Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10BD4BE2F50411EFB3C38098762E951A.roa
File: 10BD4BE2F50411EFB3C38098762E951A.roa (raw, json)
Hash identifier: r5uVsenFmXRqtHSxOo4jQiHfK1r8TyhewPQkEXBRqW0=
Subject key identifier: 26:60:DC:6F:38:4F:BF:81:D6:34:05:70:DD:86:67:DB:49:E7:B1:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01682C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10BD4BE2F50411EFB3C38098762E951A.roa
Signing time: Thu 27 Feb 2025 12:12:08 +0000
ROA not before: Thu 27 Feb 2025 12:12:04 +0000
ROA not after: Thu 19 Feb 2026 12:12:04 +0000
asID: 984
IP address blocks: 154.88.64.0/24 maxlen: 24
154.88.65.0/24 maxlen: 24
154.88.66.0/24 maxlen: 24
154.88.67.0/24 maxlen: 24
154.88.68.0/24 maxlen: 24
154.88.69.0/24 maxlen: 24
154.88.70.0/24 maxlen: 24
154.88.71.0/24 maxlen: 24
154.88.72.0/24 maxlen: 24
154.88.73.0/24 maxlen: 24
154.88.74.0/24 maxlen: 24
154.88.75.0/24 maxlen: 24
154.88.76.0/24 maxlen: 24
154.88.77.0/24 maxlen: 24
154.88.78.0/24 maxlen: 24
154.88.79.0/24 maxlen: 24
154.88.80.0/24 maxlen: 24
154.88.81.0/24 maxlen: 24
154.88.82.0/24 maxlen: 24
154.88.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92204 (0x1682c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 12:12:04 2025 GMT
Not After : Feb 19 12:12:04 2026 GMT
Subject: CN=67c05698-0c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:1f:c1:d2:a4:45:50:b6:f2:9c:39:d6:ce:
ad:49:4d:7b:0f:77:e9:cb:a0:bd:77:69:af:c5:64:
73:a9:32:42:fe:03:15:b7:5d:8a:7a:fc:f1:9b:ac:
1c:86:4f:e3:4f:6d:ad:b6:ff:6b:01:10:56:e3:57:
e5:d2:f5:b5:e0:fa:c9:46:e0:e3:d7:fa:1a:a8:34:
c7:88:50:24:0d:65:51:db:23:42:fa:4d:b0:67:52:
3a:9b:63:5a:60:b3:6d:48:99:94:46:c7:9d:a2:b5:
69:a7:e0:ee:02:f7:37:a3:40:eb:21:30:5b:67:04:
b6:25:1f:b3:32:40:4c:73:0b:7d:ec:c9:21:25:63:
79:db:62:be:94:3c:f7:1a:df:bf:f4:df:6b:26:9b:
17:9a:a1:42:98:f6:00:c0:ce:91:e2:13:94:81:16:
35:5a:88:34:3b:a5:37:6f:dc:23:28:53:06:e6:39:
9c:2d:ca:da:89:8e:ee:45:9d:1b:55:1c:5b:19:71:
28:bd:74:c7:c1:33:18:7a:76:34:dc:ad:63:af:2a:
31:48:64:e0:eb:17:50:0c:78:81:33:4e:bd:91:71:
ca:4f:77:36:c1:59:b0:0a:73:b4:84:cf:45:93:26:
37:a7:cc:c9:47:b7:1d:d4:b4:ab:43:35:d1:38:ef:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:60:DC:6F:38:4F:BF:81:D6:34:05:70:DD:86:67:DB:49:E7:B1:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10BD4BE2F50411EFB3C38098762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.64.0-154.88.83.255
Signature Algorithm: sha256WithRSAEncryption
4b:9b:1d:78:bd:2f:6d:f1:54:d1:71:2c:91:7b:21:9f:e6:91:
e3:a0:ef:eb:5e:c9:2e:e8:a0:f2:48:6f:5e:8a:42:f2:bf:ce:
74:93:97:8f:1a:3d:64:60:20:86:84:d6:c9:71:08:6f:7b:83:
1a:04:43:c5:2a:c2:b2:09:74:f7:8c:25:14:51:b8:26:40:75:
78:92:f0:ce:a3:03:ac:ea:38:f4:1e:93:9b:5b:f7:74:a1:7a:
5b:1b:c0:b4:5a:62:57:d9:0c:9d:91:fd:7a:3f:1d:84:8d:6e:
f0:a9:c9:46:16:9a:3a:7c:a3:5f:54:33:3b:0c:3c:21:0f:e3:
f7:7f:95:76:39:77:c8:1c:05:ec:8d:5b:34:51:49:46:e1:c4:
63:35:59:2e:54:89:ba:ea:1b:6e:e0:d1:f6:2f:ff:5d:1e:5f:
01:8e:14:12:51:b4:14:45:aa:f3:59:31:7c:50:79:f3:15:ab:
ce:6c:0b:65:89:42:eb:c5:49:16:62:b8:95:d7:99:57:5f:c2:
5a:09:15:4a:fe:c1:84:37:6d:cc:9b:7f:e6:05:3e:e3:2d:8a:
d9:58:9b:38:a1:77:c2:f6:8a:f1:b7:15:b9:0a:15:19:9c:1f:
4f:85:6d:55:1e:bf:0b:80:d5:33:1d:2e:33:df:3a:ae:d8:f0:
26:3f:31:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:07 2025 by rpki-client