Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42C1E9C11FE11F0A8DF3D83762E951A.roa
File: E42C1E9C11FE11F0A8DF3D83762E951A.roa (raw, json)
Hash identifier: r1Fin2ot2Sw0ugqHPaXX8zmRPeVuM/1t2acLc5405C8=
Subject key identifier: E3:4F:6A:6C:42:B7:E7:FF:4E:CA:50:53:97:FC:68:A4:FC:37:E0:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42C1E9C11FE11F0A8DF3D83762E951A.roa
Signing time: Sat 05 Apr 2025 09:18:10 +0000
ROA not before: Sat 05 Apr 2025 09:18:05 +0000
ROA not after: Sat 11 Oct 2025 09:18:05 +0000
asID: 267834
IP address blocks: 154.198.56.0/24 maxlen: 24
154.198.57.0/24 maxlen: 24
154.198.58.0/24 maxlen: 24
154.198.59.0/24 maxlen: 24
154.198.60.0/24 maxlen: 24
154.198.61.0/24 maxlen: 24
154.198.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96226 (0x177e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 09:18:05 2025 GMT
Not After : Oct 11 09:18:05 2025 GMT
Subject: CN=67f0f551-9116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:42:ae:8b:f1:09:7e:7a:ea:e6:ef:de:ee:
48:fe:2d:a8:58:fa:d8:61:1a:55:ac:89:3b:24:6c:
83:82:0e:df:a8:35:16:a6:18:92:94:7b:86:db:a2:
68:a2:bb:7c:d6:14:6e:96:1a:24:1c:c5:d0:a8:95:
7d:24:f8:69:c7:20:61:15:d2:23:79:b7:d6:df:b9:
46:70:7e:3a:bf:92:83:fb:9e:9b:3d:18:2e:ae:8d:
0d:20:a3:ed:62:f7:ab:2d:e9:00:00:a8:f0:ec:4f:
09:ff:6b:81:6b:12:b9:e0:98:a8:e2:3c:6a:1d:fd:
06:18:bd:33:ac:33:d6:04:5b:ca:7c:e1:0b:5d:75:
71:bb:c2:8b:aa:9d:6f:4e:a0:63:00:44:c7:ec:94:
43:b3:e8:df:03:d5:09:4d:9a:b9:83:ed:6e:64:fe:
2a:0a:a5:74:78:67:99:e6:37:e9:e6:06:f4:ef:22:
20:ef:db:e6:a5:e0:4f:18:21:8b:6a:61:d4:d3:f9:
d4:7d:17:bf:50:62:ad:dd:19:0b:5e:9c:ce:0a:29:
ab:99:3c:73:af:0c:c4:aa:e8:69:1a:0e:c3:33:63:
6c:39:a8:30:c7:d3:65:e7:21:cb:e4:03:8b:95:f4:
03:8e:e8:d0:e3:1e:25:8d:7e:8b:4f:8f:52:4b:5b:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:6A:6C:42:B7:E7:FF:4E:CA:50:53:97:FC:68:A4:FC:37:E0:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42C1E9C11FE11F0A8DF3D83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.56.0-154.198.62.255
Signature Algorithm: sha256WithRSAEncryption
45:13:62:01:10:f3:5c:0d:4c:2b:48:cd:e1:58:47:ce:32:d1:
fb:70:8a:35:06:85:4c:3c:9e:7a:69:9f:41:bd:22:23:84:66:
bb:39:e6:70:7c:1f:e7:7c:e9:93:c3:f8:3b:39:1a:a9:1a:1d:
a6:cd:4f:46:22:9c:97:b2:44:7f:42:d5:23:89:92:b4:5f:7f:
9a:5e:67:f6:ac:9a:6e:4a:20:86:5d:0d:cc:fd:a6:ba:df:df:
fd:db:42:e7:12:8a:d1:56:03:64:16:1f:25:df:ca:ed:2c:19:
e7:88:74:dd:1a:87:a6:83:c7:c9:19:e9:c2:0d:e7:83:15:28:
12:98:2d:8d:d4:cb:db:4a:7b:4e:2d:05:42:e7:1f:09:7f:6b:
d4:8c:9c:ac:78:69:e6:3a:ef:5f:85:fb:65:b5:5a:ab:ab:61:
7c:59:c6:4f:60:dd:0e:87:f8:b8:27:15:fd:14:ab:0d:1d:a7:
9c:85:e0:d6:d8:52:34:f3:fd:4d:9e:df:9d:2d:f7:d9:74:c8:
51:71:fe:e0:05:de:aa:b1:2e:6d:b4:51:1a:3c:65:2e:f2:9b:
ac:ab:5d:fc:88:19:8c:7c:bf:97:63:98:07:2c:90:14:c6:04:
76:d1:7b:f0:29:b5:03:5e:17:b4:b8:70:7d:eb:0a:2d:82:1d:
a3:c7:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:10:39 2025 by rpki-client on console.sobornost.net