Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F0A6E7404C711F09CAEB473762E951A.roa
File: 5F0A6E7404C711F09CAEB473762E951A.roa (raw, json)
Hash identifier: JY1ATsfougWhfamWACmZaqxU/4evTPht2Tqi28q8C4g=
Subject key identifier: 4F:CD:76:2D:9C:7B:79:CB:28:90:35:C5:AF:C9:18:E3:CF:2F:C5:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017520
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F0A6E7404C711F09CAEB473762E951A.roa
Signing time: Wed 19 Mar 2025 13:37:59 +0000
ROA not before: Wed 19 Mar 2025 13:37:55 +0000
ROA not after: Wed 30 Apr 2025 13:37:55 +0000
asID: 62240
IP address blocks: 154.195.2.0/24 maxlen: 24
154.195.3.0/24 maxlen: 24
154.195.97.0/24 maxlen: 24
154.195.98.0/24 maxlen: 24
154.195.99.0/24 maxlen: 24
154.195.101.0/24 maxlen: 24
154.195.102.0/24 maxlen: 24
154.195.103.0/24 maxlen: 24
154.195.104.0/24 maxlen: 24
154.195.105.0/24 maxlen: 24
154.195.106.0/24 maxlen: 24
154.195.107.0/24 maxlen: 24
154.195.109.0/24 maxlen: 24
154.195.110.0/24 maxlen: 24
154.195.114.0/24 maxlen: 24
154.195.115.0/24 maxlen: 24
154.195.119.0/24 maxlen: 24
154.195.121.0/24 maxlen: 24
154.195.122.0/24 maxlen: 24
154.195.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95520 (0x17520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 13:37:55 2025 GMT
Not After : Apr 30 13:37:55 2025 GMT
Subject: CN=67dac8b7-8fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:e1:37:77:19:ae:31:2d:2c:46:40:40:9f:
69:30:ae:37:b9:79:01:3c:68:f2:44:c9:31:d8:ca:
7b:44:6c:64:8f:2c:66:9d:5e:12:be:a3:94:d4:c8:
f6:ca:2d:ef:e7:05:4c:c8:e2:6e:01:22:6c:0b:70:
85:2c:95:26:50:d6:01:14:36:7d:f1:9d:57:a7:4d:
bb:e1:ee:e1:ff:20:6e:d6:4e:1d:ea:22:52:16:7a:
79:e4:5f:fb:9b:3f:61:2d:48:ab:ab:be:58:2e:da:
41:7e:cd:d4:27:04:87:1b:93:d1:8b:af:54:fd:60:
28:b1:fd:bc:5a:5b:44:44:78:c0:1c:ee:1a:4d:a1:
75:38:e0:5c:78:cd:3a:23:32:ae:45:58:e2:56:80:
0f:11:37:80:03:7e:dd:f3:1d:8e:20:4c:1f:36:22:
74:d5:04:29:b0:09:69:86:54:f3:f1:23:33:44:fe:
cd:68:c7:c4:c2:3e:cc:dc:70:ef:41:46:4b:c7:12:
a1:b4:78:4e:b2:56:49:95:fb:ba:e7:9d:58:47:45:
01:59:b2:49:2b:22:56:82:db:fd:74:7e:16:5c:d6:
a6:24:4e:a4:51:96:c8:75:d4:0e:d6:fe:ab:84:a3:
80:e8:3a:e7:4c:3f:22:32:fd:2b:20:cc:0e:16:76:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:76:2D:9C:7B:79:CB:28:90:35:C5:AF:C9:18:E3:CF:2F:C5:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F0A6E7404C711F09CAEB473762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.2.0/23
154.195.97.0-154.195.99.255
154.195.101.0-154.195.107.255
154.195.109.0-154.195.110.255
154.195.114.0/23
154.195.119.0/24
154.195.121.0-154.195.122.255
154.195.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:3a:a9:86:3c:d0:9b:b6:11:bd:f3:e6:4e:89:17:4e:f6:72:
be:2f:e5:3a:7f:cb:9d:0d:c3:0b:f3:90:59:d8:81:d7:f0:c0:
89:55:64:17:f7:f8:0f:b7:6a:82:8d:be:eb:5d:2d:de:86:2e:
60:d2:7b:99:5b:55:f2:75:18:1e:97:a1:1d:28:ef:30:63:76:
5a:c9:76:1d:10:ac:c2:ef:51:31:b3:9a:90:2c:17:c7:7a:7c:
90:d5:f4:18:78:ce:8d:0c:e2:d8:0f:6a:5e:b6:b8:12:ca:8f:
84:46:23:c8:32:3a:6b:8e:3c:74:bf:3f:83:02:60:f7:c5:d0:
ef:2b:e4:ee:45:77:31:54:5a:f2:2e:cc:74:53:9a:38:22:12:
06:d1:ca:1d:6f:8b:89:0f:e7:b3:42:a7:f1:d2:b2:81:d6:36:
f0:d5:27:ec:56:2f:6c:50:e3:9e:be:ad:bc:f3:c8:97:99:9d:
8e:f0:5a:8c:78:41:8a:f2:dd:ad:e4:a4:d2:00:33:4a:5b:22:
df:8b:fb:82:b3:56:8d:29:d3:03:4e:52:04:1e:d3:41:89:96:
bc:08:15:55:38:81:96:e9:12:39:f6:e8:56:70:bd:44:19:8e:
9f:ac:6b:ed:10:4d:de:33:08:6d:8d:1a:c6:e6:ef:77:15:f7:
14:da:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:32:29 2025 by rpki-client