:8c:91:21:3c:9d:40:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:78:B4:9A:A5:BA:22:F7:E8:63:24:27:5F:DA:B3:71:10:5E:02:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08FC4A66FCCF11EF8A006279762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.136.0/24
154.81.166.0/24
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
154.83.209.0/24
154.83.211.0/24
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1d:ac:c8:44:9c:26:fe:cb:78:2c:1e:de:18:cd:0c:19:b3:
f6:bf:d4:b4:70:c4:76:fe:04:51:5c:bd:e0:28:14:22:17:a5:
00:c2:a2:5f:60:e6:a2:e0:19:92:c8:66:37:2f:ef:31:64:62:
37:38:18:8f:f3:1e:14:18:33:97:fd:77:fa:4c:1a:79:dc:38:
c4:99:f3:66:de:67:09:b2:ce:66:ef:61:c3:a7:ea:63:cf:5b:
3d:b4:45:b8:4c:8a:23:dc:4a:28:b8:82:cf:31:66:bc:27:1c:
a4:18:cb:7c:8b:a3:3b:4e:23:91:71:05:43:16:b5:e9:16:47:
df:65:26:27:fe:6d:c1:38:03:54:78:cf:76:ae:fd:4b:26:7b:
61:54:ae:13:05:4b:90:04:15:39:28:ec:bd:f6:81:c8:37:4a:
33:f7:54:c1:f4:97:da:e1:31:a9:60:10:ff:76:4c:d2:40:71:
ac:fd:7e:11:32:3a:f0:ff:33:c6:e2:58:93:53:f5:83:70:90:
f2:ff:71:6a:40:74:49:d3:dc:0b:21:6f:2b:9c:bf:fe:c8:a2:
9d:bc:5e:b9:ab:5c:f0:d7:52:7e:77:3a:5d:66:0e:34:84:1d:
61:b5:97:45:4e:54:4d:33:04:61:64:95:d6:d5:4e:29:09:82:
51:89:d1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:23 2025 by rpki-client