Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21B74242040C11F0AA6BFF60762E951A.roa
File: 21B74242040C11F0AA6BFF60762E951A.roa (raw, json)
Hash identifier: zx53ujJM2g6ZcOZJDP+47sMIQ+2eTHKA0SHHQkEsMh0=
Subject key identifier: B1:30:D7:B2:4A:64:62:A6:2D:6C:D8:21:ED:D9:0F:3E:93:16:65:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21B74242040C11F0AA6BFF60762E951A.roa
Signing time: Tue 18 Mar 2025 15:17:40 +0000
ROA not before: Tue 18 Mar 2025 15:17:36 +0000
ROA not after: Thu 01 May 2025 15:17:36 +0000
asID: 44559
IP address blocks: 154.203.223.0/24 maxlen: 24
154.205.224.0/24 maxlen: 24
154.205.225.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95412 (0x174b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 15:17:36 2025 GMT
Not After : May 1 15:17:36 2025 GMT
Subject: CN=67d98e94-dbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:23:d1:f5:e7:48:2d:b8:c8:5e:27:49:66:
5c:e7:41:98:87:6d:eb:23:03:c5:e8:19:fa:c6:16:
e7:f3:c5:f7:74:67:8a:9e:dd:41:81:b9:68:cf:05:
7f:5a:6c:88:62:8a:a0:2d:46:9a:7b:a4:8f:62:c0:
17:00:c2:1b:bb:d5:9d:3a:e2:45:6d:84:33:9e:27:
fd:90:9e:37:66:95:af:d1:c1:62:10:e7:09:e3:02:
a6:3a:62:8f:af:fa:88:ff:42:09:1a:5f:a1:33:bf:
6c:70:b3:8f:db:56:a4:5a:64:6a:69:ba:b6:65:ce:
fb:07:d2:aa:ca:cf:e9:1e:2e:f4:a6:31:b9:c2:2e:
97:04:f8:a9:54:06:f9:eb:4e:83:75:df:76:75:63:
e3:89:fb:07:02:18:9e:7f:c5:51:97:53:d8:30:e4:
37:3e:bf:94:20:22:56:4e:64:b6:7b:5e:9b:7b:4f:
67:ef:bd:22:3e:2f:73:53:b6:ff:e3:e2:12:c4:78:
a2:8b:98:84:ca:83:42:b9:8b:ca:c8:44:8f:5c:36:
07:91:0b:52:30:4a:37:7d:3d:ca:be:b8:e9:cd:5b:
ce:aa:82:80:c0:72:02:a0:e5:5f:f3:17:9e:6b:25:
fc:18:dd:dd:a0:3e:a4:bf:45:4e:d6:f6:43:ef:97:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:30:D7:B2:4A:64:62:A6:2D:6C:D8:21:ED:D9:0F:3E:93:16:65:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21B74242040C11F0AA6BFF60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.223.0/24
154.205.224.0-154.205.232.255
Signature Algorithm: sha256WithRSAEncryption
ad:f1:2c:25:47:67:72:86:48:d3:d2:17:b7:42:22:ac:12:1c:
05:61:60:ca:b0:9c:36:8e:03:61:4a:c2:9e:60:d2:a4:eb:e2:
74:e4:6e:c4:77:3b:0c:47:00:7e:bb:8a:bd:95:76:d7:d5:d0:
7d:9c:be:55:97:6d:8b:1f:c0:2a:89:40:7e:ec:6a:db:5a:a5:
9c:71:36:73:59:59:60:f1:0c:f5:0b:6b:4d:f9:c6:63:43:87:
c6:4e:5b:b0:3a:0f:c6:ab:c6:1b:40:c6:91:77:55:c2:de:61:
a3:dc:86:d5:63:69:c6:e4:9b:b6:ac:07:a4:53:cd:35:fb:e9:
59:48:3a:5c:93:a5:68:0c:76:ab:48:0e:6e:3e:1a:8d:49:9b:
43:a5:d8:19:10:ab:7d:b4:e3:51:4c:72:7f:21:65:20:27:a1:
9f:d6:96:24:56:71:32:8c:cf:c7:dc:ee:57:f3:3e:4e:0c:ab:
4f:b6:4c:a3:db:ee:3a:8c:fc:ac:f8:1e:b5:20:b7:45:20:fc:
29:0a:35:a5:3b:58:a2:93:02:3d:7b:4f:c2:1a:9a:db:1e:ee:
53:29:aa:2d:1d:89:13:b0:3d:90:d2:4d:82:37:2e:55:b6:d1:
93:96:cb:34:e8:22:8b:73:47:0b:63:4c:14:0f:fe:02:eb:1a:
bf:97:12:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:37 2025 by rpki-client