Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F6B0F240CC611F095FDF050762E951A.roa
File: 1F6B0F240CC611F095FDF050762E951A.roa (raw, json)
Hash identifier: wcO0hbA3oFhzXcGHAjxASMGPPhcC83EwTJRrzgzyCkU=
Subject key identifier: 10:58:07:B8:C0:99:28:AB:68:0B:92:17:4C:08:DA:4D:79:59:DB:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F6B0F240CC611F095FDF050762E951A.roa
Signing time: Sat 29 Mar 2025 17:49:12 +0000
ROA not before: Sat 29 Mar 2025 17:49:08 +0000
ROA not after: Mon 07 Apr 2025 17:49:08 +0000
asID: 5065
IP address blocks: 154.82.10.0/24 maxlen: 24
154.83.200.0/24 maxlen: 24
154.83.201.0/24 maxlen: 24
154.83.202.0/24 maxlen: 24
154.83.204.0/24 maxlen: 24
154.83.205.0/24 maxlen: 24
154.83.206.0/24 maxlen: 24
154.83.207.0/24 maxlen: 24
154.83.225.0/24 maxlen: 24
154.83.229.0/24 maxlen: 24
154.83.231.0/24 maxlen: 24
154.83.251.0/24 maxlen: 24
154.84.182.0/24 maxlen: 24
154.84.183.0/24 maxlen: 24
154.85.108.0/24 maxlen: 24
154.85.109.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.111.0/24 maxlen: 24
154.85.120.0/22 maxlen: 24
154.93.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95954 (0x176d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 17:49:08 2025 GMT
Not After : Apr 7 17:49:08 2025 GMT
Subject: CN=67e83298-198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:f4:ee:2e:f1:1c:4a:74:c6:d8:7d:f6:b6:
25:fa:54:93:f6:f2:02:01:0e:a0:53:49:70:7a:70:
75:f0:26:c0:dc:28:84:54:ea:2f:23:5f:af:b8:98:
4d:36:20:90:25:3d:96:d9:e3:4a:a2:8a:d0:94:1a:
89:a5:f2:4b:f2:5b:2f:dd:97:a9:80:5e:4b:ea:c0:
cc:b4:95:71:54:77:78:35:9a:cc:c4:b6:18:65:2e:
e0:7a:ec:0c:b1:2b:e0:4e:fa:cc:18:90:3f:1c:59:
2d:5a:73:15:91:a2:72:dc:8d:29:b4:ea:e4:f5:08:
04:c5:fd:e3:f7:41:d4:f2:43:1a:1b:90:51:2b:71:
73:0c:d3:81:2f:58:88:61:c7:70:e0:20:01:49:67:
e2:42:72:36:34:bd:81:48:e4:1f:c4:71:d2:89:85:
6d:ab:c5:a7:3c:c2:2f:d7:fc:5a:2e:fc:49:9a:be:
d4:d8:77:cc:7c:ad:0c:a3:06:fc:77:35:a8:53:54:
39:91:07:84:0c:d1:51:36:41:8d:5b:e2:5c:17:12:
38:56:16:a3:25:52:39:46:34:e5:8a:cf:d1:0e:d2:
75:42:7e:e9:10:e7:15:f7:bb:41:4f:a0:54:ea:17:
82:68:bc:a9:c2:84:bc:18:0b:a3:60:a2:ab:49:0b:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:58:07:B8:C0:99:28:AB:68:0B:92:17:4C:08:DA:4D:79:59:DB:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F6B0F240CC611F095FDF050762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.10.0/24
154.83.200.0-154.83.202.255
154.83.204.0/22
154.83.225.0/24
154.83.229.0/24
154.83.231.0/24
154.83.251.0/24
154.84.182.0/23
154.85.108.0/22
154.85.120.0/22
154.93.16.0/22
Signature Algorithm: sha256WithRSAEncryption
94:aa:be:bb:4e:3e:1d:99:03:79:6e:32:e4:da:2f:20:b8:1d:
02:a4:52:a9:13:9d:a1:b8:1e:81:2d:ba:47:21:21:1a:10:a5:
7d:48:b0:3c:8d:20:0a:95:72:39:9f:97:25:11:ad:ce:a9:00:
c3:ff:7b:c9:38:a1:b2:96:f7:54:0d:41:07:c0:c2:07:9d:f8:
cb:72:5a:6b:4e:fb:32:e8:3e:4f:00:c9:2a:a0:ad:7e:a9:2f:
1a:c4:54:d8:b3:49:6f:21:56:eb:aa:85:6c:06:69:ac:96:e4:
9d:85:ad:48:b3:76:78:5a:4e:52:58:46:ec:cc:4e:62:92:e3:
9f:ad:cd:b5:6b:21:15:79:d2:c0:95:d0:08:48:d7:89:03:6c:
b3:af:d8:50:7e:94:86:d3:25:61:da:92:03:39:be:7f:e1:61:
3d:26:80:03:d2:2c:53:78:5b:2d:cb:3c:4e:4a:68:81:ca:17:
cd:8f:c6:ac:fb:c0:82:35:72:63:75:db:b1:e9:a2:89:53:06:
a9:2a:80:6e:6f:79:9d:b3:80:a4:d7:f7:74:73:ae:7e:49:6b:
20:30:e7:79:43:b1:71:45:fc:63:55:95:aa:e3:a4:29:21:23:
86:07:4f:41:e3:ef:70:a1:27:ca:ef:5e:75:4a:74:0f:4b:a6:
42:3d:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:31 2025 by rpki-client