Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/306722641C8D11F087B756F1DAE4EC9C.roa
File: 306722641C8D11F087B756F1DAE4EC9C.roa (raw, json)
Hash identifier: 4sNaDMWv9IEMNvn2VHRbiK8lRdR/LwEiBXxLMCOIZco=
Subject key identifier: 6E:51:10:D7:18:1B:08:34:7E:FF:F9:AD:76:62:DA:1C:E8:E7:32:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/306722641C8D11F087B756F1DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 19:41:58 +0000
ROA not before: Fri 18 Apr 2025 19:41:53 +0000
ROA not after: Fri 30 May 2025 19:41:53 +0000
asID: 62240
IP address blocks: 154.195.139.0/24 maxlen: 24
154.195.143.0/24 maxlen: 24
154.195.144.0/24 maxlen: 24
154.195.145.0/24 maxlen: 24
154.195.146.0/24 maxlen: 24
154.195.147.0/24 maxlen: 24
154.195.148.0/24 maxlen: 24
154.195.149.0/24 maxlen: 24
154.195.150.0/24 maxlen: 24
154.195.151.0/24 maxlen: 24
154.195.171.0/24 maxlen: 24
154.195.172.0/24 maxlen: 24
154.195.173.0/24 maxlen: 24
154.195.174.0/24 maxlen: 24
154.195.175.0/24 maxlen: 24
154.195.176.0/24 maxlen: 24
154.195.177.0/24 maxlen: 24
154.195.178.0/24 maxlen: 24
154.195.179.0/24 maxlen: 24
154.195.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96722 (0x179d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 19:41:53 2025 GMT
Not After : May 30 19:41:53 2025 GMT
Subject: CN=6802ab06-bcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:1d:ff:a4:e1:90:27:f0:5b:a5:8e:11:34:
29:0b:db:c0:56:41:aa:28:99:24:36:c8:2d:72:42:
7b:67:6e:57:64:0c:1b:d3:49:d0:eb:18:50:4d:a1:
bd:83:58:6c:88:bd:e7:48:58:4c:45:a2:32:9c:c7:
43:c6:e8:b3:e6:d0:95:04:c2:68:e5:49:f0:b2:7d:
d8:9b:ab:d7:44:ba:f5:c8:24:bd:9f:35:88:13:66:
3d:45:f3:cd:0b:ff:a9:06:6d:c0:20:75:ec:45:97:
45:62:8c:93:10:e4:51:a8:b0:4a:44:01:bf:5a:20:
bf:f1:a2:f4:74:f7:eb:fd:be:ff:0c:77:06:d4:bb:
24:1c:1c:2b:33:23:cb:a9:64:45:96:fc:12:2c:52:
3a:e1:16:6a:a3:46:e4:6a:38:c4:85:a9:e1:ae:f7:
aa:17:72:2c:66:6d:34:7d:fa:3b:c6:73:dc:d8:da:
08:5f:3f:b7:17:98:dc:0f:8b:67:fa:0b:7f:53:1c:
b7:09:37:3b:85:a4:2f:30:5f:30:41:58:cb:1f:99:
7b:5a:1f:21:e8:52:26:5f:e3:07:b0:36:1a:2d:f9:
9d:e6:5d:66:67:56:bc:77:8b:44:c2:ca:ac:05:80:
3a:c5:ef:87:78:dc:98:1e:14:2e:f9:d6:ab:28:9d:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:51:10:D7:18:1B:08:34:7E:FF:F9:AD:76:62:DA:1C:E8:E7:32:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/306722641C8D11F087B756F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.139.0/24
154.195.143.0-154.195.151.255
154.195.171.0-154.195.180.255
Signature Algorithm: sha256WithRSAEncryption
ae:04:3f:fd:42:4f:8f:b6:44:c2:ac:82:a4:5d:5c:b7:5b:43:
a3:80:e9:13:fa:22:67:78:4d:d2:f9:9f:7f:68:04:58:47:de:
55:32:3d:7a:dc:f2:c8:89:fc:da:27:7a:c7:47:06:b8:69:5a:
c7:e7:2b:27:2f:24:b0:8b:d1:b8:26:8b:bc:33:57:23:18:29:
a7:f5:02:a2:6e:8e:eb:bf:10:00:ef:ee:48:39:7f:cf:ee:8e:
45:7d:21:bf:01:34:60:e7:c5:55:71:4f:78:79:30:10:a4:47:
0d:fe:e2:9e:0c:7c:34:11:94:c2:86:b8:11:86:1a:6b:44:0a:
24:f0:33:7f:76:53:1f:38:09:cf:18:2c:80:68:cf:ae:1d:aa:
41:c0:45:7b:44:13:40:f5:d1:23:a8:44:08:ec:69:a0:eb:1a:
5c:82:c8:90:a0:a7:85:23:b2:ee:97:87:de:56:e4:3b:ff:0b:
b0:34:56:3c:b2:ae:ff:a1:66:48:1a:18:5f:31:42:b4:7f:1e:
05:0d:6e:16:b7:01:c0:ea:bc:51:15:60:53:03:86:b7:c9:6e:
39:1b:f8:85:e2:5f:3e:62:f9:0c:89:2c:e9:38:2b:42:a2:0a:
d6:a8:99:53:b5:ee:0b:36:95:f1:ec:fd:e8:d4:ff:1c:16:77:
ba:11:49:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:21 2025 by rpki-client on console.sobornost.net