Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52AEDA000E1511F08D22AB4E762E951A.roa
File: 52AEDA000E1511F08D22AB4E762E951A.roa (raw, json)
Hash identifier: u3vZe7qiR2cO2N2FTyLpSJxJ6McVBbwwQPWu4Q3WtFk=
Subject key identifier: 71:B8:1B:04:51:B8:61:69:9E:34:87:86:A7:3C:35:D7:AD:11:8F:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017714
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52AEDA000E1511F08D22AB4E762E951A.roa
Signing time: Mon 31 Mar 2025 09:48:39 +0000
ROA not before: Mon 31 Mar 2025 09:48:35 +0000
ROA not after: Thu 10 Apr 2025 09:48:35 +0000
asID: 45669
IP address blocks: 154.80.0.0/18 maxlen: 24
154.80.64.0/18 maxlen: 24
154.81.224.0/21 maxlen: 24
154.81.232.0/21 maxlen: 24
154.81.240.0/21 maxlen: 24
154.81.248.0/21 maxlen: 24
154.91.160.0/22 maxlen: 24
154.91.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96020 (0x17714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 31 09:48:35 2025 GMT
Not After : Apr 10 09:48:35 2025 GMT
Subject: CN=67ea64f7-6a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:0e:41:bb:40:2d:d2:d9:8a:cc:c9:a0:3f:
46:1d:eb:3d:31:4b:ca:f1:ea:29:6d:8a:f7:8f:8a:
bd:8f:b2:26:06:86:4b:69:15:c7:40:ea:85:ab:fe:
f0:d9:f4:a9:61:4f:25:42:cc:c0:46:5d:d0:dd:f7:
aa:ae:31:16:dd:56:65:17:d3:47:15:64:bf:7a:99:
08:8e:26:cb:30:bd:77:f3:ad:99:72:e1:d6:bd:a3:
2c:f5:d7:36:4f:20:50:d2:11:66:9e:51:68:ca:6d:
0f:24:e9:14:69:0d:e1:35:5b:13:7b:9d:22:93:bb:
ea:13:ba:1e:56:66:25:f5:e6:9c:5f:3c:10:bc:c1:
4b:9c:68:d6:b2:74:1c:a0:9f:de:8f:ad:d8:15:e5:
6d:03:28:18:8f:94:d4:c2:6f:1c:10:ca:d3:ec:9b:
62:23:95:3f:02:58:b2:88:11:f4:1f:21:d7:e4:94:
68:75:09:40:e4:e9:4e:53:09:dc:0d:b7:27:5f:2e:
d4:a0:64:7f:c2:a8:8d:21:13:52:bf:fd:cf:53:13:
de:a1:bd:19:40:39:68:37:93:d9:f7:08:76:71:f9:
e2:3c:8b:77:1d:9a:97:38:68:ca:3c:3b:9f:b7:5c:
9a:8e:ff:20:8e:86:3b:0c:55:66:bf:fb:74:56:5b:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B8:1B:04:51:B8:61:69:9E:34:87:86:A7:3C:35:D7:AD:11:8F:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52AEDA000E1511F08D22AB4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.0.0/17
154.81.224.0/19
154.91.160.0-154.91.165.255
Signature Algorithm: sha256WithRSAEncryption
08:eb:87:be:fa:62:5e:28:db:02:45:a5:37:62:cf:bc:97:c2:
48:5e:5c:5c:64:6a:8f:7b:2d:d9:20:9e:d6:c1:28:5a:15:a3:
73:59:8e:2a:e4:ae:20:40:7a:5f:9b:95:56:ea:bb:6f:14:52:
ca:25:5d:c2:bd:87:85:ad:7b:79:a0:df:84:0c:71:d7:7b:ab:
df:54:d0:07:77:08:7a:f3:31:a1:33:c5:79:ca:b6:29:92:ea:
57:41:e8:e2:bf:29:d9:d8:9d:71:99:f9:30:e3:52:0b:68:bb:
65:b8:99:db:d1:c2:92:5e:c8:95:98:c9:df:a5:2f:87:b7:58:
36:6d:6f:22:64:91:e2:80:76:c0:f7:74:dd:60:71:c3:0c:58:
87:54:67:06:13:46:02:f4:96:63:df:f8:ae:56:75:c8:6b:74:
9c:a3:4b:6b:64:18:22:6c:1b:f7:b1:66:81:92:64:a9:d6:bc:
51:18:43:8c:84:23:ef:5a:bd:b6:cf:e6:d3:a3:9c:15:d1:d3:
b0:9e:24:d8:73:56:3c:62:1c:46:28:f1:4a:92:41:93:87:d4:
a0:45:a8:16:95:50:cb:f4:a9:e3:9c:46:35:a2:55:8d:c6:22:
ba:84:1a:e2:59:15:8d:19:6f:1c:aa:13:7a:54:01:b8:8e:6b:
86:85:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:38 2025 by rpki-client