Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5ED8FF6F5A111EFA5170755762E951A.roa
File: D5ED8FF6F5A111EFA5170755762E951A.roa (raw, json)
Hash identifier: NOVEpjFr34o56pCyEE2IbfKyTJGA16bZzqGTJcCI7zk=
Subject key identifier: AF:C1:F6:47:90:DD:D0:EA:82:C2:2B:EF:C8:21:DA:19:6B:AE:E8:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5ED8FF6F5A111EFA5170755762E951A.roa
Signing time: Fri 28 Feb 2025 07:01:30 +0000
ROA not before: Fri 28 Feb 2025 07:01:26 +0000
ROA not after: Thu 19 Feb 2026 07:01:26 +0000
asID: 984
IP address blocks: 154.88.108.0/24 maxlen: 24
154.88.109.0/24 maxlen: 24
154.88.110.0/24 maxlen: 24
154.88.111.0/24 maxlen: 24
154.88.112.0/24 maxlen: 24
154.88.113.0/24 maxlen: 24
154.88.114.0/24 maxlen: 24
154.88.115.0/24 maxlen: 24
154.88.116.0/24 maxlen: 24
154.88.117.0/24 maxlen: 24
154.88.118.0/24 maxlen: 24
154.88.119.0/24 maxlen: 24
154.88.120.0/24 maxlen: 24
154.88.121.0/24 maxlen: 24
154.88.122.0/24 maxlen: 24
154.88.123.0/24 maxlen: 24
154.88.124.0/24 maxlen: 24
154.88.125.0/24 maxlen: 24
154.88.126.0/24 maxlen: 24
154.89.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92651 (0x169eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 07:01:26 2025 GMT
Not After : Feb 19 07:01:26 2026 GMT
Subject: CN=67c15f4a-98ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:67:c2:47:76:06:1f:74:63:61:1a:ef:f2:
65:72:1d:c2:66:ef:55:d3:af:ab:e5:72:99:14:b3:
7c:14:26:3c:a8:8c:c8:8a:2b:46:15:61:9b:69:f3:
b8:55:c8:ef:93:94:36:5f:4f:24:a5:9b:c2:53:10:
32:43:8b:0b:54:db:6d:b1:9f:9c:73:28:e5:11:ce:
e3:4d:05:d8:2a:57:97:5b:7f:34:1f:2e:c1:3b:9c:
a2:79:18:a5:51:64:bd:c4:82:99:4c:f1:62:fb:5a:
d7:9b:39:69:17:24:f8:e6:d9:41:8a:c9:26:5e:b3:
82:d0:09:a0:b5:70:d1:25:1b:b2:70:0e:16:b0:6e:
0b:44:25:ab:69:14:3e:b8:6f:5c:eb:8d:c1:7f:50:
76:5b:85:e4:1a:28:49:d0:65:0a:c6:28:26:77:d1:
1c:ac:b3:1e:fb:c5:c4:5a:5e:e3:70:4a:59:e1:5a:
94:97:ae:a5:83:83:7e:2e:c4:99:f0:19:a8:3c:43:
8c:ff:96:02:72:7a:8b:a7:19:c3:c3:f9:24:bd:dc:
77:58:a2:dc:2d:01:41:27:05:2a:3e:d9:c3:cd:87:
56:14:34:9b:12:16:7d:9c:6b:62:57:70:1c:ee:ab:
9e:85:2e:31:65:ef:87:29:da:5c:b4:b7:77:02:1f:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C1:F6:47:90:DD:D0:EA:82:C2:2B:EF:C8:21:DA:19:6B:AE:E8:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5ED8FF6F5A111EFA5170755762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.108.0-154.88.126.255
154.89.2.0/24
Signature Algorithm: sha256WithRSAEncryption
80:eb:3d:64:61:45:0c:33:03:d6:12:63:38:82:b9:2d:05:bc:
67:e6:49:e0:e4:1f:0c:62:d0:fd:75:d9:fb:68:f9:8d:93:30:
51:4d:7d:e8:de:c0:26:14:2b:6d:97:86:d0:9e:da:f2:cd:9c:
54:08:79:94:5a:ef:97:1f:5a:c9:8a:ea:c8:9b:d5:5f:75:bd:
2c:c4:0f:17:c5:1c:ee:45:cc:c0:a7:17:0d:a9:3d:d7:ed:b7:
aa:71:ce:29:c2:48:f3:93:9b:47:16:9e:69:44:a6:88:c1:cd:
19:3c:2f:8c:7d:19:07:1f:ee:40:74:26:c2:9c:54:00:01:97:
ff:2b:63:21:4a:34:fe:ae:c4:3c:7e:29:65:eb:00:ec:60:87:
bd:5d:75:3d:0a:4b:cc:93:93:58:dd:86:9e:21:17:79:0e:91:
68:71:1b:e8:ff:a2:61:2c:99:00:75:69:8b:1b:28:00:ef:ad:
08:5d:11:32:3c:dd:c4:70:d2:4c:d3:38:5a:02:f2:d4:e8:2b:
ee:27:94:b7:1d:12:65:72:12:33:b7:3f:68:93:25:ef:06:a5:
31:8c:87:f2:52:e7:a8:8a:41:fb:fa:52:44:80:4a:9c:75:38:
4d:02:42:80:61:b0:2d:85:1b:f8:0f:1e:ec:f9:cb:d5:be:9a:
24:53:67:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:42 2025 by rpki-client