Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/989FAF18F64F11EF828B0982762E951A.roa
File: 989FAF18F64F11EF828B0982762E951A.roa (raw, json)
Hash identifier: g8HmVZ6Cjm/iG81TV7Veeb/BUhWHw8l9YDk5cN0Gi4A=
Subject key identifier: 70:3A:DD:07:5B:78:45:D5:53:70:51:D4:84:11:E5:30:1F:FA:9A:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/989FAF18F64F11EF828B0982762E951A.roa
Signing time: Sat 01 Mar 2025 03:45:19 +0000
ROA not before: Sat 01 Mar 2025 03:45:16 +0000
ROA not after: Thu 19 Feb 2026 03:45:16 +0000
asID: 984
IP address blocks: 154.222.132.0/24 maxlen: 24
154.222.135.0/24 maxlen: 24
154.222.143.0/24 maxlen: 24
154.222.144.0/24 maxlen: 24
154.222.145.0/24 maxlen: 24
154.222.149.0/24 maxlen: 24
154.222.150.0/24 maxlen: 24
154.222.151.0/24 maxlen: 24
154.222.153.0/24 maxlen: 24
154.222.154.0/24 maxlen: 24
154.222.155.0/24 maxlen: 24
154.222.157.0/24 maxlen: 24
154.222.160.0/24 maxlen: 24
154.222.163.0/24 maxlen: 24
154.222.165.0/24 maxlen: 24
154.222.166.0/24 maxlen: 24
154.222.167.0/24 maxlen: 24
154.222.169.0/24 maxlen: 24
154.222.170.0/24 maxlen: 24
154.222.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93430 (0x16cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 03:45:16 2025 GMT
Not After : Feb 19 03:45:16 2026 GMT
Subject: CN=67c282cf-8d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:5e:63:db:fd:df:4a:7f:5d:3f:d0:b7:f5:
b6:8c:f8:96:23:76:df:bf:b3:ff:ae:45:73:3a:2a:
20:e0:ab:4e:0a:32:49:7f:5a:8f:72:57:1d:8b:ad:
9c:f6:84:5d:35:51:d3:47:91:e4:8d:77:23:b2:58:
c9:57:ed:bd:54:da:2d:6c:af:cf:a3:d7:06:26:ed:
c2:40:5f:c6:48:a6:09:09:2d:a2:fe:c7:3a:b6:f8:
48:54:49:c8:1c:56:31:22:05:0f:a4:69:55:9a:a6:
60:95:cd:f0:67:55:01:18:e2:52:f5:cc:61:8d:76:
00:9e:b4:4d:aa:07:6e:66:76:ae:63:eb:46:6f:67:
ad:f8:2d:d1:23:b1:9a:67:41:09:08:e9:cc:78:7b:
84:ab:ee:e8:8b:a1:42:9c:58:b8:1e:ca:3c:73:5a:
47:b3:77:4d:89:50:2a:4d:00:85:3f:f7:9f:03:58:
0a:c2:e0:d8:2f:74:ac:d6:56:7a:ee:72:64:be:6e:
53:e6:09:47:3c:6e:15:b1:5f:27:92:eb:11:41:86:
79:9c:4e:b6:a6:aa:a3:89:e1:d3:b0:27:35:91:8b:
c3:65:54:1d:0e:d1:f2:52:1b:d8:21:19:aa:64:b1:
f6:78:ff:dc:07:c9:3c:70:de:2d:92:bf:df:5b:cf:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3A:DD:07:5B:78:45:D5:53:70:51:D4:84:11:E5:30:1F:FA:9A:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/989FAF18F64F11EF828B0982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.132.0/24
154.222.135.0/24
154.222.143.0-154.222.145.255
154.222.149.0-154.222.151.255
154.222.153.0-154.222.155.255
154.222.157.0/24
154.222.160.0/24
154.222.163.0/24
154.222.165.0-154.222.167.255
154.222.169.0-154.222.170.255
154.222.173.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:a8:c2:e1:99:8c:07:1c:52:de:c2:d6:8c:8a:e2:c9:04:95:
3e:32:3b:e7:d0:84:6f:6f:60:42:6f:f8:b0:1b:c3:e3:9d:5b:
41:0d:dc:4e:a5:11:8d:51:19:93:93:5b:2f:af:15:0e:0d:79:
54:82:5b:8b:df:53:25:1d:ee:79:ca:22:c4:39:43:0e:1c:b7:
9c:83:ba:2e:e3:3b:aa:2b:82:76:10:ad:da:f1:79:84:b3:fb:
02:71:96:54:48:c7:f6:c7:75:d9:3f:7d:f7:8c:ec:21:37:1b:
4a:a4:00:83:02:87:09:37:23:34:34:3c:3e:5f:b9:55:e8:aa:
6c:79:88:b6:bb:2b:19:c6:77:a6:70:3f:e6:5b:f2:5e:47:f5:
db:73:00:a0:a6:40:72:d3:eb:2f:4d:55:9c:41:93:05:22:e7:
f6:23:ea:13:57:a4:8a:65:e0:26:28:6c:93:e1:5f:cf:08:2b:
d8:1c:bb:97:37:a4:00:c2:1b:cc:cd:d7:70:72:0a:50:3e:40:
a3:e8:be:dd:68:be:b2:8a:b0:7f:e9:b7:c7:55:2b:39:26:b7:
84:9d:ab:05:47:7e:a8:36:a6:74:36:e5:2f:bc:86:88:ae:d9:
e2:40:51:7d:39:a0:b6:8c:79:27:56:d2:93:40:75:2e:60:77:
ea:87:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:50 2025 by rpki-client