Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E7B29A2113611F0B5644346762E951A.roa
File: 8E7B29A2113611F0B5644346762E951A.roa (raw, json)
Hash identifier: 1XIQd7suQtmvQuAZ6NitUpmh9+Cm5LBn6zpx9BR8pkk=
Subject key identifier: AD:F8:3E:17:04:24:2B:67:FA:D2:EE:8D:BB:33:36:54:6E:70:B0:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E7B29A2113611F0B5644346762E951A.roa
Signing time: Fri 04 Apr 2025 09:24:06 +0000
ROA not before: Fri 04 Apr 2025 09:24:02 +0000
ROA not after: Thu 01 May 2025 09:24:02 +0000
asID: 44559
IP address blocks: 154.219.64.0/24 maxlen: 24
154.219.65.0/24 maxlen: 24
154.219.66.0/24 maxlen: 24
154.219.67.0/24 maxlen: 24
154.219.68.0/24 maxlen: 24
154.219.69.0/24 maxlen: 24
154.219.70.0/24 maxlen: 24
154.219.71.0/24 maxlen: 24
154.219.72.0/24 maxlen: 24
154.219.73.0/24 maxlen: 24
154.219.74.0/24 maxlen: 24
154.219.75.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.77.0/24 maxlen: 24
154.219.78.0/24 maxlen: 24
154.219.79.0/24 maxlen: 24
154.219.80.0/24 maxlen: 24
154.219.81.0/24 maxlen: 24
154.219.82.0/24 maxlen: 24
154.219.83.0/24 maxlen: 24
154.219.84.0/24 maxlen: 24
154.219.85.0/24 maxlen: 24
154.219.86.0/24 maxlen: 24
154.219.87.0/24 maxlen: 24
154.219.88.0/24 maxlen: 24
154.219.89.0/24 maxlen: 24
154.219.90.0/24 maxlen: 24
154.219.91.0/24 maxlen: 24
154.219.92.0/24 maxlen: 24
154.219.93.0/24 maxlen: 24
154.219.94.0/24 maxlen: 24
154.219.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96172 (0x177ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Apr 4 09:24:02 2025 GMT
Not After : May 1 09:24:02 2025 GMT
Subject: CN=67efa536-6e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:2c:8f:09:fe:4e:4f:1b:d4:ea:df:65:04:
cc:4b:6e:6a:8b:5c:a4:4d:c1:66:5e:94:75:58:57:
af:96:52:60:b9:dd:39:6b:df:bb:8c:f2:10:a4:e3:
93:e4:ad:cc:c1:57:7d:80:1f:2c:57:7e:9c:e7:db:
17:14:02:9e:b7:4e:7d:c5:18:72:1e:eb:31:77:d1:
a2:6a:d7:f0:10:4a:e3:4a:6f:80:a9:20:7e:10:02:
f4:26:f1:75:f9:05:25:c9:61:3f:ca:1a:dc:0c:15:
ca:f5:ba:3f:fa:6c:de:32:29:e6:f6:bd:b3:bf:f0:
29:90:82:6f:f2:25:94:08:53:df:a9:97:ea:af:1d:
75:ef:87:91:b3:f5:0d:fe:b5:76:58:e1:88:76:8f:
42:db:41:49:7e:bb:31:2b:43:4f:29:e6:f1:61:a7:
bd:f6:3d:ec:f2:43:04:a7:f8:90:15:b2:89:e7:bb:
8c:af:64:88:a7:0f:b3:2d:7d:0c:47:22:4d:f4:33:
29:d0:00:18:27:65:0c:f4:54:eb:6e:45:1f:25:0f:
a6:eb:dc:e1:93:73:bb:76:56:69:8d:24:55:f9:dd:
b2:b1:ce:9f:3b:8b:27:bb:12:38:45:ca:f7:dc:64:
b1:59:eb:74:66:15:cc:97:64:c5:3f:b5:e7:26:fe:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F8:3E:17:04:24:2B:67:FA:D2:EE:8D:BB:33:36:54:6E:70:B0:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E7B29A2113611F0B5644346762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.64.0/19
Signature Algorithm: sha256WithRSAEncryption
08:5c:53:2c:ee:a1:df:93:ad:ad:26:2f:6a:a4:7e:48:dd:9c:
c9:bc:a8:e0:be:de:08:70:ba:54:a9:4c:8f:52:f0:dd:d8:bb:
7c:2e:8d:d4:e3:da:02:a3:55:da:b9:7a:d4:ab:54:1b:9a:a2:
63:96:96:7e:ba:82:28:fe:f6:77:64:2c:56:00:a8:0a:14:97:
6f:d6:9e:1d:1d:1d:42:6c:18:d8:2f:30:cd:b8:9f:79:9a:cb:
3a:55:25:2f:f3:45:f4:99:e6:3e:f9:c6:e1:f4:06:9b:e5:ac:
d9:0b:08:28:8f:44:5b:15:a1:53:a5:92:ae:b1:a0:c3:16:30:
ed:f1:93:41:52:f8:1c:53:46:40:56:72:0b:62:78:d1:b4:d1:
e7:03:f3:65:aa:31:47:cf:63:e8:e6:28:ca:71:fd:42:de:57:
46:1f:14:4c:44:cb:9b:f0:b5:c5:0c:62:81:3b:46:70:8d:f8:
e0:0b:b0:0b:d7:59:83:47:e5:81:15:45:87:f7:ef:3c:0e:85:
7a:9d:78:17:07:5a:0e:e3:18:39:40:7e:8d:09:bc:8c:de:85:
67:45:83:a9:d4:04:17:91:49:45:52:e0:a3:fd:67:76:a8:b6:
b1:39:4d:8f:b7:38:cd:38:57:ba:33:70:c3:9e:8e:38:38:a5:
db:7a:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:20:25 2025 by rpki-client