Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C2320E0041111F0A065457F762E951A.roa
File: 0C2320E0041111F0A065457F762E951A.roa (raw, json)
Hash identifier: Muw0gxQGigMZTLoLawrumwtzxkznRpyH7YQJOiZV9Ws=
Subject key identifier: 4D:7D:2D:67:4C:97:F7:59:07:E9:2E:50:3B:24:35:3C:0D:2F:20:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C2320E0041111F0A065457F762E951A.roa
Signing time: Tue 18 Mar 2025 15:52:51 +0000
ROA not before: Tue 18 Mar 2025 15:52:47 +0000
ROA not after: Mon 05 May 2025 15:52:47 +0000
asID: 44559
IP address blocks: 154.209.136.0/24 maxlen: 24
154.209.137.0/24 maxlen: 24
154.209.138.0/24 maxlen: 24
154.209.139.0/24 maxlen: 24
154.209.140.0/24 maxlen: 24
154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95422 (0x174be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 15:52:47 2025 GMT
Not After : May 5 15:52:47 2025 GMT
Subject: CN=67d996d3-d1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:35:21:54:26:34:0e:90:58:59:61:7d:6c:
3c:f0:7a:16:40:db:f6:f7:70:54:7c:3a:95:11:b7:
72:67:af:ac:5f:17:99:d0:3d:fc:83:c0:6b:eb:4c:
16:55:10:ac:75:9f:ef:88:94:b5:72:bf:0f:98:47:
72:cb:cc:af:fa:9e:7d:cd:10:32:03:a6:a1:76:42:
a6:20:aa:29:83:12:ff:7d:58:64:6c:31:0c:8d:e0:
6b:43:fc:e6:91:d4:a3:71:95:b6:aa:f2:8a:7a:c1:
62:1a:3e:ae:8e:56:01:8b:cd:b3:68:c2:70:88:ea:
a0:b6:88:c3:f0:a6:2f:3b:fb:f5:ae:69:0d:35:c8:
ca:c4:6e:2d:16:54:d9:c6:35:be:10:ae:18:dc:4a:
ec:d4:3c:5c:88:85:af:9c:a1:3d:69:c5:1f:cf:cd:
60:3f:4b:73:93:52:b3:29:e8:66:ce:53:71:58:56:
b9:df:e5:3f:f2:44:67:12:70:39:4a:03:68:a4:6b:
d7:2e:cb:c8:53:1d:a9:89:c9:9b:a4:32:f0:00:64:
e7:6d:0b:99:7c:71:a5:b5:d6:aa:65:5d:ff:0f:8d:
9d:89:ff:17:e1:97:d3:cf:2c:45:7c:2d:d6:00:dc:
fd:77:3a:dc:3a:d8:f0:d5:08:af:3f:58:63:c1:7f:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7D:2D:67:4C:97:F7:59:07:E9:2E:50:3B:24:35:3C:0D:2F:20:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C2320E0041111F0A065457F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.136.0-154.209.142.255
154.209.157.0-154.209.158.255
154.209.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c3:04:97:50:9f:91:49:47:d5:6b:14:60:c8:69:85:e6:22:
90:7f:4b:b0:c4:1f:ca:1b:c1:55:08:a1:d7:f6:99:f7:02:2c:
2f:56:fd:ef:82:2b:19:69:27:35:2f:bc:db:73:8f:49:b9:0a:
c3:37:ac:27:67:48:e0:15:62:19:74:d6:83:ce:cb:59:bd:f5:
73:65:e8:86:8c:e5:1e:e6:45:ed:05:d2:64:a5:21:76:ff:7d:
38:1d:89:e5:24:8c:bc:3a:99:6b:c5:3f:16:9b:7d:09:01:d6:
a6:a5:e9:9c:50:5f:31:89:1a:c1:e9:75:c4:4a:28:99:04:c4:
cb:89:9a:7c:8a:2c:33:a1:73:0d:5f:29:71:b9:5e:d5:d4:51:
93:dd:1b:60:d4:4f:d5:55:72:ac:f7:c5:d1:d0:1f:cd:e1:a6:
35:c9:8d:26:9e:ea:4b:11:c5:17:65:ee:14:1a:57:3f:50:5f:
bc:80:88:ec:08:08:f5:6e:15:c7:28:0c:fe:46:d8:66:ec:d5:
cd:da:2c:ba:11:01:40:a4:31:f3:6e:dd:54:f8:b4:8c:64:ff:
97:84:cd:05:b0:37:72:76:e9:63:b0:fc:e0:d7:2c:9a:17:22:
53:fa:bc:76:d3:ef:10:3b:81:83:04:3f:38:9a:5c:4e:90:3c:
b7:16:18:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:50 2025 by rpki-client