Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6271641E0FA311F08EA707BC762E951A.roa
File: 6271641E0FA311F08EA707BC762E951A.roa (raw, json)
Hash identifier: hWzykgBbdeaSxkNA5CKsWl9UuukA3vB3k0MInn0mdrg=
Subject key identifier: 0E:FD:47:4D:D3:3D:59:A2:68:2C:9F:9D:97:32:45:F5:1A:E0:23:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017746
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6271641E0FA311F08EA707BC762E951A.roa
Signing time: Wed 02 Apr 2025 09:18:05 +0000
ROA not before: Wed 02 Apr 2025 09:18:01 +0000
ROA not after: Fri 09 May 2025 09:18:01 +0000
asID: 54801
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.214.32.0/19 maxlen: 24
154.215.0.0/24 maxlen: 24
154.216.128.0/18 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96070 (0x17746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 09:18:01 2025 GMT
Not After : May 9 09:18:01 2025 GMT
Subject: CN=67ed00cd-df2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:98:00:92:87:38:48:9b:53:82:29:e9:4e:
e3:f9:ab:1d:5a:37:91:78:3a:52:f5:ff:f5:89:f4:
4a:6f:fa:d7:d5:25:b6:1f:98:b9:c6:a2:1b:3d:84:
03:5d:1e:8a:1e:ee:ce:d9:9e:43:2d:be:23:42:55:
82:a0:89:fb:da:68:a8:0a:20:11:ce:8e:a9:5d:6a:
9f:5f:41:86:3c:ad:6b:b3:3f:52:72:83:82:08:ef:
f6:89:66:94:69:9e:f4:4b:06:fb:60:67:fd:61:d6:
00:e8:31:e9:ce:3a:39:99:9a:7f:26:de:c4:c7:8f:
34:38:4b:d6:64:54:e9:66:8d:76:79:32:70:31:6a:
9d:81:63:29:f2:bc:f0:52:91:c9:69:0a:9d:0f:71:
85:d0:8e:6f:20:f7:90:7b:f3:45:87:80:db:6a:6e:
ec:01:61:54:40:30:6e:d0:c6:11:67:a9:e4:f7:30:
7e:3c:1b:7b:f3:4e:98:4b:95:be:97:3e:4c:06:72:
09:dd:a1:0f:ed:24:cd:34:75:17:bd:f9:0b:3d:7b:
c3:6e:98:16:6f:6d:2e:63:c4:26:6a:70:89:24:90:
82:e3:53:3d:68:78:81:b8:80:33:3f:e4:b3:5a:25:
94:b7:c4:d6:8c:ad:15:c7:12:d5:e7:9f:0a:06:6c:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FD:47:4D:D3:3D:59:A2:68:2C:9F:9D:97:32:45:F5:1A:E0:23:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6271641E0FA311F08EA707BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.214.32.0/19
154.215.0.0/24
154.216.128.0/18
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
59:24:48:01:8e:4a:86:d2:07:1d:f6:6b:82:3c:5b:82:bf:27:
af:87:1b:14:f4:24:94:45:b9:90:93:b7:d2:44:26:45:88:65:
c9:6d:46:23:bb:68:51:3a:c3:b3:b5:8b:fa:59:42:10:c9:89:
e1:e0:ba:12:32:e2:ab:81:06:d1:2c:ac:1b:4f:05:e9:f1:ac:
27:6f:20:10:49:cf:bd:72:a0:2a:71:73:c8:6b:cd:ac:f9:7c:
35:07:ec:f4:64:0d:ec:52:fe:d9:3a:7a:0c:8f:47:8d:09:42:
04:4c:01:e5:c8:ba:41:ba:cf:c8:2c:47:cb:02:4d:14:73:a1:
64:21:7f:7f:87:9c:97:a5:d4:1e:e1:fe:10:99:44:0c:13:e2:
71:72:4c:90:f3:1d:14:79:6d:6e:ba:2f:6c:f5:06:2b:68:35:
ba:9b:9c:e0:aa:51:22:b9:78:a0:b7:22:a4:41:7d:e4:cb:cc:
7b:c6:77:05:2a:f9:6d:98:fa:16:5d:23:b6:58:e1:fb:1d:b2:
43:14:3f:dd:48:5b:12:fb:db:2c:7f:6b:11:ea:5d:8e:25:06:
0c:34:95:3f:75:d4:b8:14:4b:a9:9b:51:f9:60:29:5a:c7:6a:
a9:2a:49:e7:1c:f3:6c:56:67:f2:a7:39:2c:c2:61:d8:85:f4:
4a:e1:6e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:42 2025 by rpki-client on console.sobornost.net