Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCBB037A041211F08AD3B08B762E951A.roa
File: DCBB037A041211F08AD3B08B762E951A.roa (raw, json)
Hash identifier: MWhaxXj8y2hIQuhTxllCOWhQmPJqYKAGwW5rPwvIcPU=
Subject key identifier: 8F:1E:12:44:16:F5:8E:30:72:43:88:27:4C:7C:FE:CC:6A:E8:D9:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCBB037A041211F08AD3B08B762E951A.roa
Signing time: Tue 18 Mar 2025 16:05:51 +0000
ROA not before: Tue 18 Mar 2025 16:05:47 +0000
ROA not after: Thu 01 May 2025 16:05:47 +0000
asID: 44559
IP address blocks: 154.81.52.0/24 maxlen: 24
154.81.53.0/24 maxlen: 24
154.81.192.0/24 maxlen: 24
154.81.193.0/24 maxlen: 24
154.81.194.0/24 maxlen: 24
154.81.195.0/24 maxlen: 24
154.81.196.0/24 maxlen: 24
154.81.197.0/24 maxlen: 24
154.81.198.0/24 maxlen: 24
154.81.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95426 (0x174c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 16:05:47 2025 GMT
Not After : May 1 16:05:47 2025 GMT
Subject: CN=67d999df-0ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:f1:c0:24:7f:d7:cf:e6:fe:9d:f1:94:62:
e4:9e:07:d2:d9:32:7b:37:b3:18:2e:2c:3b:be:6e:
ce:79:d0:c1:4c:0c:3c:2d:cf:63:f8:c8:81:23:20:
47:ec:6a:dd:02:d6:c9:bb:f4:06:0e:ce:f4:96:4c:
15:23:97:1f:72:19:9c:70:d3:eb:3d:b8:2e:f1:e1:
df:f7:a1:e5:72:20:3b:ad:bb:91:a1:32:77:80:3c:
f4:e7:74:48:77:11:79:d2:b7:4f:0b:27:de:74:92:
e0:01:a7:64:3b:7e:b6:cc:2d:f0:7a:b7:8f:49:a2:
7a:73:26:bd:74:20:e5:65:e1:8c:a0:7d:ee:fe:7c:
0e:1f:70:60:1c:4f:fc:41:1e:37:fe:31:84:02:4a:
10:b2:8a:56:1b:fe:22:4c:1c:02:71:a6:e4:c9:1b:
39:3d:c9:43:2c:82:7e:7a:c9:24:c2:45:0b:8e:e6:
6f:8e:85:b7:5c:56:9f:2a:cc:89:f5:b8:79:d5:d2:
4e:a0:be:10:d6:c9:a5:87:6a:02:b9:53:cc:3a:fe:
cd:a8:d4:38:c1:b0:6e:36:25:ca:b4:54:06:8e:32:
d2:99:30:36:c4:90:77:06:52:9e:a1:90:fc:d6:48:
21:ef:37:cb:fd:20:08:46:af:e4:8e:09:d1:a9:c5:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:12:44:16:F5:8E:30:72:43:88:27:4C:7C:FE:CC:6A:E8:D9:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCBB037A041211F08AD3B08B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.52.0/23
154.81.192.0/21
Signature Algorithm: sha256WithRSAEncryption
19:9a:7c:ac:d1:49:8e:30:c2:06:b1:b7:44:68:19:d9:31:ac:
7c:05:a8:56:8c:ca:08:60:0e:a6:c4:ec:48:12:ba:c8:50:06:
30:d8:0b:2a:4b:25:86:ab:b5:28:0a:a1:c6:0c:37:92:96:b2:
05:2a:63:4c:f1:02:eb:70:f2:56:5a:8f:c4:05:b2:85:3d:ca:
80:7f:cc:1e:aa:7b:dd:75:d7:da:81:1d:9f:da:d6:4d:34:bf:
b6:f6:88:45:ad:03:4b:37:dd:e1:fe:ea:3e:55:df:b3:99:26:
90:e1:ef:c6:30:66:1d:50:a7:61:ce:3c:20:68:ab:5f:71:f7:
36:b3:13:c5:76:8b:57:47:09:c1:a0:a3:c7:54:1e:ef:af:55:
30:a4:80:fa:eb:12:f2:7a:d4:e0:98:ea:cf:9d:83:95:2e:26:
6e:6f:5b:e9:12:69:ee:4f:71:07:60:68:4c:04:52:28:7d:84:
ed:40:a6:72:aa:34:75:e9:69:4f:40:62:95:7c:59:c2:c2:aa:
ae:33:f8:03:ac:cd:cb:41:ad:bd:e7:9b:60:65:c7:00:d8:39:
5f:82:8f:f8:29:12:fe:d1:cf:de:04:e1:ce:ca:d6:d7:32:36:
ff:eb:2e:24:4b:93:d4:08:0d:87:c2:54:80:7b:bc:38:2d:d3:
d7:b5:f1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:51 2025 by rpki-client