Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4FABE34F64E11EF815D787D762E951A.roa
File: F4FABE34F64E11EF815D787D762E951A.roa (raw, json)
Hash identifier: EndEmfxuMX/aPr9hZtd29DnQEfgqMfD5Nl1HSQ9HPd8=
Subject key identifier: AD:7D:4E:2E:9A:90:4C:31:E1:E3:1D:30:3E:13:BB:2C:78:24:13:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4FABE34F64E11EF815D787D762E951A.roa
Signing time: Sat 01 Mar 2025 03:40:45 +0000
ROA not before: Sat 01 Mar 2025 03:40:41 +0000
ROA not after: Thu 19 Feb 2026 03:40:41 +0000
asID: 984
IP address blocks: 154.222.85.0/24 maxlen: 24
154.222.87.0/24 maxlen: 24
154.222.88.0/24 maxlen: 24
154.222.91.0/24 maxlen: 24
154.222.94.0/24 maxlen: 24
154.222.95.0/24 maxlen: 24
154.222.97.0/24 maxlen: 24
154.222.100.0/24 maxlen: 24
154.222.103.0/24 maxlen: 24
154.222.104.0/24 maxlen: 24
154.222.106.0/24 maxlen: 24
154.222.108.0/24 maxlen: 24
154.222.110.0/24 maxlen: 24
154.222.111.0/24 maxlen: 24
154.222.115.0/24 maxlen: 24
154.222.117.0/24 maxlen: 24
154.222.120.0/24 maxlen: 24
154.222.121.0/24 maxlen: 24
154.222.122.0/24 maxlen: 24
154.222.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93428 (0x16cf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 03:40:41 2025 GMT
Not After : Feb 19 03:40:41 2026 GMT
Subject: CN=67c281bd-f23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:60:8a:b2:67:1a:58:f5:38:bd:e6:2f:c4:
aa:19:33:fc:cf:4b:46:c9:d0:30:69:fa:48:8b:0d:
21:4a:75:11:0e:88:7e:e0:1f:2b:bf:76:c4:ea:4d:
82:b7:44:f3:fe:ef:7c:01:8a:d0:3b:6b:1d:da:b7:
85:a0:a4:0e:99:15:72:99:90:11:da:31:9a:17:c9:
e1:7b:eb:7b:f6:af:d5:13:ff:c8:a1:74:d0:07:fe:
5d:a9:5b:c7:8c:a3:28:6b:6b:f9:01:2d:bb:63:58:
50:e8:98:34:6b:45:0f:13:19:e2:3b:42:2a:fa:2b:
18:4f:d1:98:15:85:d8:56:75:ab:67:e3:17:6d:f5:
54:ea:17:7c:2b:93:11:a1:9e:92:04:ab:1b:f3:4b:
f9:5e:b1:51:62:80:0f:72:ed:fa:01:09:91:25:29:
1c:af:e1:a3:e1:c6:de:4f:e7:c1:85:77:47:bf:0e:
bb:8c:65:e4:e3:df:a7:64:ad:0b:f2:d1:51:38:55:
25:96:2b:91:73:5e:16:41:97:4b:bc:57:de:00:d6:
ac:6c:08:82:89:08:e4:ae:e8:4e:eb:8a:17:c4:09:
12:ad:60:49:7d:e7:68:0c:df:4c:61:4a:e3:b9:7d:
bf:e1:cf:7c:49:2c:e0:9a:b1:bf:3f:ac:68:dc:d4:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7D:4E:2E:9A:90:4C:31:E1:E3:1D:30:3E:13:BB:2C:78:24:13:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4FABE34F64E11EF815D787D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.85.0/24
154.222.87.0-154.222.88.255
154.222.91.0/24
154.222.94.0/23
154.222.97.0/24
154.222.100.0/24
154.222.103.0-154.222.104.255
154.222.106.0/24
154.222.108.0/24
154.222.110.0/23
154.222.115.0/24
154.222.117.0/24
154.222.120.0-154.222.122.255
154.222.131.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:ce:f0:01:09:fe:a4:20:7e:f3:08:ad:c7:fe:e5:9d:60:a6:
ba:03:88:ef:eb:66:23:c9:d0:3b:4b:80:d5:3b:b5:cd:ec:65:
6d:78:5f:79:df:41:49:04:27:2c:eb:ae:28:94:97:0d:a8:cd:
c8:66:93:dd:c8:7d:14:96:fa:7f:45:76:79:a4:c4:b1:b1:96:
7a:3a:ab:e3:1d:a3:1d:e8:fe:c7:4c:a7:e9:33:ed:0e:73:31:
d5:97:6a:88:b7:f4:b7:08:14:b9:c0:0c:a3:b2:63:34:a8:db:
c7:53:3a:02:a8:4c:94:da:bf:48:26:b0:47:e9:da:e8:91:14:
0a:d1:92:dc:7e:be:60:8d:af:ab:16:7b:14:f2:7b:b2:15:1a:
1f:ad:f4:49:96:4b:77:07:6a:00:c9:08:76:7f:cf:cd:9b:a4:
0b:c0:0c:47:0b:e4:b3:9f:5d:54:96:c8:57:4b:0a:c8:d1:2c:
b7:a9:da:a2:9a:b3:d4:11:31:56:50:ff:12:91:fe:2c:5d:2d:
88:8d:01:6f:6f:b9:a1:bb:cf:d5:80:79:c6:d6:92:53:c3:ff:
9a:86:8a:cd:11:ab:79:2b:e4:78:ca:a6:1a:fc:b9:16:4d:6c:
b2:04:6c:4e:8d:0b:c2:ba:68:72:2a:30:02:12:39:0b:c0:be:
cc:7f:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:52 2025 by rpki-client