Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825D27AC0EA611F0869E6741762E951A.roa
File: 825D27AC0EA611F0869E6741762E951A.roa (raw, json)
Hash identifier: Nt8sS2Xca9UTjnV7QQgmabdFCimYfCW22GVa+QRshwE=
Subject key identifier: 70:23:B3:DB:B9:DD:88:3D:A6:CC:B3:6D:52:AA:F3:EF:1F:9F:60:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017727
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825D27AC0EA611F0869E6741762E951A.roa
Signing time: Tue 01 Apr 2025 03:07:56 +0000
ROA not before: Tue 01 Apr 2025 03:07:51 +0000
ROA not after: Mon 21 Apr 2025 03:07:51 +0000
asID: 5065
IP address blocks: 154.206.33.0/24 maxlen: 24
154.206.34.0/24 maxlen: 24
154.206.35.0/24 maxlen: 24
154.206.36.0/24 maxlen: 24
154.206.37.0/24 maxlen: 24
154.206.41.0/24 maxlen: 24
154.206.42.0/24 maxlen: 24
154.206.43.0/24 maxlen: 24
154.206.44.0/24 maxlen: 24
154.206.45.0/24 maxlen: 24
154.206.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96039 (0x17727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Apr 1 03:07:51 2025 GMT
Not After : Apr 21 03:07:51 2025 GMT
Subject: CN=67eb588c-cf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cb:7e:2b:4f:d8:d5:70:59:ae:12:2a:d8:ff:
49:30:3f:5c:a7:f2:f8:69:f3:e5:33:d5:22:eb:20:
6b:ff:fd:53:88:5b:f7:b2:c0:18:17:ec:0b:ce:fd:
08:7d:2b:95:9a:dc:6c:bd:9a:dd:f6:fc:ac:c2:f8:
52:44:be:cd:9b:b5:4e:cd:61:2b:c8:15:0d:d8:2e:
41:9b:fc:c1:5e:f9:ae:51:7c:60:74:e2:0e:81:72:
6b:b4:7c:91:15:ea:7c:2c:81:a5:b7:82:9a:58:ae:
9b:f8:3b:7e:a0:d2:1d:03:1c:bc:16:39:96:83:ab:
4e:d8:7f:b4:76:3d:3a:67:5c:15:88:e1:65:97:58:
b0:bd:1b:e7:16:2b:5a:0f:4c:35:9f:c5:78:1d:d3:
93:76:21:23:6d:9f:3d:6f:9b:3f:fc:76:88:12:e4:
64:37:f7:23:8f:c4:5d:fe:7c:3e:f8:34:1a:0f:fa:
05:12:fc:aa:0b:bf:2e:ba:ec:6a:e9:46:32:4a:1d:
e9:52:07:9b:24:e0:08:8e:ee:ec:31:f6:33:31:49:
c9:a8:a9:4e:06:03:8a:cf:71:b0:bf:c5:78:6c:f9:
84:e4:6a:7d:29:ba:a5:17:ac:66:b9:09:1a:f1:4e:
40:12:7d:65:d7:18:34:17:39:97:99:66:9b:70:3f:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:23:B3:DB:B9:DD:88:3D:A6:CC:B3:6D:52:AA:F3:EF:1F:9F:60:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825D27AC0EA611F0869E6741762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.33.0-154.206.37.255
154.206.41.0-154.206.45.255
154.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:f9:df:9b:b1:cc:0b:17:79:65:15:89:ea:8b:9c:c7:8c:96:
f3:2b:ca:58:3a:08:6a:11:ed:a7:d2:96:71:5e:9d:65:d1:13:
95:83:6c:b0:b6:d0:cd:fe:24:da:c2:61:47:c5:f4:33:8b:3e:
f5:10:c6:43:8e:80:5d:63:ac:27:07:98:d5:78:9f:37:ca:f4:
6f:31:0a:ad:16:a1:d2:f9:f5:95:2f:6e:cf:2e:64:3f:24:db:
c4:ff:9b:3e:4f:34:b9:ea:29:21:32:5e:e6:a4:12:3d:48:b2:
ce:bf:36:21:19:c8:30:d5:db:99:2e:6a:32:05:b5:e8:81:22:
f8:56:f3:c5:70:6c:7e:d3:8f:ea:18:fb:e6:6b:ad:cc:e0:d4:
d0:38:99:b5:63:05:b4:68:38:f4:4c:48:fd:40:84:a7:77:59:
86:ce:a8:5d:b7:87:e3:b8:a5:38:e4:e9:39:55:97:b2:ed:7b:
be:7d:de:13:2c:17:10:2a:e5:07:63:01:b3:c8:91:6d:c3:47:
93:52:47:5d:52:e4:37:92:0f:98:95:63:2d:73:ee:da:34:5d:
d0:d2:2a:15:13:54:cc:53:a4:2c:62:f5:95:2b:d9:9e:b3:ac:
fb:da:2a:c5:ba:f3:b0:54:9e:a2:5a:0e:f0:45:e9:d7:7c:e1:
b5:eb:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:55 2025 by rpki-client