Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8070AB34F65B11EFBE023352762E951A.roa
File: 8070AB34F65B11EFBE023352762E951A.roa (raw, json)
Hash identifier: ZERIPkYkMfVcdYbBemapltUDqR4pBtGLTj72kDCXHj4=
Subject key identifier: DD:62:2B:EB:07:DE:BA:FE:EB:BA:4F:78:F7:90:35:75:FA:F8:9D:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8070AB34F65B11EFBE023352762E951A.roa
Signing time: Sat 01 Mar 2025 05:10:33 +0000
ROA not before: Sat 01 Mar 2025 05:10:29 +0000
ROA not after: Sat 19 Feb 2028 05:10:29 +0000
asID: 17561
IP address blocks: 154.193.233.0/24 maxlen: 24
154.193.234.0/24 maxlen: 24
154.193.235.0/24 maxlen: 24
154.193.236.0/24 maxlen: 24
154.193.237.0/24 maxlen: 24
154.193.238.0/24 maxlen: 24
154.193.239.0/24 maxlen: 24
154.193.240.0/24 maxlen: 24
154.193.241.0/24 maxlen: 24
154.193.242.0/24 maxlen: 24
154.193.243.0/24 maxlen: 24
154.193.244.0/24 maxlen: 24
154.193.245.0/24 maxlen: 24
154.193.246.0/24 maxlen: 24
154.193.247.0/24 maxlen: 24
154.196.106.0/24 maxlen: 24
154.196.107.0/24 maxlen: 24
154.196.108.0/24 maxlen: 24
154.196.109.0/24 maxlen: 24
154.196.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93468 (0x16d1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 05:10:29 2025 GMT
Not After : Feb 19 05:10:29 2028 GMT
Subject: CN=67c296c9-dafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:b5:af:91:90:91:3a:30:84:bb:de:e7:1c:
90:e5:f1:bd:dd:63:8c:42:aa:be:60:20:35:93:ea:
2a:32:76:38:b4:87:cb:6e:53:3b:a9:fb:e4:81:1e:
4a:83:93:99:86:19:e0:f5:c9:60:97:66:5f:0d:18:
f0:d2:1e:df:3b:83:dc:3a:23:b2:82:85:6e:3d:e0:
95:c7:6e:eb:a6:51:45:a5:d0:e7:7c:56:ee:3c:d3:
02:6b:3c:9a:87:4d:34:37:2f:19:f2:81:0a:ee:36:
e3:1b:a8:66:20:7b:c9:03:0b:be:07:d3:73:47:44:
b3:9c:21:65:35:46:0e:17:75:41:8c:ab:54:04:50:
4f:34:5d:2d:29:cf:5d:af:96:ac:c8:2f:06:9b:c4:
6c:95:7c:fb:1d:48:8e:cc:40:aa:b0:46:84:a9:c0:
28:1d:a0:c6:0d:3f:18:68:52:de:cb:a1:52:16:c7:
4c:f1:29:b7:71:ee:3f:8c:1b:35:5f:32:2f:38:5d:
d3:3f:31:c9:22:a6:7d:1d:e6:7b:dc:2f:3a:6a:82:
44:46:0d:3e:c2:2a:09:aa:e4:54:af:0f:29:0d:52:
8f:1c:f5:74:1c:74:5e:df:52:38:f1:f5:ba:61:cf:
12:cd:57:ea:ab:4b:03:5d:4b:21:e4:9c:db:88:04:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:2B:EB:07:DE:BA:FE:EB:BA:4F:78:F7:90:35:75:FA:F8:9D:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8070AB34F65B11EFBE023352762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.233.0-154.193.247.255
154.196.106.0-154.196.110.255
Signature Algorithm: sha256WithRSAEncryption
69:c0:b5:90:0a:9f:3c:54:3f:3f:d0:cc:54:87:56:5a:87:55:
f9:78:0e:c8:52:3f:b1:d2:f1:62:ee:85:71:4d:df:44:12:6a:
8a:f9:50:c7:3d:b9:81:20:2a:9c:7e:d8:4b:c7:34:b0:2d:bc:
b8:ac:5f:a3:f3:81:52:d5:cb:ef:c1:27:5b:5d:a2:97:fb:3b:
b7:dc:f8:7c:d0:35:3e:a7:60:15:62:a2:aa:ac:85:4f:98:60:
46:71:55:5d:b1:b9:ab:96:90:a7:03:4b:b3:db:8a:de:d9:fb:
5c:d5:c2:b4:21:90:71:b2:4f:3b:42:31:d6:c2:34:ac:99:87:
61:60:2b:cb:51:72:da:23:7e:42:21:9c:a2:ff:f7:62:b1:44:
91:2d:27:a4:33:67:b4:4d:8f:cb:16:51:bd:1d:b2:4c:5d:9b:
b0:8e:20:9e:57:a1:15:81:c2:24:e4:b5:e0:aa:54:57:20:d0:
05:f1:0e:e3:ae:ba:1d:f8:28:64:a2:75:e6:39:1f:be:3d:4a:
7b:dd:5e:6e:b7:29:dd:82:36:ea:48:e8:3c:fe:2f:82:71:76:
51:b6:fe:b7:99:c9:e4:62:c1:01:82:bf:f2:2d:1c:19:64:cc:
a2:96:7b:dd:14:6b:0d:e2:30:e0:8e:47:1b:6f:16:5b:34:a4:
cb:d1:c1:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:53 2025 by rpki-client