Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAA28B9604CA11F085B6AE89762E951A.roa
File: CAA28B9604CA11F085B6AE89762E951A.roa (raw, json)
Hash identifier: uyM0QtF1FV+OYdEvOLxchu2btcR+HHxZEGn04tUZM1E=
Subject key identifier: 0A:B1:08:DE:CD:02:D8:B3:13:52:72:3C:B0:38:D7:E1:19:28:45:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017528
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAA28B9604CA11F085B6AE89762E951A.roa
Signing time: Wed 19 Mar 2025 14:02:28 +0000
ROA not before: Wed 19 Mar 2025 14:02:24 +0000
ROA not after: Wed 30 Apr 2025 14:02:24 +0000
asID: 62240
IP address blocks: 154.194.75.0/24 maxlen: 24
154.194.76.0/24 maxlen: 24
154.194.77.0/24 maxlen: 24
154.194.78.0/24 maxlen: 24
154.194.94.0/24 maxlen: 24
154.194.95.0/24 maxlen: 24
154.194.96.0/24 maxlen: 24
154.194.97.0/24 maxlen: 24
154.194.103.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
154.196.62.0/24 maxlen: 24
154.196.64.0/24 maxlen: 24
154.196.65.0/24 maxlen: 24
154.196.66.0/24 maxlen: 24
154.196.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95528 (0x17528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 14:02:24 2025 GMT
Not After : Apr 30 14:02:24 2025 GMT
Subject: CN=67dace74-c172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:d6:31:d2:d6:6b:f9:5e:91:af:9c:cd:67:
19:09:d5:ac:97:03:5c:63:0e:2c:13:0e:04:f5:01:
ba:1c:bc:33:3c:35:b4:4c:ad:9a:3d:64:0e:34:52:
47:35:f4:d9:d2:76:66:a3:05:05:c2:28:7a:e8:b0:
cb:cd:3d:d9:65:2d:20:3a:bd:33:ed:19:fc:fc:9d:
b6:aa:ce:7c:b1:f4:fd:09:70:97:5d:c5:d3:45:8e:
c7:5d:43:32:67:9c:5a:2a:07:9b:07:b4:10:f6:97:
8a:68:c3:40:0a:8d:78:2c:e6:aa:41:b0:4a:cd:04:
16:cf:f3:2a:50:bf:db:25:c9:1b:a9:71:78:a8:52:
12:eb:be:8c:f7:94:ee:5a:59:4c:ca:1b:fe:38:fa:
c9:48:8a:2d:8e:37:61:61:1d:27:f3:56:28:67:f8:
a6:ed:51:e8:7b:17:32:60:f2:10:21:5d:10:bd:a6:
9f:55:d3:c2:fe:39:38:9f:0f:44:a9:af:dd:c1:c7:
85:bf:f1:d7:d7:6c:d5:a5:69:51:45:c9:1b:99:e6:
d5:eb:2d:6a:a3:17:fb:d6:9c:7e:ac:e9:33:da:98:
d5:40:7f:c7:6b:12:95:29:45:de:2d:02:40:5f:04:
38:b4:01:fa:94:1d:25:89:14:1c:6a:b1:2b:14:f9:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B1:08:DE:CD:02:D8:B3:13:52:72:3C:B0:38:D7:E1:19:28:45:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAA28B9604CA11F085B6AE89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.75.0-154.194.78.255
154.194.94.0-154.194.97.255
154.194.103.0/24
154.196.56.0-154.196.62.255
154.196.64.0-154.196.66.255
154.196.69.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:f4:7f:3a:d2:80:e5:f1:26:eb:06:72:03:3c:e7:99:be:1a:
74:7b:f0:7e:5a:4c:1d:bb:95:91:f2:43:54:cc:4a:6f:af:ac:
ff:66:53:42:89:d0:e3:c1:75:80:b9:66:da:cd:e0:cb:aa:fa:
6f:3e:fb:76:ee:61:25:d5:aa:78:1c:fc:18:1e:94:ca:11:6a:
41:2e:ff:20:7e:26:02:43:89:99:43:21:da:38:50:c5:44:e4:
7f:60:d9:ad:2d:9d:14:9e:63:4c:ab:b7:98:38:52:8a:36:38:
d6:ff:a4:98:5a:a1:66:f2:ca:2b:e8:a2:56:1e:90:31:40:f1:
d5:b3:b3:56:66:2e:6f:a7:98:02:fe:cd:b6:c5:63:3c:c0:f5:
4f:70:89:71:6e:06:f2:e0:90:56:f9:e3:88:c6:7e:a9:0a:e6:
1d:e8:e7:b0:ca:57:a7:c6:8e:0b:84:92:ed:a2:e3:8e:fc:22:
78:14:ce:f1:33:6b:ff:c8:41:00:3d:c7:d4:c1:d3:ad:32:0f:
88:38:14:e7:eb:0a:d3:4b:85:3a:db:2a:8b:ca:db:40:b5:0b:
5e:4c:11:42:c4:7a:ac:38:eb:6e:d6:0e:4c:50:23:70:55:b5:
d6:5c:2f:45:0e:7f:87:36:b0:97:b0:23:48:f8:b9:4a:60:58:
63:b6:e2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:29:43 2025 by rpki-client