Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BC935E2040D11F0930B3667762E951A.roa
File: 1BC935E2040D11F0930B3667762E951A.roa (raw, json)
Hash identifier: ien51awURilyPTvDK1VgqHGAv+sHqJBUy720Dn8XXtY=
Subject key identifier: 46:E2:4A:25:28:CA:61:AF:5A:12:2E:22:B3:2D:8D:9A:36:AF:01:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BC935E2040D11F0930B3667762E951A.roa
Signing time: Tue 18 Mar 2025 15:24:40 +0000
ROA not before: Tue 18 Mar 2025 15:24:35 +0000
ROA not after: Thu 01 May 2025 15:24:35 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95414 (0x174b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 15:24:35 2025 GMT
Not After : May 1 15:24:35 2025 GMT
Subject: CN=67d99037-bf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:ff:33:bb:c6:3b:00:01:19:86:f3:a0:91:
5e:e6:aa:7b:90:7c:5c:f8:98:10:44:29:33:96:98:
40:85:46:a9:a3:bf:c1:14:a1:cb:fc:78:0a:f9:f8:
5c:e5:09:10:ea:6d:be:d4:53:0f:4d:ff:b3:13:fd:
36:ca:81:8c:64:2f:36:7d:97:e6:cb:ba:b1:47:f3:
0f:ea:e7:54:da:ad:51:46:94:ee:bf:78:1a:a2:59:
d2:f5:d7:7b:2b:92:db:66:29:93:22:fd:95:5e:bf:
5e:67:5f:7d:ff:5d:60:1a:0b:5d:c2:66:14:7a:e3:
96:ea:08:b0:fe:0d:aa:5b:66:83:04:cc:ed:d2:43:
bc:9a:e4:b1:49:06:76:b2:30:4a:e6:d2:22:30:d1:
c0:c0:6f:5b:c3:1b:04:66:db:97:2b:62:73:c2:3c:
9c:d5:a6:cd:89:57:61:ea:a1:59:e6:9a:3c:71:37:
20:96:c5:79:52:fd:22:05:59:d2:9d:c5:be:e8:e0:
b4:bd:ce:7e:a5:f5:f7:a2:5b:ca:83:fb:3d:11:a7:
15:30:d1:5e:f7:41:18:a0:13:fc:f2:77:04:06:d8:
41:c7:f7:7a:07:1d:2d:ac:b5:46:07:e4:04:eb:80:
59:61:48:a5:a5:cc:e9:35:62:d7:80:b4:a7:83:52:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E2:4A:25:28:CA:61:AF:5A:12:2E:22:B3:2D:8D:9A:36:AF:01:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BC935E2040D11F0930B3667762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.233.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
87:51:84:11:05:40:77:42:cc:94:02:e6:59:73:4c:41:c8:3c:
71:e8:ae:d7:b1:99:9e:8d:29:17:45:05:1e:3c:6e:43:33:c3:
c5:4c:3b:9a:02:50:af:68:24:14:ca:dd:b4:1a:1d:f8:60:40:
1a:00:b2:22:9a:ef:f9:d4:27:ef:fd:b0:35:75:d7:5f:00:82:
de:4a:e1:d1:da:7a:ca:0a:08:cf:80:42:6c:7c:7a:67:98:8d:
38:ce:ad:99:2b:6a:0b:7f:ad:d6:43:c3:81:a0:7d:c6:a3:0f:
93:1d:09:64:f7:83:83:6f:94:87:1e:8b:09:79:3b:9d:62:a8:
73:61:c1:bb:1c:0d:d6:50:d2:81:c8:79:12:9e:06:d4:4a:67:
3c:d9:a3:5a:78:9c:68:04:89:94:02:18:71:48:e8:29:4e:18:
a0:82:92:e5:32:14:1a:0b:55:ae:fb:46:23:a4:18:a8:6b:cb:
d3:13:79:8e:7e:ff:51:a1:42:26:c9:17:30:6e:e6:14:df:eb:
3c:65:fe:be:0c:2e:c4:54:2d:25:47:33:e2:10:38:ce:7b:13:
7d:d5:26:cc:e2:81:7d:3e:77:26:a8:08:98:a0:fb:86:e4:58:
7f:c8:13:3d:a3:3f:40:51:d8:be:fb:c7:cf:95:d9:97:e0:56:
89:cc:8f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:45 2025 by rpki-client