Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1FBBA60F65C11EF803AD75A762E951A.roa
File: D1FBBA60F65C11EF803AD75A762E951A.roa (raw, json)
Hash identifier: sjDeFgtJ23bJV4g1L84AJ7Y7yA1dLWLNWqTpvgxnUsc=
Subject key identifier: 6E:AC:C1:4B:49:42:E9:BC:D7:7E:51:07:9E:4C:22:0F:E0:C8:FC:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1FBBA60F65C11EF803AD75A762E951A.roa
Signing time: Sat 01 Mar 2025 05:19:59 +0000
ROA not before: Sat 01 Mar 2025 05:19:56 +0000
ROA not after: Sat 19 Feb 2028 05:19:56 +0000
asID: 17561
IP address blocks: 154.204.18.0/24 maxlen: 24
154.204.19.0/24 maxlen: 24
154.204.20.0/24 maxlen: 24
154.204.21.0/24 maxlen: 24
154.204.22.0/24 maxlen: 24
154.204.23.0/24 maxlen: 24
154.204.24.0/24 maxlen: 24
154.204.25.0/24 maxlen: 24
154.204.26.0/24 maxlen: 24
154.204.27.0/24 maxlen: 24
154.204.28.0/24 maxlen: 24
154.204.29.0/24 maxlen: 24
154.204.30.0/24 maxlen: 24
154.204.31.0/24 maxlen: 24
154.204.38.0/24 maxlen: 24
154.204.39.0/24 maxlen: 24
154.211.28.0/24 maxlen: 24
154.211.30.0/24 maxlen: 24
154.211.41.0/24 maxlen: 24
154.211.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93472 (0x16d20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 05:19:56 2025 GMT
Not After : Feb 19 05:19:56 2028 GMT
Subject: CN=67c298ff-39fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b5:e0:f2:92:e3:43:28:0c:1d:bf:66:77:12:
77:a1:d1:29:4a:5b:22:18:4e:7f:20:da:d6:99:fd:
00:37:9b:80:21:dc:3b:cf:e4:e9:89:da:1c:8f:6d:
44:dd:c8:0b:9b:47:5c:bd:76:c3:c2:f3:ca:91:23:
15:f6:22:07:5a:e7:79:c1:bb:5a:0c:1f:54:d7:59:
d5:97:16:42:6b:fa:0a:56:d6:44:a2:e7:e3:3c:08:
bd:5b:ea:8b:f2:6d:0e:f3:aa:33:e3:f4:65:68:c5:
09:e9:83:9d:e1:7a:75:24:b9:17:1b:31:68:8b:7e:
f6:12:36:9c:c5:1f:0c:f9:fd:fc:c9:72:6c:88:c7:
4b:00:b2:7f:3b:61:a3:dc:79:63:06:26:dc:58:f9:
a3:8c:8a:ce:fd:52:b5:9e:32:8d:13:eb:89:f2:38:
f7:35:b8:35:c2:59:cd:bc:ad:03:40:3b:c8:74:f1:
5c:8d:0a:aa:b6:cf:cd:86:bf:d8:1c:33:18:2c:a3:
31:67:83:0a:6b:18:89:20:5b:27:bb:a5:1c:fa:28:
a7:3e:a3:93:70:54:13:80:b9:98:01:b2:b1:e1:c8:
aa:f8:36:fc:5a:18:d4:12:93:27:b1:6f:ad:e1:16:
85:cb:5d:3e:4b:8f:c9:bd:52:78:1e:40:81:2e:40:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AC:C1:4B:49:42:E9:BC:D7:7E:51:07:9E:4C:22:0F:E0:C8:FC:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1FBBA60F65C11EF803AD75A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.18.0-154.204.31.255
154.204.38.0/23
154.211.28.0/24
154.211.30.0/24
154.211.41.0/24
154.211.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:71:ab:3e:de:be:45:d5:90:39:1b:6e:fc:f7:78:c8:ca:97:
cd:56:ca:d8:c3:3e:2c:91:77:54:67:fc:77:f9:6c:94:7a:42:
d1:1c:63:75:23:7a:51:ad:9c:d4:b6:85:cb:5d:23:5b:4f:e4:
d2:95:14:c2:fa:1a:a5:5b:ae:e0:7c:41:19:03:2f:a8:f2:99:
53:8a:03:1f:96:29:d1:db:9c:d9:80:1a:2d:ee:25:8b:73:86:
65:fb:d8:f4:7a:59:9e:7a:5b:05:90:52:33:9c:a1:a7:a1:e1:
0f:fa:ff:1d:8e:2e:5d:89:10:7b:51:0e:33:1f:d5:19:b9:1e:
58:06:b0:8c:00:5a:7e:19:61:09:c0:c2:83:6d:12:95:f5:0c:
2b:13:eb:76:f9:b5:b7:2d:69:a8:15:89:9f:1d:db:91:a2:63:
a7:8b:d3:23:b5:2f:35:5c:10:92:91:cb:5d:c9:5c:f9:06:f2:
a6:5e:70:21:e0:a1:17:8e:08:ef:ad:a4:1a:69:8e:a3:6a:7f:
c1:0b:da:41:c2:d9:4d:00:7f:76:dd:70:4a:61:0e:dc:f3:db:
23:03:4b:29:04:cc:c8:be:ee:a6:fc:4f:3a:f5:08:92:09:fa:
02:ad:41:72:ab:6d:77:c9:95:70:58:2f:62:d9:76:13:52:06:
c1:d8:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:05:30 2025 by rpki-client