Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A49CDC042411F085F4CD74762E951A.roa
File: 27A49CDC042411F085F4CD74762E951A.roa (raw, json)
Hash identifier: h34HcUNRXb77t+yHXFaP/TSZ+UFMdPzi9N+GuFe9d3k=
Subject key identifier: F7:E1:15:8F:8C:48:26:AB:E2:A1:2E:68:49:56:26:71:DE:D2:89:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A49CDC042411F085F4CD74762E951A.roa
Signing time: Tue 18 Mar 2025 18:09:38 +0000
ROA not before: Tue 18 Mar 2025 18:09:34 +0000
ROA not after: Mon 05 May 2025 18:09:34 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
154.218.22.0/24 maxlen: 24
154.222.215.0/24 maxlen: 24
154.222.216.0/24 maxlen: 24
154.222.217.0/24 maxlen: 24
154.222.218.0/24 maxlen: 24
154.222.219.0/24 maxlen: 24
154.222.242.0/24 maxlen: 24
154.222.252.0/24 maxlen: 24
154.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95462 (0x174e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 18:09:34 2025 GMT
Not After : May 5 18:09:34 2025 GMT
Subject: CN=67d9b6e2-4fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:c9:b2:15:ac:41:f0:ee:ff:32:29:78:16:
75:42:04:88:8d:79:6f:e3:75:b2:00:87:2b:30:8a:
fa:0f:b2:47:db:30:34:ee:fb:84:ec:2c:d4:ac:ea:
ce:09:4e:88:bf:6f:44:72:cd:e4:82:25:cf:1c:08:
fb:32:56:cb:2c:cf:39:a3:fe:d9:23:c0:c7:18:1f:
a6:47:e1:44:8a:2b:ec:11:ba:57:27:aa:d8:58:76:
86:17:58:13:96:7d:d2:a4:dc:59:50:e3:f3:43:26:
0a:8b:d2:fd:a4:18:74:00:28:a9:42:8b:8d:4e:29:
b8:0f:e9:76:9e:ba:6e:cb:30:1b:8b:3a:b4:88:66:
02:18:e3:af:91:e5:ec:75:6c:c3:4d:8f:b5:6b:c1:
81:b5:7a:29:aa:bd:ea:7c:93:71:02:bb:b1:0a:17:
7c:d7:b4:50:b2:b4:92:1e:71:0e:0e:3c:1d:b0:bb:
0e:82:62:a4:7c:2a:36:1a:55:30:e9:92:78:2d:70:
16:ae:01:e8:fa:52:61:92:05:8b:ef:18:df:d7:91:
51:dc:ea:f3:84:0d:5b:61:c8:d9:0c:e7:9e:45:ff:
95:95:e4:1f:d8:21:4f:c6:f1:1e:02:37:7a:f3:5f:
0f:c3:9a:c9:33:c8:dd:2c:ea:30:3b:f5:0d:4b:80:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E1:15:8F:8C:48:26:AB:E2:A1:2E:68:49:56:26:71:DE:D2:89:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A49CDC042411F085F4CD74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/24
154.218.22.0/24
154.222.215.0-154.222.219.255
154.222.242.0/24
154.222.252.0/24
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1d:6a:d9:9b:20:b0:c0:d5:f7:8a:1d:b6:7a:38:d0:73:6f:
4b:11:a0:36:b5:85:84:5c:63:25:e0:6b:70:11:80:1f:a7:48:
d8:6a:05:c5:ae:57:a8:9e:79:b1:74:a4:1c:84:36:11:47:4b:
65:f0:bb:79:65:b4:92:52:08:ae:92:c7:00:75:ee:6d:7f:e9:
cd:b6:dc:ef:64:b8:27:d8:0e:50:a9:72:f1:54:c2:2f:34:7b:
59:db:a3:84:70:79:1b:78:9b:cf:ba:68:3a:52:3f:cb:7d:a0:
10:04:40:9b:1e:a8:b8:8a:27:6d:78:29:e2:34:04:3b:f4:30:
1f:e1:4e:fc:71:09:c7:2e:2c:08:d9:6c:f6:78:a9:c8:fa:eb:
b2:e5:2b:0d:e5:c9:35:32:27:df:8e:03:bb:55:bd:23:15:be:
4a:83:2a:d8:0e:3d:88:6d:30:cd:89:e6:e4:e7:20:41:39:7e:
53:3c:b6:55:b2:ef:f5:90:ee:60:f8:b0:72:78:3b:97:7a:8c:
54:0a:65:dd:17:9d:95:6c:f6:7b:b9:c7:c6:7a:ff:e5:0f:d8:
d9:d9:73:e2:9f:2b:63:b8:c8:e6:9d:1c:9e:03:cb:7b:5d:a6:
37:41:9f:9e:2c:02:0c:1b:31:2b:25:f8:7d:be:7f:f0:b6:c7:
2d:c9:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:30 2025 by rpki-client