Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E29F0D20CB311F09D473363762E951A.roa
File: 8E29F0D20CB311F09D473363762E951A.roa (raw, json)
Hash identifier: bKpomnaq/2kqs/GwE9FOJz1EYwR72rc7IaTU7tcAGqw=
Subject key identifier: E9:64:8E:6B:C5:AB:F0:1D:06:93:0E:6A:88:12:50:45:E5:A5:7F:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E29F0D20CB311F09D473363762E951A.roa
Signing time: Sat 29 Mar 2025 15:36:17 +0000
ROA not before: Sat 29 Mar 2025 15:36:13 +0000
ROA not after: Sun 06 Apr 2025 15:36:13 +0000
asID: 142403
IP address blocks: 154.209.4.0/24 maxlen: 24
154.211.12.0/24 maxlen: 24
154.211.13.0/24 maxlen: 24
154.211.14.0/24 maxlen: 24
154.221.16.0/24 maxlen: 24
154.221.17.0/24 maxlen: 24
154.221.18.0/24 maxlen: 24
154.221.19.0/24 maxlen: 24
154.221.20.0/24 maxlen: 24
154.221.21.0/24 maxlen: 24
154.221.22.0/24 maxlen: 24
154.221.23.0/24 maxlen: 24
154.221.24.0/24 maxlen: 24
154.221.25.0/24 maxlen: 24
154.221.26.0/24 maxlen: 24
154.221.27.0/24 maxlen: 24
154.221.28.0/24 maxlen: 24
154.221.29.0/24 maxlen: 24
154.221.30.0/24 maxlen: 24
154.221.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95925 (0x176b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 15:36:13 2025 GMT
Not After : Apr 6 15:36:13 2025 GMT
Subject: CN=67e81371-263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:29:a4:c0:35:b0:33:2a:f6:33:8f:c3:e8:
62:7d:83:87:c4:5f:25:06:c7:88:13:90:8b:f6:fd:
e0:f3:44:7a:28:dd:0e:5d:00:85:bc:d7:3a:64:34:
54:bf:ae:24:b5:ca:f5:3d:0f:4a:a8:50:7a:eb:d2:
fc:b9:53:89:4a:a6:05:9c:d3:88:8f:8c:3e:db:f7:
59:0f:fa:b2:63:b3:a6:a6:37:25:28:47:23:16:ff:
05:9a:61:11:e7:df:dc:aa:a6:c2:aa:72:6f:be:c5:
2a:a0:2b:a3:02:d6:d8:77:1a:9f:50:74:97:b4:07:
22:dd:51:31:ca:d0:2b:7a:3a:00:55:40:85:41:0d:
f5:89:29:fa:b8:ea:a4:01:46:4e:d3:3c:a9:43:42:
f5:17:c1:8b:18:31:08:53:ce:e3:63:b6:98:8a:c8:
99:00:c3:3b:66:33:33:32:28:2d:a8:72:ae:c0:42:
a3:00:ca:33:64:65:5d:cc:88:5b:23:a1:b9:8b:4b:
1d:c5:e0:d9:50:aa:4c:59:74:10:4f:e5:bb:58:39:
75:ca:6a:4a:ec:c1:3e:0f:51:84:f8:05:42:eb:65:
ed:ec:b3:62:c3:bc:5d:d9:41:bb:a3:c0:6a:8e:a9:
dc:0a:67:5b:f4:be:f4:76:7a:d1:34:03:93:79:d4:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:8E:6B:C5:AB:F0:1D:06:93:0E:6A:88:12:50:45:E5:A5:7F:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E29F0D20CB311F09D473363762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.4.0/24
154.211.12.0-154.211.14.255
154.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:aa:25:a3:2d:21:1d:36:1e:04:06:83:2f:68:8a:93:f2:b5:
24:c0:f8:b5:18:13:23:5c:3f:ac:be:ed:07:7e:94:ee:12:96:
bd:e3:de:20:c9:e0:d8:a8:48:9d:c8:3a:c7:c5:35:df:e8:0d:
78:e9:db:4e:de:12:09:3a:f5:8d:94:68:fe:66:89:d6:f5:76:
1d:a2:81:60:65:00:a5:5a:e3:98:5c:f1:c1:c3:45:15:20:50:
bc:bc:83:f4:46:38:bd:de:96:b3:0b:c5:d6:44:c0:ab:80:bc:
d4:a7:01:c1:05:bc:95:09:0b:67:5c:73:e8:f9:11:5f:a7:4a:
35:6b:06:75:02:d1:c7:4e:57:05:be:f5:fc:54:a5:bc:9f:ee:
be:37:19:ef:0f:23:26:fe:40:1b:57:63:0d:64:3f:9e:4c:9d:
d6:cc:52:d6:a4:ac:89:5f:48:72:0e:5a:95:31:27:85:85:9e:
b6:59:bf:3c:1b:fa:88:79:c2:71:50:0f:ab:2e:45:3a:e1:e5:
03:5c:2e:36:c7:cd:6d:47:91:f5:49:d7:0a:ae:79:bf:09:f9:
d8:2d:c3:f0:55:d4:9a:ba:01:c8:a7:25:48:e5:f5:8b:7e:05:
49:15:6b:cc:dc:79:29:78:20:e9:1e:27:88:4e:70:5a:ab:06:
24:f6:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:16:05 2025 by rpki-client