Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/954C5BFA108E11F097EF664A762E951A.roa
File: 954C5BFA108E11F097EF664A762E951A.roa (raw, json)
Hash identifier: CBlIhDGh09mpffgaHKJQJwJBSCXZQpdMn6yBkhc7kOk=
Subject key identifier: 27:39:15:BA:3A:1D:2E:39:0D:37:EB:B7:31:AD:AA:C6:CE:2F:B9:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017795
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/954C5BFA108E11F097EF664A762E951A.roa
Signing time: Thu 03 Apr 2025 13:21:42 +0000
ROA not before: Thu 03 Apr 2025 13:21:38 +0000
ROA not after: Sun 03 Aug 2025 13:21:38 +0000
asID: 18229
IP address blocks: 154.210.128.0/24 maxlen: 24
154.210.129.0/24 maxlen: 24
154.210.150.0/24 maxlen: 24
154.210.151.0/24 maxlen: 24
154.210.152.0/24 maxlen: 24
154.210.153.0/24 maxlen: 24
154.210.154.0/24 maxlen: 24
154.210.155.0/24 maxlen: 24
154.210.156.0/24 maxlen: 24
154.210.159.0/24 maxlen: 24
154.210.186.0/24 maxlen: 24
154.210.187.0/24 maxlen: 24
154.210.188.0/24 maxlen: 24
154.210.189.0/24 maxlen: 24
154.210.214.0/24 maxlen: 24
154.210.217.0/24 maxlen: 24
154.210.218.0/24 maxlen: 24
154.210.219.0/24 maxlen: 24
154.210.221.0/24 maxlen: 24
154.210.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96149 (0x17795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 13:21:38 2025 GMT
Not After : Aug 3 13:21:38 2025 GMT
Subject: CN=67ee8b66-5765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:d1:52:29:b3:e5:e8:9f:77:ec:66:94:1b:
4a:e4:c1:aa:18:11:cc:de:5b:de:1c:52:65:34:03:
15:e5:90:21:a2:ed:ad:1f:59:67:ca:68:56:82:42:
3f:f7:90:a1:65:ce:5b:ed:cd:26:da:21:ca:e0:0b:
da:e1:6a:4f:b7:0f:8a:e6:7b:fa:31:e6:71:18:9e:
57:de:db:04:48:26:2f:0a:9d:bc:c2:fa:59:56:03:
76:8f:3c:89:a8:95:2f:95:14:15:aa:59:5e:72:cc:
3d:0b:f6:27:b4:a9:6c:e7:53:9e:6e:03:9f:dd:5c:
90:f4:3a:1b:b5:6f:9f:9c:ee:29:40:6e:13:98:09:
c4:2f:11:66:00:5e:96:ec:98:6b:58:74:42:8d:ff:
9e:3f:ce:3b:50:81:e8:c0:c8:2f:9b:b4:16:ec:06:
6a:c4:5a:c2:56:77:2c:77:f5:46:06:44:8c:34:18:
88:36:7f:cb:ae:ed:bc:e1:86:fd:33:c7:88:22:8c:
b2:f1:2c:c2:45:21:fb:95:66:0d:e6:d4:75:c6:07:
f1:e0:e5:10:a7:26:cb:73:ba:a5:e0:75:d5:9b:12:
26:01:21:c1:13:cb:fd:75:e9:65:7f:ba:c6:cb:68:
e5:d5:27:b3:03:34:b1:91:b5:49:65:11:d1:b6:59:
6f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:15:BA:3A:1D:2E:39:0D:37:EB:B7:31:AD:AA:C6:CE:2F:B9:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/954C5BFA108E11F097EF664A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.128.0/23
154.210.150.0-154.210.156.255
154.210.159.0/24
154.210.186.0-154.210.189.255
154.210.214.0/24
154.210.217.0-154.210.219.255
154.210.221.0/24
154.210.223.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a5:26:a7:d4:bc:fc:03:ec:68:1f:3d:18:10:47:05:ad:33:
83:63:49:00:4d:99:b1:cb:fa:a6:64:fd:ac:6c:3a:82:1a:01:
94:d4:7b:c2:40:72:bb:6a:1a:51:b0:44:b1:02:45:04:38:51:
d8:8f:9a:b0:cf:0e:3b:3e:6d:c7:5e:fd:6c:9e:28:2a:96:6f:
14:22:15:a5:3c:46:47:e9:cc:45:63:0b:11:4a:86:04:4e:88:
d4:c0:e0:77:bb:09:20:d4:48:44:29:0f:04:3e:cd:d7:f8:8d:
9c:98:e5:35:03:ee:23:76:22:2d:c0:bc:53:b1:6e:2f:62:6a:
fa:8c:03:36:31:10:af:d5:3e:75:b3:a0:8f:f5:83:aa:26:d7:
40:f8:60:d7:36:e7:42:48:6e:07:51:05:a7:ee:f5:41:bf:9e:
6c:6f:5e:2c:38:5b:30:22:96:2e:06:7f:ee:ad:97:de:66:94:
7c:56:02:bd:12:ba:ec:04:17:32:31:2e:03:01:9f:e7:66:94:
b9:3d:70:ad:f0:17:78:5d:91:85:ce:ff:f4:bb:4c:b5:82:91:
98:e9:ca:9e:f5:7c:4b:61:73:f6:bd:54:36:15:24:00:05:ab:
6a:c7:f9:bb:9f:53:fe:3a:0d:e6:70:a4:18:6c:06:28:d6:53:
ae:09:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:09:32 2025 by rpki-client