Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B3C7FB2F5A211EF986AE557762E951A.roa
File: 7B3C7FB2F5A211EF986AE557762E951A.roa (raw, json)
Hash identifier: SpmAcA+jCko51Zc0T1lyAjfGPn11GwAAbQLetoaxtJE=
Subject key identifier: C0:0C:A4:78:B9:D6:2B:7B:6F:29:0A:78:22:AC:1B:E8:C0:B9:EF:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B3C7FB2F5A211EF986AE557762E951A.roa
Signing time: Fri 28 Feb 2025 07:06:07 +0000
ROA not before: Fri 28 Feb 2025 07:06:03 +0000
ROA not after: Fri 20 Feb 2026 07:06:03 +0000
asID: 984
IP address blocks: 154.81.167.0/24 maxlen: 24
154.81.168.0/24 maxlen: 24
154.81.169.0/24 maxlen: 24
154.81.171.0/24 maxlen: 24
154.81.172.0/24 maxlen: 24
154.81.174.0/24 maxlen: 24
154.81.180.0/24 maxlen: 24
154.81.183.0/24 maxlen: 24
154.81.186.0/24 maxlen: 24
154.81.187.0/24 maxlen: 24
154.81.188.0/24 maxlen: 24
154.89.224.0/24 maxlen: 24
154.89.225.0/24 maxlen: 24
154.95.2.0/24 maxlen: 24
154.95.3.0/24 maxlen: 24
154.95.4.0/24 maxlen: 24
154.95.5.0/24 maxlen: 24
154.95.6.0/24 maxlen: 24
154.95.7.0/24 maxlen: 24
154.95.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92653 (0x169ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 07:06:03 2025 GMT
Not After : Feb 20 07:06:03 2026 GMT
Subject: CN=67c1605f-dfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:42:09:11:7f:46:79:10:88:2b:be:dc:a6:
73:dc:a3:7c:4d:11:97:c5:98:45:4b:39:f5:2d:d7:
97:b1:b2:05:f8:74:cd:cc:63:b8:f3:e2:36:4d:45:
88:3a:56:9e:49:a0:52:04:ec:30:37:ba:eb:36:51:
ea:99:a1:e1:58:e5:2e:90:72:35:36:ab:4d:25:f7:
6b:ba:c0:8b:49:c2:9d:f8:db:6e:3e:f3:5b:61:ea:
85:ab:35:44:77:66:43:11:d8:d0:48:59:8b:c0:62:
f5:51:a9:4b:bc:37:62:68:9c:4a:66:c5:63:83:eb:
b7:dd:d6:e5:e8:40:47:97:68:32:25:e9:e4:d8:22:
98:33:7e:30:a6:fa:b1:42:fd:27:d3:de:80:f8:5c:
dd:16:9c:fd:40:41:d1:d3:93:49:92:f3:a1:45:b4:
a1:ca:9c:47:d8:66:62:de:2e:88:15:f8:23:e9:ab:
9a:26:84:02:39:30:4d:94:89:8d:3b:1e:2f:70:6b:
9c:b2:f9:fb:fa:fc:02:d9:48:71:74:e8:76:a4:f6:
ad:63:54:5d:ac:b3:3e:25:89:59:41:b4:ae:1c:83:
15:81:e2:14:1a:d3:89:41:81:33:5e:6c:94:77:47:
12:72:ae:f0:fa:7c:15:4e:00:92:82:f7:c6:25:2a:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0C:A4:78:B9:D6:2B:7B:6F:29:0A:78:22:AC:1B:E8:C0:B9:EF:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B3C7FB2F5A211EF986AE557762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.167.0-154.81.169.255
154.81.171.0-154.81.172.255
154.81.174.0/24
154.81.180.0/24
154.81.183.0/24
154.81.186.0-154.81.188.255
154.89.224.0/23
154.95.2.0-154.95.7.255
154.95.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ca:a2:12:b6:56:95:a8:11:56:43:46:32:cb:34:de:53:85:
3f:73:58:58:cb:b7:0f:60:67:f7:9d:08:7f:54:77:69:42:47:
2d:14:41:95:e9:e0:1c:26:f9:dc:cb:ff:b2:5c:e2:93:fa:41:
de:42:64:e1:84:05:d3:a0:75:58:89:fc:51:74:d8:1d:c5:0e:
c8:2c:b4:03:7f:51:1e:8e:4c:bd:bf:ae:85:52:dc:20:64:2a:
4f:c0:40:db:98:29:af:2b:4c:29:62:9d:aa:9f:32:21:88:e6:
39:bc:83:bb:96:4c:5e:fe:70:14:2b:5f:db:51:99:ed:02:e2:
a4:71:a4:5b:ba:4e:23:a4:da:32:ae:a5:0c:1e:e3:9e:00:1f:
bf:4c:cc:69:04:c5:20:df:c0:d7:ef:ab:38:76:52:d9:a0:9e:
1c:db:8b:b1:cb:63:45:d1:72:67:8a:9f:86:03:ef:f7:7f:e4:
45:dd:fc:97:ad:e3:e4:c0:4c:5b:5b:73:2b:38:f9:be:66:33:
5f:31:73:1a:41:41:5f:b6:32:cc:07:2e:cd:41:03:f4:f9:06:
ea:4f:b0:4c:da:5f:44:7a:5b:ab:5d:a0:a4:58:16:14:8c:4b:
03:60:0e:5e:0a:6a:cc:e8:aa:82:f4:b3:e3:ec:15:c0:27:56:
8f:74:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:56 2025 by rpki-client