Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5853CD1A042111F094523962762E951A.roa
File: 5853CD1A042111F094523962762E951A.roa (raw, json)
Hash identifier: SFYY3ucYF3coAx5402LEurCeuDukmwysM4N5q0xFpKE=
Subject key identifier: 80:0F:29:BB:4E:7D:E9:75:C3:10:82:42:79:AE:E4:05:EA:B9:C8:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5853CD1A042111F094523962762E951A.roa
Signing time: Tue 18 Mar 2025 17:49:31 +0000
ROA not before: Tue 18 Mar 2025 17:49:27 +0000
ROA not after: Mon 05 May 2025 17:49:27 +0000
asID: 202656
IP address blocks: 154.219.236.0/24 maxlen: 24
154.219.237.0/24 maxlen: 24
154.219.238.0/24 maxlen: 24
154.219.239.0/24 maxlen: 24
154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
154.219.244.0/24 maxlen: 24
154.219.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95456 (0x174e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 17:49:27 2025 GMT
Not After : May 5 17:49:27 2025 GMT
Subject: CN=67d9b22b-21dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:3e:56:21:e6:68:13:fd:a9:1f:dc:48:1f:
b8:a3:85:ae:4a:2e:f6:53:d4:66:77:c0:28:c1:8b:
9b:05:17:54:bc:36:e3:c3:83:04:a2:f7:80:09:58:
11:39:15:6c:ac:10:aa:8d:c9:76:26:69:9c:e7:6e:
90:9b:b4:50:33:f9:36:37:31:29:0b:4b:c1:28:81:
70:43:52:79:4c:ab:b4:91:1e:9c:3a:b1:50:95:dd:
df:98:fc:92:56:be:65:db:57:05:7e:97:1e:90:69:
aa:bb:88:a5:f9:63:43:a2:c7:ee:ac:50:72:f5:43:
c2:0f:e6:6a:c0:64:ba:cb:c7:97:bc:18:e9:f0:66:
f4:23:f0:c5:60:b2:42:64:01:1d:9d:e8:d9:2d:8b:
c8:a8:3d:89:8d:bb:4c:db:97:80:e3:89:cb:fc:c3:
f7:f2:5f:47:de:c0:7b:ad:01:d4:8c:d7:b4:60:4d:
ba:21:2e:45:eb:5c:df:30:1e:df:16:7c:5b:ca:d9:
3b:6b:fa:f4:ba:72:2f:af:39:ca:91:88:c1:b4:45:
17:c6:b7:1f:bf:28:58:bb:ac:e5:12:5b:a5:4a:e9:
a8:1b:4e:57:e4:74:f6:25:2f:f0:4c:5f:1a:84:6b:
a5:3a:00:3e:20:54:c9:09:b2:2e:26:37:bc:2e:04:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0F:29:BB:4E:7D:E9:75:C3:10:82:42:79:AE:E4:05:EA:B9:C8:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5853CD1A042111F094523962762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.236.0-154.219.244.255
154.219.248.0/24
Signature Algorithm: sha256WithRSAEncryption
32:13:46:4c:3f:a1:0f:27:7e:3d:58:78:0d:49:a3:86:65:d4:
5c:32:92:bb:a0:67:ff:8b:46:0e:98:dc:98:aa:37:fa:e0:50:
8a:e1:c7:ae:a3:b4:ed:a7:bf:26:b9:0b:96:32:80:58:c1:01:
95:97:b4:76:44:74:d8:a3:69:8f:85:bb:72:04:2a:7d:0e:e6:
63:28:68:fd:16:a1:5c:09:3e:5d:b2:cf:dc:de:ba:98:be:5d:
af:12:25:a1:2f:40:6a:f6:65:24:4c:a4:9a:a2:8e:9b:5e:d3:
c1:7d:7c:e5:68:fd:01:0c:6b:14:61:62:be:4a:74:6b:91:e9:
1f:01:f7:35:27:83:c2:af:a4:4d:16:6f:f2:32:2e:0e:39:8f:
aa:f4:5d:29:43:d6:aa:5f:35:1e:e4:a0:55:d3:3e:61:5b:82:
bc:09:11:9c:cc:59:c2:e1:1a:3e:62:a6:42:2b:e0:bb:3a:ef:
f4:77:f8:bc:0e:2b:55:1c:b3:5a:ba:c1:3d:26:b5:71:66:a2:
ff:ae:3b:f1:88:2a:a0:2b:77:47:7b:18:3a:ac:6e:12:19:f2:
55:1e:10:58:0a:a8:7f:01:8e:78:c4:49:9a:8a:c9:26:67:64:
f1:d0:7d:bf:64:dd:0e:80:8b:98:6c:6d:48:9b:e9:09:04:7c:
f9:1f:d4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:09 2025 by rpki-client