Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A534AB0F50211EFBFF8C28A762E951A.roa
File: 0A534AB0F50211EFBFF8C28A762E951A.roa (raw, json)
Hash identifier: +f18EdJN/4KLn86mgRCTs42qN8/zSqBvSdTDQLHzW7Y=
Subject key identifier: 0E:43:24:B8:D1:93:23:98:BB:7B:D9:C9:15:E3:5B:58:AD:B6:E2:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016818
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A534AB0F50211EFBFF8C28A762E951A.roa
Signing time: Thu 27 Feb 2025 11:57:39 +0000
ROA not before: Thu 27 Feb 2025 11:57:27 +0000
ROA not after: Sat 19 Feb 2028 11:57:27 +0000
asID: 17561
IP address blocks: 154.90.84.0/24 maxlen: 24
154.90.85.0/24 maxlen: 24
154.90.86.0/24 maxlen: 24
154.90.87.0/24 maxlen: 24
154.90.88.0/24 maxlen: 24
154.90.89.0/24 maxlen: 24
154.90.90.0/24 maxlen: 24
154.90.91.0/24 maxlen: 24
154.90.92.0/24 maxlen: 24
154.90.93.0/24 maxlen: 24
154.90.94.0/24 maxlen: 24
154.90.95.0/24 maxlen: 24
154.90.96.0/24 maxlen: 24
154.90.97.0/24 maxlen: 24
154.90.98.0/24 maxlen: 24
154.90.99.0/24 maxlen: 24
154.90.100.0/24 maxlen: 24
154.90.101.0/24 maxlen: 24
154.90.102.0/24 maxlen: 24
154.90.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92184 (0x16818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 11:57:27 2025 GMT
Not After : Feb 19 11:57:27 2028 GMT
Subject: CN=67c05332-7996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:82:2c:33:45:c9:dc:97:a8:0c:72:00:9b:
96:19:59:d1:c4:25:ce:6a:51:c0:73:1f:65:7a:03:
06:fc:45:8a:88:e4:be:03:de:5e:36:8b:43:21:b6:
6d:61:6b:dc:14:b3:24:7e:66:0e:55:a6:83:b5:36:
01:2d:55:3f:44:3d:3d:f2:48:14:fe:f5:4a:75:5e:
05:64:8b:09:26:0a:35:51:f9:69:97:3c:ef:2c:3b:
83:da:45:44:37:cb:33:90:83:bf:86:48:ac:a6:53:
f6:9c:b9:14:71:14:e4:ff:45:25:9d:9a:a2:da:b5:
48:79:01:17:c3:87:46:66:47:dd:25:4e:c6:f0:54:
aa:9b:f5:eb:2d:d4:b1:d8:41:9c:75:6c:c3:c4:f6:
80:0e:77:5b:5e:ee:22:ba:db:ec:51:38:fa:35:c5:
af:0e:fb:32:5d:88:d0:ac:0b:f8:38:ec:57:eb:80:
a0:4c:e6:6f:e3:ed:fe:02:03:9e:ae:7c:b1:9b:55:
ce:d6:ab:b4:45:72:83:dc:6f:4c:8d:b3:19:75:72:
34:03:a5:ad:f3:25:a1:27:73:8a:a8:c1:e8:f5:1a:
7a:f4:e8:f6:65:0b:34:96:8d:e1:22:a8:dd:b9:04:
d3:e6:df:bf:1b:d5:0f:9e:37:ba:d3:67:e8:2e:11:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:43:24:B8:D1:93:23:98:BB:7B:D9:C9:15:E3:5B:58:AD:B6:E2:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A534AB0F50211EFBFF8C28A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.84.0-154.90.103.255
Signature Algorithm: sha256WithRSAEncryption
30:1f:e5:d6:07:a8:68:f9:ff:2e:11:d4:19:76:22:f4:e6:a3:
ed:18:08:3b:14:e3:4d:45:72:78:8d:1d:43:f9:5b:dd:46:49:
52:5f:22:82:cb:22:e2:54:f4:ea:ae:84:f3:39:7e:0c:18:d7:
13:2f:ce:28:4c:10:44:43:b9:c3:3e:4b:69:4c:33:44:23:5b:
29:03:64:13:c7:e2:60:0d:4e:30:6a:b2:bd:10:b3:bb:de:f5:
41:0d:4f:dd:07:0f:17:bd:ad:ff:71:56:93:9c:a5:42:95:43:
b5:7c:ff:12:dc:ca:65:d7:7b:9d:76:8a:59:a8:a9:9c:bc:b7:
fc:ac:00:09:d6:84:b5:6d:1e:29:cb:9c:f3:cf:be:63:3c:b1:
54:2a:85:a8:c3:6d:4c:88:27:bd:5a:f7:56:77:36:06:4b:bb:
9f:c1:ea:bc:2f:d8:c6:7a:58:fd:ff:a0:47:cd:84:65:4c:fb:
14:54:60:53:c6:b1:d1:0e:43:98:9e:28:48:98:c0:86:bb:86:
e6:39:54:a7:6a:de:b8:18:a8:5d:3b:72:08:07:c1:1c:09:5f:
44:d4:ef:d1:8b:2e:aa:8a:82:68:66:3d:aa:c3:35:cf:9e:6a:
01:2d:94:69:63:9a:42:20:16:0a:96:50:ce:af:5f:3c:14:f2:
59:a7:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:12 2025 by rpki-client