Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F57108096411F0B375879E762E951A.roa
File: C7F57108096411F0B375879E762E951A.roa (raw, json)
Hash identifier: zQGKiIVaSlNE5PF2ASgm98f+GH+fvEfwdJknZYSWhCg=
Subject key identifier: 34:7B:0A:F4:07:AA:2F:2C:EE:73:F2:86:F6:6D:85:C0:51:D7:82:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017622
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F57108096411F0B375879E762E951A.roa
Signing time: Tue 25 Mar 2025 10:34:50 +0000
ROA not before: Tue 25 Mar 2025 10:34:46 +0000
ROA not after: Fri 23 May 2025 10:34:46 +0000
asID: 138915
IP address blocks: 154.90.32.0/23 maxlen: 24
154.90.34.0/23 maxlen: 24
154.90.36.0/23 maxlen: 24
154.90.38.0/23 maxlen: 24
154.90.40.0/23 maxlen: 24
154.90.42.0/23 maxlen: 24
154.90.48.0/23 maxlen: 24
154.90.52.0/23 maxlen: 24
154.90.54.0/23 maxlen: 24
154.90.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95778 (0x17622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 10:34:46 2025 GMT
Not After : May 23 10:34:46 2025 GMT
Subject: CN=67e286ca-5c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:ab:a8:7b:f3:35:4f:6a:56:2c:97:9d:68:
bd:ed:86:1f:13:f1:cd:20:84:a1:b1:a2:0e:f3:8b:
e0:60:4b:e4:37:58:7b:61:bc:83:10:55:8c:e7:9c:
c6:0b:86:6c:7a:4d:0d:85:d6:c9:5a:de:b4:50:91:
aa:c4:f3:63:c6:5c:95:cd:09:b5:05:41:b1:d1:0a:
72:99:a7:09:78:9d:bb:b5:4a:f4:51:06:6a:c2:e7:
27:ff:d3:29:00:0e:99:43:e9:54:62:dd:ef:ee:01:
cc:00:c8:fe:62:b7:a2:3b:44:7e:69:b4:0f:86:14:
57:3a:2f:f3:5e:78:d0:1d:fd:ae:19:f5:05:4c:0e:
be:f4:78:f0:3b:24:8f:c6:91:e4:11:22:a9:70:5a:
24:ca:03:5b:9c:a8:11:fa:d6:bb:4e:af:b4:4b:26:
bf:52:e4:87:ab:97:0a:1d:c0:3e:e0:e0:ad:9c:aa:
35:cb:d3:1e:a4:31:06:0a:d6:6b:bd:f0:bf:39:5a:
49:a8:d0:3f:62:35:c3:ca:dc:3f:88:68:df:3c:8a:
e3:0a:28:da:a6:93:5d:4a:47:9b:2c:64:97:d9:34:
c2:b5:d9:5c:67:d4:d3:5b:31:ea:7a:0a:d2:12:3d:
01:77:cf:6a:14:59:4d:d3:dc:6e:84:e5:61:1c:a7:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:0A:F4:07:AA:2F:2C:EE:73:F2:86:F6:6D:85:C0:51:D7:82:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F57108096411F0B375879E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0-154.90.43.255
154.90.48.0/23
154.90.52.0-154.90.57.255
Signature Algorithm: sha256WithRSAEncryption
bd:b9:6d:cb:31:6d:55:ad:d6:4a:2c:70:b3:65:b8:51:6b:f9:
ee:41:a1:53:3c:2b:8a:17:93:a2:5b:a4:51:95:d1:a5:ff:32:
9e:4c:55:72:b7:b1:cd:9c:c3:ea:f2:42:77:34:6c:b3:08:9b:
68:d2:ce:e3:46:ce:49:70:88:86:6c:8a:23:66:40:ce:b8:69:
e3:47:e2:28:6a:91:8a:73:3c:69:8a:8a:b8:77:ac:0e:ab:a7:
a4:91:5d:c7:b7:95:b6:1f:28:4e:be:98:6b:d1:41:cc:0e:b4:
c8:11:da:68:d6:fd:e6:25:d9:b3:c7:11:01:54:53:5b:06:a5:
66:26:54:5c:11:45:ef:89:65:ae:d9:f1:5b:5a:a2:4e:ac:ee:
f0:9b:f5:54:96:25:21:fb:f8:ae:9c:24:56:1e:e7:bb:a6:ac:
d1:e2:d0:e9:64:1c:fe:a5:67:78:54:69:64:31:00:e3:39:44:
08:d4:51:1b:e2:5f:a9:af:f0:56:5f:26:5e:0c:04:ba:94:fd:
db:5d:6b:e3:5c:f7:79:06:e6:a3:7c:2e:87:df:08:63:ee:17:
7c:21:57:97:19:44:9c:cb:89:ea:7e:84:eb:4a:93:46:95:d8:
8b:fa:b9:e1:45:1a:83:88:48:6c:96:a1:8d:ce:5f:01:6f:8c:
f5:32:aa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:36 2025 by rpki-client