Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62065004114511F087E66A9F762E951A.roa
File: 62065004114511F087E66A9F762E951A.roa (raw, json)
Hash identifier: hmMTFU+bWVbvUIhp6puYEMt/Pw+PVmJwn7gr3wKeqCY=
Subject key identifier: 21:53:0D:40:55:D7:AE:2C:6E:F2:A8:B0:59:12:BD:75:8B:67:9A:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62065004114511F087E66A9F762E951A.roa
Signing time: Fri 04 Apr 2025 11:10:14 +0000
ROA not before: Fri 04 Apr 2025 11:10:10 +0000
ROA not after: Thu 08 May 2025 11:10:10 +0000
asID: 44559
IP address blocks: 154.219.64.0/24 maxlen: 24
154.219.65.0/24 maxlen: 24
154.219.66.0/24 maxlen: 24
154.219.67.0/24 maxlen: 24
154.219.68.0/24 maxlen: 24
154.219.69.0/24 maxlen: 24
154.219.70.0/24 maxlen: 24
154.219.71.0/24 maxlen: 24
154.219.72.0/24 maxlen: 24
154.219.73.0/24 maxlen: 24
154.219.74.0/24 maxlen: 24
154.219.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96192 (0x177c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 11:10:10 2025 GMT
Not After : May 8 11:10:10 2025 GMT
Subject: CN=67efbe16-1329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:55:c3:75:21:50:0e:2b:ab:d8:d6:c8:33:
35:f4:f5:fd:28:db:f7:e9:78:eb:c0:a0:e5:89:43:
96:77:60:6a:42:9b:9c:41:9a:42:ed:4c:06:06:dc:
91:25:54:fd:35:d1:72:5c:c9:29:74:1d:78:2b:93:
a5:6e:1a:8d:8e:c8:f6:51:c5:f9:8d:b6:ce:a3:27:
a3:91:64:5e:e8:04:48:dd:53:4d:63:3f:56:cd:86:
a3:26:5e:3a:dc:7e:1c:7a:bf:4f:41:fd:1f:2c:38:
6f:b7:ba:64:fb:a8:96:aa:ab:4c:93:20:03:12:6e:
fc:a0:33:95:16:22:96:b0:08:a6:40:44:23:ae:6b:
be:4b:ac:8c:20:29:e4:5e:8a:5c:80:e7:b5:9c:da:
88:39:25:55:ef:94:b1:b7:1c:8f:b1:a1:d6:f2:da:
2b:f2:84:ea:8d:b3:c5:9d:4a:2f:c8:aa:30:fc:fb:
12:12:b7:82:6a:ed:c6:48:35:70:06:90:fe:3e:21:
69:50:88:a3:1f:bb:b1:62:15:2c:9c:41:44:85:37:
9a:b4:2a:d6:5e:9a:10:fc:71:4b:b9:8b:9f:62:10:
d1:ef:7a:59:2a:bc:f9:96:79:af:10:ad:fe:d0:3d:
79:d3:fa:68:97:48:59:0c:ef:6e:4a:13:2e:ea:87:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:53:0D:40:55:D7:AE:2C:6E:F2:A8:B0:59:12:BD:75:8B:67:9A:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62065004114511F087E66A9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.64.0-154.219.75.255
Signature Algorithm: sha256WithRSAEncryption
c7:55:29:b0:73:55:82:e1:80:49:0e:00:7b:77:4d:c2:42:c4:
85:d1:4c:fd:98:ae:45:1b:8a:42:cf:42:19:9c:4f:71:10:e6:
5e:b3:2d:51:32:96:ca:40:df:ea:61:ec:ee:3d:36:2b:d1:76:
be:3a:5c:08:84:9a:cc:1b:02:96:ce:fe:67:9b:bf:f4:04:61:
e5:25:73:dd:96:1a:65:d2:49:5e:b2:ed:55:0e:f6:93:2f:95:
8c:d1:78:25:5e:fc:65:76:d3:58:fd:71:a3:78:0f:6d:e9:e2:
b4:21:e6:d5:16:c2:f9:b5:68:cc:08:30:d0:67:66:c7:47:77:
16:07:3e:b3:69:ed:22:52:c3:56:d4:26:06:40:de:b0:0a:f1:
c5:31:d0:6d:0c:0a:f0:6c:d6:07:38:d5:58:e0:51:a3:11:bc:
33:73:1a:60:91:1a:31:33:a0:e1:e0:c6:7f:5a:9e:f6:e3:85:
7c:ba:20:4b:5a:b8:9e:e1:2a:ff:71:11:58:ba:9d:c2:9e:83:
64:3c:0a:79:2c:e1:57:bc:cb:2f:e3:fc:8b:17:90:6e:a4:6a:
3e:ef:04:e3:40:bb:95:d9:e7:e3:f7:85:34:b6:cf:93:33:ca:
31:a2:2d:70:2e:cf:1b:ed:09:40:3e:37:94:a9:d4:07:2e:00:
21:d8:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:39:19 2025 by rpki-client on console.sobornost.net