Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/331AA3B2F66011EF93B08671762E951A.roa
File: 331AA3B2F66011EF93B08671762E951A.roa (raw, json)
Hash identifier: gHeR+wOuWsdlUyESs91P8yVt0fDnQx15biUCPXYQaPE=
Subject key identifier: B6:7B:45:95:BC:64:B1:AD:5F:C3:90:DD:0E:1E:AB:D9:8F:45:9B:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/331AA3B2F66011EF93B08671762E951A.roa
Signing time: Sat 01 Mar 2025 05:44:11 +0000
ROA not before: Sat 01 Mar 2025 05:44:07 +0000
ROA not after: Sat 19 Feb 2028 05:44:07 +0000
asID: 17561
IP address blocks: 154.194.36.0/24 maxlen: 24
154.194.47.0/24 maxlen: 24
154.194.49.0/24 maxlen: 24
154.194.60.0/24 maxlen: 24
154.194.61.0/24 maxlen: 24
154.194.214.0/24 maxlen: 24
154.194.215.0/24 maxlen: 24
154.194.216.0/24 maxlen: 24
154.194.217.0/24 maxlen: 24
154.194.218.0/24 maxlen: 24
154.194.219.0/24 maxlen: 24
154.194.220.0/24 maxlen: 24
154.194.221.0/24 maxlen: 24
154.194.222.0/24 maxlen: 24
154.194.223.0/24 maxlen: 24
154.194.224.0/24 maxlen: 24
154.194.225.0/24 maxlen: 24
154.194.226.0/24 maxlen: 24
154.194.227.0/24 maxlen: 24
154.194.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93484 (0x16d2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 05:44:07 2025 GMT
Not After : Feb 19 05:44:07 2028 GMT
Subject: CN=67c29eab-9ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:92:eb:93:f4:87:50:6c:ca:f2:b6:e2:4f:
69:d0:95:00:4f:95:91:cb:80:69:e6:17:c8:ca:1f:
32:b9:42:7a:a7:ef:e1:33:04:ef:7d:8a:74:75:f6:
d1:22:df:b1:1b:01:30:8e:4c:e6:c1:a9:fb:07:ab:
e4:3f:bb:59:91:91:bc:ab:4e:7a:d4:8e:85:b2:67:
4f:f3:fe:48:75:96:2c:83:55:d0:a0:2e:ae:05:c4:
34:5a:f2:f5:0b:7a:1e:7b:47:9e:40:f1:96:8b:e3:
cf:b1:da:74:9d:86:46:a5:c0:af:0f:dd:d8:e7:21:
b8:d7:dc:12:ad:2c:08:87:eb:29:a6:c9:a8:ae:a1:
91:63:6c:17:be:c1:d7:6e:e6:91:6f:7b:0a:a7:9e:
ee:f7:22:a5:42:9b:aa:94:75:e1:1f:8e:f4:df:e9:
9f:ab:59:03:6f:f5:00:34:0f:3b:4c:5e:cc:25:64:
e1:e6:55:75:aa:8c:65:a9:27:5d:07:b7:b0:28:43:
21:4a:66:93:4e:5c:f8:40:a0:60:12:7e:cb:af:34:
4d:2b:bf:4f:b1:64:aa:cd:e4:c1:82:73:4b:42:03:
a9:78:3b:bc:b5:d9:d1:e5:64:5a:29:bd:86:58:bf:
0c:0b:3f:ef:de:d1:c8:23:84:cf:22:6f:a6:ec:01:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7B:45:95:BC:64:B1:AD:5F:C3:90:DD:0E:1E:AB:D9:8F:45:9B:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/331AA3B2F66011EF93B08671762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
154.194.47.0/24
154.194.49.0/24
154.194.60.0/23
154.194.214.0-154.194.228.255
Signature Algorithm: sha256WithRSAEncryption
29:bd:85:3f:d1:98:d4:0e:58:9f:e5:e7:1c:5e:99:e2:ed:08:
c0:28:43:e2:43:36:49:2d:62:f7:80:c7:94:2e:b6:07:f2:69:
08:f4:bd:8a:84:b1:6b:cf:c7:79:69:65:c8:7a:cb:0f:b2:d5:
e7:c6:64:09:f0:47:58:29:6e:61:4e:8b:57:d4:0f:d7:8b:7e:
61:71:92:d2:94:ce:1b:9f:4d:9b:32:ad:07:7b:60:36:ff:91:
03:09:85:86:aa:0c:df:92:ae:1d:98:7e:6b:ba:67:a6:aa:93:
06:74:e2:6a:ec:a0:ec:d3:f6:75:de:11:8d:a6:ca:50:f2:06:
7a:15:6b:4d:00:a5:26:d9:29:7f:35:bf:64:8f:ee:47:0b:c7:
90:5a:6a:3b:26:f7:8b:fb:28:97:93:92:48:cb:8d:3e:53:9f:
d5:08:50:b7:28:7b:69:22:30:de:f0:a9:a9:93:99:eb:05:d8:
ac:ba:b6:0f:00:22:87:39:39:e4:7d:64:c7:60:10:3b:18:2b:
27:34:4e:f9:4c:a5:6b:72:6d:ce:f0:c1:ce:b3:c8:a5:fc:e7:
94:66:22:7d:56:d2:3b:6a:c0:ef:21:ea:87:80:5e:88:40:bd:
db:20:55:44:17:58:9c:f2:85:9b:9d:56:5b:4d:a2:cd:13:86:
81:3f:f1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:37 2025 by rpki-client