Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/781004B8041A11F0BEF6A6B9762E951A.roa
File: 781004B8041A11F0BEF6A6B9762E951A.roa (raw, json)
Hash identifier: HGSGp7Yq1e3mTDfETU8PIc6U8X7chgqo4lVoNnYdpMM=
Subject key identifier: 35:E4:3D:72:85:0B:25:25:B7:D7:C7:B1:EF:18:50:81:54:BD:28:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/781004B8041A11F0BEF6A6B9762E951A.roa
Signing time: Tue 18 Mar 2025 17:00:18 +0000
ROA not before: Tue 18 Mar 2025 17:00:14 +0000
ROA not after: Mon 05 May 2025 17:00:14 +0000
asID: 202656
IP address blocks: 154.219.1.0/24 maxlen: 24
154.219.4.0/24 maxlen: 24
154.219.29.0/24 maxlen: 24
154.219.30.0/24 maxlen: 24
154.219.31.0/24 maxlen: 24
154.222.43.0/24 maxlen: 24
154.222.44.0/24 maxlen: 24
154.222.45.0/24 maxlen: 24
154.222.46.0/24 maxlen: 24
154.222.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95442 (0x174d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 17:00:14 2025 GMT
Not After : May 5 17:00:14 2025 GMT
Subject: CN=67d9a6a2-f961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:b3:92:46:5f:4e:a8:f8:e3:f7:48:7b:d2:
56:93:63:69:20:75:83:8f:9e:52:2e:8e:05:16:42:
63:01:f3:61:9e:ca:c6:50:12:46:3e:40:2b:59:ed:
6a:61:b6:05:74:33:c4:c6:08:f8:90:a5:c5:0b:9b:
dd:6e:d1:26:13:85:18:82:f8:26:a8:17:9d:6b:94:
90:84:fb:d2:72:cf:37:8b:14:34:ef:a6:6a:0a:a3:
e3:47:47:62:b2:30:4f:f0:6a:75:fd:94:85:97:2e:
f0:d2:b4:d5:79:0d:25:e2:1f:e8:2d:e8:48:e6:46:
7f:b0:dd:b6:2b:b6:a8:5d:b0:ac:ed:96:32:a4:0c:
0b:f6:f9:0c:9c:bd:91:6f:36:a9:e8:1e:1e:d3:40:
dc:2b:c9:78:27:52:c4:cf:19:fb:78:00:e9:fb:2b:
87:ce:05:ef:4b:06:21:05:f7:c0:53:82:b3:18:70:
e8:5c:9b:c7:c4:d4:69:18:50:7f:f6:37:76:41:cc:
f1:62:25:e0:d2:cc:46:16:e6:1f:ce:ed:bc:11:ce:
b8:d9:bb:65:ee:0a:a9:1f:67:c2:93:4c:cb:f9:ab:
2e:0f:5b:dc:84:68:68:ce:0a:7a:27:0a:e5:7a:8c:
17:46:ab:4a:2e:03:eb:c8:a8:54:92:49:15:e2:c1:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E4:3D:72:85:0B:25:25:B7:D7:C7:B1:EF:18:50:81:54:BD:28:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/781004B8041A11F0BEF6A6B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.1.0/24
154.219.4.0/24
154.219.29.0-154.219.31.255
154.222.43.0-154.222.47.255
Signature Algorithm: sha256WithRSAEncryption
c7:a1:2f:32:05:c2:15:37:79:7e:8d:e4:dd:f1:87:ae:c8:91:
10:e5:81:43:40:cf:67:47:69:e3:b9:eb:43:ea:1a:48:c4:ef:
ce:f2:21:6b:1a:50:d9:2c:64:05:59:5e:24:87:6c:6e:5d:f9:
5a:61:11:7a:8c:d3:64:bc:39:fb:36:02:f5:02:84:96:32:aa:
fa:db:63:3e:47:3f:59:4a:f2:39:33:d9:82:a6:ce:3f:ec:2c:
4d:a0:7f:c1:66:f8:f5:3d:82:c9:b8:13:11:74:5e:4d:6d:69:
04:6d:84:6a:18:3f:41:9f:79:f4:9c:7e:49:a0:44:04:4f:77:
e6:38:0f:eb:7b:ed:46:84:1d:d2:86:84:28:f9:6c:76:42:b9:
ec:d3:3e:1a:e0:80:90:c6:44:8d:f3:48:a7:e4:b8:dc:2f:03:
83:1e:6f:79:46:03:e9:70:9e:46:11:1f:4f:e4:65:2d:84:fe:
d5:61:37:12:d4:33:cb:55:03:96:f6:c4:9e:74:9e:61:72:98:
7f:71:c0:11:c6:b7:28:d4:f9:03:f7:c4:2c:83:f0:93:d6:c5:
2c:ec:a5:63:03:db:c6:37:37:b5:e0:c5:d1:d3:33:6f:aa:b7:
22:40:b0:57:77:5b:64:5e:bd:b2:df:77:9f:11:76:dc:3c:88:
6c:a1:6d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:55:23 2025 by rpki-client