Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AB2854E11F911F08462C866762E951A.roa
File: 9AB2854E11F911F08462C866762E951A.roa (raw, json)
Hash identifier: R0jJ0P1YaaNry6t3AGdd5DtGH6xd0uq/zpn37POEUaM=
Subject key identifier: 0B:53:B5:24:55:B3:43:41:0C:23:C2:A3:40:59:24:5E:AD:EE:8C:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AB2854E11F911F08462C866762E951A.roa
Signing time: Sat 05 Apr 2025 08:40:19 +0000
ROA not before: Sat 05 Apr 2025 08:40:15 +0000
ROA not after: Sat 10 May 2025 08:40:15 +0000
asID: 203020
IP address blocks: 154.217.84.0/24 maxlen: 24
154.217.86.0/24 maxlen: 24
154.217.88.0/24 maxlen: 24
154.217.89.0/24 maxlen: 24
154.217.90.0/24 maxlen: 24
154.217.91.0/24 maxlen: 24
154.217.92.0/24 maxlen: 24
154.217.93.0/24 maxlen: 24
154.217.94.0/24 maxlen: 24
154.217.95.0/24 maxlen: 24
154.217.128.0/22 maxlen: 24
154.217.132.0/23 maxlen: 24
154.217.134.0/23 maxlen: 24
154.217.136.0/22 maxlen: 24
154.217.140.0/22 maxlen: 24
154.217.144.0/22 maxlen: 24
154.217.148.0/22 maxlen: 24
154.217.152.0/22 maxlen: 24
154.217.156.0/23 maxlen: 24
154.217.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96218 (0x177da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 08:40:15 2025 GMT
Not After : May 10 08:40:15 2025 GMT
Subject: CN=67f0ec73-bc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:90:48:77:dd:12:8b:c6:0e:25:b2:10:ed:
be:d1:51:18:5e:4b:19:8e:c9:c2:4d:1f:e2:62:d6:
f1:ea:1c:e2:89:85:70:b5:16:1b:fc:06:4a:bc:cb:
1e:89:f7:53:75:4f:08:1e:4d:a0:e4:32:67:14:70:
e2:66:6b:ed:86:5e:b9:82:66:c0:5b:90:f0:a6:b0:
1b:0d:4a:d7:56:27:72:9b:35:f4:16:b2:cf:db:9d:
74:c3:e2:c7:88:30:65:b7:1c:ce:ee:0b:16:a0:90:
4f:eb:e9:02:21:53:6a:c5:3b:eb:be:27:47:49:09:
31:57:c5:0d:74:62:19:49:1b:8f:c8:09:6a:1c:c1:
da:65:49:e3:d8:bf:b6:79:33:a4:3b:e1:39:88:2d:
81:8e:69:45:79:23:16:e0:24:9b:cf:be:eb:e0:e5:
a9:19:1f:b5:c3:f4:39:b2:af:15:8d:90:83:91:ca:
b5:e7:d5:2c:cc:41:c3:71:b0:13:75:ea:02:ee:45:
9d:8c:48:1f:a0:7b:3e:aa:c3:54:8a:83:22:f7:3d:
8d:14:29:35:ff:b1:f9:b2:71:1e:fb:b2:62:64:ed:
18:02:b3:6d:46:92:ad:4e:e1:7b:2f:85:ad:2d:af:
b2:ac:d3:5e:bc:08:6e:51:0c:c8:e4:bd:d7:ba:24:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:53:B5:24:55:B3:43:41:0C:23:C2:A3:40:59:24:5E:AD:EE:8C:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AB2854E11F911F08462C866762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.84.0/24
154.217.86.0/24
154.217.88.0/21
154.217.128.0/19
Signature Algorithm: sha256WithRSAEncryption
01:11:f5:18:03:d9:18:7a:fb:fd:e6:c6:6e:cb:87:68:a8:47:
77:4b:b1:f0:a6:91:ac:60:86:35:b4:a2:c3:14:0a:02:16:51:
fd:9a:c4:aa:71:c2:a2:52:e2:7c:40:8d:9c:69:58:65:d7:e1:
e2:34:72:7f:c1:75:e2:cf:da:5b:ee:5c:b8:f7:93:22:95:95:
8a:ba:ce:3f:2a:fc:0d:f6:e2:75:dc:85:a3:f7:2b:f5:14:f7:
23:6b:1a:ef:cb:5e:13:e0:14:92:bb:64:11:fb:d7:d0:59:d8:
88:f1:98:ee:b1:8b:7a:3d:9f:e5:04:e8:db:fd:9e:85:e4:28:
9c:84:d2:de:e9:d1:75:8d:45:48:27:12:a4:3c:0f:f0:21:b2:
b8:a9:6e:66:c5:eb:e6:3d:5f:0c:84:4b:2f:99:f2:56:9a:97:
58:33:2e:21:dd:3d:6c:8f:87:04:0d:bc:62:5e:1b:0f:38:1e:
8d:c7:91:60:be:2e:72:c9:b7:63:82:da:af:b2:61:5c:c3:4e:
3f:35:9b:e5:7c:b0:43:31:bc:fb:00:14:23:6b:2a:9c:27:4a:
f4:8c:72:be:ca:cd:51:14:c6:fc:32:70:d3:ab:ea:77:ed:7f:
76:15:a2:45:4e:d3:17:d1:09:bf:c7:a0:43:08:75:e0:b7:5c:
33:a8:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:45 2025 by rpki-client