Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEB24E38245511F0B9D5B887DAE4EC9C.roa
File: CEB24E38245511F0B9D5B887DAE4EC9C.roa (raw, json)
Hash identifier: 206o0kfBybVXMc0I2KqlcLuNrGVlMXhFTRdqo3IxLzw=
Subject key identifier: AA:CA:70:D5:A5:DE:29:EC:54:DB:FC:04:8D:98:6B:3F:AE:1F:C1:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEB24E38245511F0B9D5B887DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 17:25:41 +0000
ROA not before: Mon 28 Apr 2025 17:25:36 +0000
ROA not after: Wed 04 Jun 2025 17:25:36 +0000
asID: 202656
IP address blocks: 154.219.1.0/24 maxlen: 24
154.219.4.0/24 maxlen: 24
154.219.29.0/24 maxlen: 24
154.219.30.0/24 maxlen: 24
154.219.31.0/24 maxlen: 24
154.222.43.0/24 maxlen: 24
154.222.44.0/24 maxlen: 24
154.222.45.0/24 maxlen: 24
154.222.46.0/24 maxlen: 24
154.222.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97341 (0x17c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 17:25:36 2025 GMT
Not After : Jun 4 17:25:36 2025 GMT
Subject: CN=680fba15-13cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:0b:0f:64:e0:9b:94:80:3f:41:3e:0c:39:
ac:31:28:b5:b7:ee:c7:8e:25:d3:2e:f3:84:c5:14:
ae:e9:fe:ec:79:f6:4f:b9:a0:d8:7c:45:51:3c:ad:
1c:82:66:6f:49:c4:18:fb:39:db:80:e3:2a:1b:76:
f5:58:86:ad:5d:7b:62:7d:cf:54:71:9c:4d:06:5b:
e2:f3:72:2d:cf:23:46:90:e1:a7:63:0f:02:c9:17:
17:da:63:41:c9:d5:d5:2d:b9:7c:a8:c8:e2:58:f9:
8b:38:86:6e:cc:97:e3:e5:e7:9a:d1:13:d4:bc:cc:
cc:eb:53:7e:bc:12:97:9e:37:05:04:49:2d:aa:72:
96:d3:b7:f6:1e:0f:f7:9a:52:f0:a3:3f:a8:87:65:
f2:86:2a:e1:14:f8:76:c2:4d:ab:46:a1:8a:7c:1e:
e8:f4:6b:f8:55:f9:6c:97:a3:25:97:88:47:9f:97:
94:08:a9:87:95:79:a9:29:33:72:f9:35:a1:8e:e7:
ba:a4:7d:f1:5f:c3:a1:39:2d:df:1e:60:eb:ea:b4:
74:70:b1:2c:c9:8b:98:fb:c4:3b:7c:06:ef:cd:97:
27:3d:f6:4c:0d:6a:47:a6:34:d9:60:1b:69:36:68:
10:64:bd:4c:aa:bf:05:ff:b9:e8:5e:0b:48:63:5c:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CA:70:D5:A5:DE:29:EC:54:DB:FC:04:8D:98:6B:3F:AE:1F:C1:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEB24E38245511F0B9D5B887DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.1.0/24
154.219.4.0/24
154.219.29.0-154.219.31.255
154.222.43.0-154.222.47.255
Signature Algorithm: sha256WithRSAEncryption
93:0c:17:fc:4c:44:04:24:2d:5d:58:e9:ec:29:c9:c4:02:7d:
06:95:4b:d7:93:c6:3c:ac:b4:68:f1:eb:61:2b:2a:8f:71:4b:
7f:e3:12:f9:f6:26:70:18:60:c9:41:2e:92:72:cf:6b:4a:2f:
7f:6d:d9:c7:ad:78:61:67:94:b4:7d:4d:4d:fa:2c:84:f8:55:
7c:8c:28:1d:a1:c0:25:62:bd:71:60:f6:a3:29:13:f0:47:9e:
72:c5:37:c5:d3:4a:23:f2:72:95:76:70:e2:ce:f1:d2:c3:be:
56:44:03:cc:4c:a4:ce:d0:fb:ce:80:71:1e:46:96:80:99:73:
89:f4:96:9b:a7:b6:23:4e:7d:16:8a:14:09:c5:ab:5b:55:11:
92:9a:37:70:3f:51:75:25:9b:64:76:04:57:bd:09:ed:83:ce:
63:d2:a8:4b:c0:cf:4d:a3:e6:02:33:91:55:c6:b4:2b:73:ef:
01:39:46:54:54:39:a3:cf:8f:2e:68:8f:4c:ae:3d:6f:11:9a:
c9:e9:38:e8:d4:0f:ca:52:35:2f:5a:2a:7a:e8:33:7c:c2:2b:
7b:c0:9b:2a:52:04:f0:38:0e:b0:4e:07:f1:26:09:45:df:d3:
38:02:fe:c1:e7:b8:78:2a:6a:bc:c5:78:7a:53:87:d8:58:b6:
d1:89:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:57:34 2025 by rpki-client on console.sobornost.net