Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BD8F1D4040411F0AE931AB1762E951A.roa
File: 6BD8F1D4040411F0AE931AB1762E951A.roa (raw, json)
Hash identifier: 4QXenkphAX24pddRUbGi5St2YoLqFBC/3g/qCRO+/so=
Subject key identifier: 32:9C:5B:18:0F:FF:5C:08:28:5E:3C:42:E0:53:94:AC:64:5A:CB:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BD8F1D4040411F0AE931AB1762E951A.roa
Signing time: Tue 18 Mar 2025 14:22:29 +0000
ROA not before: Tue 18 Mar 2025 14:22:25 +0000
ROA not after: Thu 01 May 2025 14:22:25 +0000
asID: 49505
IP address blocks: 154.205.244.0/24 maxlen: 24
154.205.245.0/24 maxlen: 24
154.205.246.0/24 maxlen: 24
154.223.200.0/24 maxlen: 24
154.223.201.0/24 maxlen: 24
154.223.202.0/24 maxlen: 24
154.223.203.0/24 maxlen: 24
154.223.205.0/24 maxlen: 24
154.223.206.0/24 maxlen: 24
154.223.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95396 (0x174a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 14:22:25 2025 GMT
Not After : May 1 14:22:25 2025 GMT
Subject: CN=67d981a4-fd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:f8:a0:96:aa:29:db:f1:c8:9d:57:77:21:
1f:5d:e4:82:7a:2c:cf:dc:66:4a:b7:96:7b:0c:bb:
cb:8b:05:71:5e:16:68:e7:07:80:73:71:8f:9d:1b:
50:92:2a:ce:26:0b:75:68:ce:30:2b:e6:dd:c9:ce:
b9:6b:42:88:d4:5d:47:e1:00:4c:d5:6c:19:c7:af:
9d:3b:4e:fb:23:5c:67:84:29:96:88:45:a3:33:e2:
95:e8:ed:89:11:5b:13:61:f1:7d:af:db:41:fd:33:
42:29:28:03:f2:3a:cb:12:e5:58:35:1d:b6:d5:9d:
ba:54:89:7b:74:4d:32:76:58:55:3f:90:d0:17:08:
82:6b:80:85:46:9a:18:9c:78:25:07:5f:8f:e3:9a:
4d:e3:6d:8e:39:ae:11:d6:c3:dd:3c:65:a3:7d:bd:
15:75:b4:40:4f:13:c3:2c:df:8f:4e:10:57:10:47:
3b:77:e3:62:67:98:96:49:15:43:c1:81:bc:9e:4d:
19:1b:9b:34:7f:c4:c5:3a:1b:55:81:33:fd:62:de:
e4:a1:ab:99:e6:5f:79:68:a6:71:9c:28:d2:18:19:
4b:76:09:6f:59:6c:33:8d:eb:42:f7:ad:c8:8e:d0:
5f:80:09:70:be:51:bc:67:69:34:68:94:ba:76:28:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9C:5B:18:0F:FF:5C:08:28:5E:3C:42:E0:53:94:AC:64:5A:CB:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BD8F1D4040411F0AE931AB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.244.0-154.205.246.255
154.223.200.0/22
154.223.205.0-154.223.207.255
Signature Algorithm: sha256WithRSAEncryption
8f:33:af:67:d1:95:1f:55:aa:f6:a9:b2:46:02:91:06:c0:13:
87:7d:76:68:31:ca:39:90:a3:88:78:38:09:59:26:e8:93:6e:
ee:f3:c6:87:1f:1c:2a:ad:67:cc:09:c2:1a:7f:42:c5:b2:2c:
66:c4:83:d8:2e:c1:e2:e8:38:63:7e:bf:71:eb:80:ff:12:fc:
0a:d4:61:67:e4:2b:59:bb:ba:fe:78:53:82:c2:7c:99:4c:ff:
9a:58:71:f8:a1:f6:e2:55:c5:ea:3e:32:f3:8f:f5:b6:32:88:
c4:aa:7c:60:30:30:5d:0e:ea:cf:5e:18:e0:2a:eb:89:fb:c2:
f9:ef:6f:b0:46:38:4f:d2:69:f7:c4:67:a5:5a:89:e8:6c:35:
16:e8:59:e6:90:5d:50:79:fb:9c:e2:22:c2:e2:28:b6:a3:f7:
56:f5:8e:d6:34:7b:4d:f2:77:7c:a4:ab:5b:a3:a3:67:e8:5e:
8f:3c:3d:91:98:ff:9c:1d:f0:a7:ad:6a:ed:50:fd:b8:5e:c3:
7e:3d:0f:e4:69:24:a7:73:21:7f:b7:7d:0b:c4:28:06:81:78:
3b:6e:99:07:db:48:ef:fe:a6:bc:cc:4d:4f:c0:b0:a2:2a:c1:
56:d8:2e:0b:3c:f0:02:1a:b7:69:15:cf:1d:2b:9b:11:72:dc:
73:eb:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:39 2025 by rpki-client