Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA570968F56F11EFA36C006F762E951A.roa
File: EA570968F56F11EFA36C006F762E951A.roa (raw, json)
Hash identifier: Jo6SigpRG7Am2l+Ug5Tq1V3m2XWaZyUL0ljZn/GLmzE=
Subject key identifier: DC:46:23:65:01:B9:4C:7A:AF:64:84:1B:2C:3D:11:44:2C:2B:6C:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA570968F56F11EFA36C006F762E951A.roa
Signing time: Fri 28 Feb 2025 01:04:09 +0000
ROA not before: Fri 28 Feb 2025 01:04:05 +0000
ROA not after: Thu 19 Feb 2026 01:04:05 +0000
asID: 984
IP address blocks: 154.204.92.0/24 maxlen: 24
154.204.93.0/24 maxlen: 24
154.204.94.0/24 maxlen: 24
154.204.95.0/24 maxlen: 24
154.204.99.0/24 maxlen: 24
154.204.103.0/24 maxlen: 24
154.204.105.0/24 maxlen: 24
154.204.106.0/24 maxlen: 24
154.204.107.0/24 maxlen: 24
154.204.108.0/24 maxlen: 24
154.204.109.0/24 maxlen: 24
154.204.110.0/24 maxlen: 24
154.204.112.0/24 maxlen: 24
154.204.114.0/24 maxlen: 24
154.204.115.0/24 maxlen: 24
154.204.116.0/24 maxlen: 24
154.204.117.0/24 maxlen: 24
154.204.118.0/24 maxlen: 24
154.204.119.0/24 maxlen: 24
154.204.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92595 (0x169b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 01:04:05 2025 GMT
Not After : Feb 19 01:04:05 2026 GMT
Subject: CN=67c10b89-7505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:10:62:40:62:cf:77:67:3c:e7:87:bc:41:e7:
09:31:42:87:57:b0:29:6f:9f:cb:c9:84:2d:af:d6:
c9:17:79:45:f2:aa:86:11:0b:87:72:68:60:4c:a1:
c1:60:59:c5:f1:57:2d:12:92:2a:42:2b:98:52:16:
fd:ee:40:95:fd:65:09:e2:ef:f4:d9:12:10:c7:ff:
f9:50:13:8a:d4:62:7b:56:af:ab:38:63:19:47:8b:
e3:6c:1a:e3:e1:56:b1:70:ef:4d:98:d4:a5:c8:07:
31:a1:cc:72:7c:c8:6f:07:7b:d9:8f:a5:58:cb:d6:
e7:71:77:45:e3:71:89:70:9c:85:f6:7a:c8:5b:a1:
51:e8:58:f3:2c:8c:97:a3:19:da:7b:da:a8:88:ff:
1b:cc:1e:e6:c4:85:ef:c1:ac:c9:2a:3d:1d:98:6e:
b5:69:80:a8:fb:05:70:36:bd:42:32:be:14:40:48:
3c:71:92:7d:51:1e:4b:c6:9f:80:1f:91:2d:12:64:
64:64:8f:3a:bf:61:63:21:75:4a:e3:99:16:d0:18:
af:9a:f7:d4:13:ab:5a:a8:75:92:f1:d4:ec:65:10:
9c:28:92:93:31:0f:1d:b8:b9:0c:df:20:4c:5a:c9:
d0:72:da:d0:13:cc:e4:ed:da:7b:30:f4:5c:9a:f2:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:46:23:65:01:B9:4C:7A:AF:64:84:1B:2C:3D:11:44:2C:2B:6C:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA570968F56F11EFA36C006F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.92.0/22
154.204.99.0/24
154.204.103.0/24
154.204.105.0-154.204.110.255
154.204.112.0/24
154.204.114.0-154.204.119.255
154.204.122.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:24:db:59:09:88:1a:32:4c:7e:35:6b:72:23:a1:6c:f6:98:
a9:b4:1b:8e:b4:72:76:e8:de:6f:13:fe:60:eb:05:00:ab:99:
27:0c:b1:5e:ae:16:7e:3a:ff:f5:ad:61:af:57:1a:42:cb:36:
13:13:3f:24:e0:24:d6:42:b0:7e:dd:3a:ff:61:fd:8f:1f:3e:
74:22:61:c0:e5:52:29:f6:c6:87:dd:81:fd:25:51:52:0a:f9:
24:c9:91:51:15:be:0d:c1:eb:29:a0:38:af:94:72:c4:85:58:
ff:51:90:bd:36:73:4a:43:45:cf:13:ac:3a:44:45:80:b7:93:
02:86:fa:4e:4c:4e:c0:3b:21:ef:48:cd:90:ff:fb:aa:d7:c2:
d1:73:7e:71:b8:d8:b4:53:71:b4:bd:1b:e8:98:b5:af:85:60:
b0:f3:dc:65:e2:fa:90:53:60:64:4d:1f:dc:83:53:39:fe:58:
1f:97:22:3d:45:fd:d0:88:44:0b:96:a4:a9:7e:98:0c:59:12:
4b:79:69:da:1a:0e:a4:9c:f6:ac:10:0c:36:de:65:d4:77:01:
ae:64:09:9e:4b:c0:78:c4:81:d6:21:c1:8a:4b:73:f0:49:71:
e4:76:da:a7:7b:20:09:1d:06:d2:dd:e5:83:7a:69:4c:82:bc:
08:a2:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:22 2025 by rpki-client