Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A35FA616B411F0A0496A0C6EB8BCC6.roa
File: 62A35FA616B411F0A0496A0C6EB8BCC6.roa (raw, json)
Hash identifier: El5zwYvNXgmtbNrLMRYVsZbuz5gYkp8W6Ve+mThEdf0=
Subject key identifier: AB:F6:0C:BD:BB:AB:6F:98:11:21:5F:93:76:30:AA:65:17:F0:4A:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A35FA616B411F0A0496A0C6EB8BCC6.roa
Signing time: Fri 11 Apr 2025 09:07:25 +0000
ROA not before: Fri 11 Apr 2025 09:07:21 +0000
ROA not after: Sat 17 May 2025 09:07:21 +0000
asID: 54801
IP address blocks: 154.81.61.0/24 maxlen: 24
154.81.140.0/24 maxlen: 24
154.81.161.0/24 maxlen: 24
154.81.164.0/24 maxlen: 24
154.81.178.0/24 maxlen: 24
154.83.128.0/24 maxlen: 24
154.83.135.0/24 maxlen: 24
154.83.137.0/24 maxlen: 24
154.83.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96485 (0x178e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 09:07:21 2025 GMT
Not After : May 17 09:07:21 2025 GMT
Subject: CN=67f8dbcd-34b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:4e:8a:a9:7c:76:0b:87:72:92:99:83:ff:
d2:b2:08:b1:65:da:73:ee:9e:65:0f:c5:4a:79:15:
20:e4:fd:6d:64:2d:a8:bb:6e:67:15:de:ca:73:73:
a7:7e:24:a0:3f:1f:61:65:6f:30:41:03:cd:c3:f9:
8e:a3:5e:fa:20:95:b1:4c:43:a7:99:43:51:01:d4:
33:be:d6:57:a4:ea:5f:f2:c2:61:77:b3:db:b9:67:
35:b8:b1:72:51:03:a0:60:bd:81:85:9f:7b:6f:b3:
a8:42:0c:27:23:87:f8:a1:f7:a7:a7:ac:68:58:e0:
57:8c:0c:e4:24:2d:33:0a:d1:cd:dd:a0:3b:d4:4b:
14:4e:65:cb:ed:90:4e:96:77:ce:9b:3e:6d:0b:26:
2c:b1:fe:45:b9:06:de:63:9f:dc:b5:9f:f2:69:63:
84:7f:58:78:3a:6d:b8:dc:e9:84:9b:de:a8:be:77:
84:64:a4:82:82:9c:a9:93:aa:bf:ca:ea:d9:fb:cb:
d5:55:79:b3:4a:68:2b:b8:a1:79:ff:d9:2d:8c:f6:
0f:cf:41:54:be:65:0b:15:94:5a:ef:92:99:6e:16:
7f:4f:a7:a7:35:e3:68:4c:8b:93:98:0f:06:a9:64:
b7:0c:15:81:07:17:d6:c5:2d:ba:0f:b8:fe:20:5b:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F6:0C:BD:BB:AB:6F:98:11:21:5F:93:76:30:AA:65:17:F0:4A:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A35FA616B411F0A0496A0C6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.61.0/24
154.81.140.0/24
154.81.161.0/24
154.81.164.0/24
154.81.178.0/24
154.83.128.0/24
154.83.135.0/24
154.83.137.0/24
154.83.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:80:90:b9:68:53:8f:cf:eb:77:ba:29:22:62:a9:a5:e7:1f:
82:fa:40:da:14:66:3d:89:37:05:ac:03:46:18:c1:a8:df:51:
43:b7:47:22:6c:ce:fd:c6:04:e5:5b:25:38:8a:3c:9b:b2:1f:
a4:3c:53:bd:b2:e1:be:ea:f8:60:32:e3:68:8d:10:40:59:a8:
33:ec:47:de:66:d4:7e:7e:1a:23:10:3d:1a:a4:46:89:e3:27:
99:d7:54:c9:ee:76:86:51:51:12:2f:2b:29:8d:72:a4:0a:80:
9b:db:4f:e6:d4:6c:14:5f:43:90:27:b2:6c:a9:c5:19:c6:cd:
16:c4:49:62:a8:54:4b:c9:de:35:af:eb:81:73:a8:93:d2:aa:
4a:1d:01:89:93:05:a3:13:98:d3:5e:7a:3d:de:c2:c9:df:9f:
be:c0:5e:ee:7b:5a:c8:aa:bc:80:cb:94:43:70:cc:d2:b4:78:
b2:c2:1d:e0:49:1e:81:66:e8:e4:45:76:4e:48:80:49:75:54:
98:5b:91:6c:77:72:a9:dc:2c:34:2f:bd:15:53:12:fd:21:3e:
b4:49:3f:75:b5:7c:ca:c7:39:9e:fe:23:1b:f9:fa:b7:ff:35:
0a:77:8d:45:d9:a2:52:8c:14:13:56:58:5c:54:0f:54:de:3e:
a8:9b:76:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:47:29 2025 by rpki-client on console.sobornost.net