Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80AD3C2A0F9711F08223AC76762E951A.roa
File: 80AD3C2A0F9711F08223AC76762E951A.roa (raw, json)
Hash identifier: Mut/LjXdXRGYJiltFWZV0Vuzwg+QSHFSLNHgQDajA+M=
Subject key identifier: 88:79:AA:3D:E7:C6:21:50:84:91:C2:15:71:A8:6B:95:C8:78:38:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017736
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80AD3C2A0F9711F08223AC76762E951A.roa
Signing time: Wed 02 Apr 2025 07:53:02 +0000
ROA not before: Wed 02 Apr 2025 07:52:58 +0000
ROA not after: Fri 09 May 2025 07:52:58 +0000
asID: 203020
IP address blocks: 154.197.120.0/24 maxlen: 24
154.202.70.0/23 maxlen: 24
154.202.86.0/23 maxlen: 24
154.203.63.0/24 maxlen: 24
154.203.95.0/24 maxlen: 24
154.204.37.0/24 maxlen: 24
154.204.42.0/24 maxlen: 24
154.204.48.0/24 maxlen: 24
154.204.51.0/24 maxlen: 24
154.205.174.0/23 maxlen: 24
154.206.13.0/24 maxlen: 24
154.207.102.0/23 maxlen: 24
154.207.216.0/22 maxlen: 24
154.207.228.0/22 maxlen: 24
154.207.248.0/22 maxlen: 24
154.208.1.0/24 maxlen: 24
154.208.128.0/23 maxlen: 24
154.208.136.0/22 maxlen: 24
154.208.175.0/24 maxlen: 24
154.209.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96054 (0x17736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Apr 2 07:52:58 2025 GMT
Not After : May 9 07:52:58 2025 GMT
Subject: CN=67ececde-8d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:91:c3:9a:57:61:86:93:fb:63:78:cb:f2:
3c:e0:56:a3:cc:91:8d:8b:c5:24:03:75:e5:a5:f7:
16:54:34:e2:e8:d1:ee:18:e9:bc:84:bd:ca:5c:74:
d6:5a:58:3c:f7:04:11:12:43:54:23:fc:53:a5:e5:
26:32:cc:46:3e:f4:6d:04:58:aa:ad:5a:45:e6:b7:
34:2c:3a:71:7b:94:b9:62:e8:c3:08:e8:1c:be:c3:
78:89:9b:6c:75:3a:d8:5a:14:2f:9b:7e:b8:ee:8c:
fa:62:2c:fd:c7:1d:56:a6:67:b3:14:67:b5:65:7e:
9b:09:cb:6b:65:3a:2e:59:57:7c:20:95:7d:36:59:
8c:27:79:86:f5:b7:38:55:86:4e:70:6e:29:ff:7f:
70:dc:49:4f:f9:c4:dd:5b:92:55:a2:8a:ca:3b:e9:
63:0d:3b:2e:bd:1d:d0:91:86:0b:f3:6f:cd:45:a6:
a9:a3:82:84:2c:27:38:bc:fb:9b:66:8b:cf:47:7d:
6f:0b:7b:d4:fd:57:71:3a:22:ad:35:d4:c1:88:cf:
ad:c3:91:aa:df:a7:7c:ee:86:d9:fc:7d:27:8d:ad:
3f:bb:23:94:bf:60:ec:c7:e1:17:9c:74:fd:e6:48:
ca:b1:42:22:52:db:11:81:c4:87:54:5f:52:e6:13:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:79:AA:3D:E7:C6:21:50:84:91:C2:15:71:A8:6B:95:C8:78:38:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80AD3C2A0F9711F08223AC76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.120.0/24
154.202.70.0/23
154.202.86.0/23
154.203.63.0/24
154.203.95.0/24
154.204.37.0/24
154.204.42.0/24
154.204.48.0/24
154.204.51.0/24
154.205.174.0/23
154.206.13.0/24
154.207.102.0/23
154.207.216.0/22
154.207.228.0/22
154.207.248.0/22
154.208.1.0/24
154.208.128.0/23
154.208.136.0/22
154.208.175.0/24
154.209.8.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:8a:4d:ae:61:34:20:19:7a:53:b4:58:0f:23:35:58:f8:83:
54:c1:0a:50:7b:fe:18:7d:95:94:b4:58:d9:58:6b:83:c4:63:
11:15:09:e1:40:11:f2:e6:54:14:fa:9c:60:21:90:64:88:87:
a3:b8:0c:db:8e:8a:de:a3:72:f2:4e:da:af:05:62:9a:93:fc:
37:d5:42:17:ab:0e:97:f3:31:5a:79:71:ec:88:e3:1b:7c:d4:
4b:85:74:40:41:ed:f4:55:38:9e:37:4e:6a:7d:b5:a2:11:fc:
3e:d8:e6:22:dd:57:2d:9a:93:af:44:c6:24:22:bf:25:c9:a2:
26:cd:d9:2d:ca:77:8d:27:2a:28:0f:02:d1:2a:e7:70:9a:f1:
0a:d0:06:0a:8a:44:f0:19:1a:9c:84:cc:ee:6b:ff:55:30:f1:
8d:9e:01:25:1c:6c:6b:29:52:69:7a:5d:65:a3:24:00:b8:8b:
05:77:5c:4a:47:10:24:a6:37:31:de:22:3b:ee:aa:b7:87:24:
e4:95:49:20:e6:e0:c1:08:a6:88:7a:7c:b1:ff:58:9c:ab:9d:
7f:d8:3d:66:4c:af:45:74:1d:6e:a1:e9:d5:d2:df:d7:2e:e4:
69:ac:49:d0:e8:cc:d7:38:61:53:e4:6f:2c:8c:3d:af:9a:5f:
2c:49:26:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:48:30 2025 by rpki-client