Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26609D5A269B11F0B4ED77BFDAE4EC9C.roa
File: 26609D5A269B11F0B4ED77BFDAE4EC9C.roa (raw, json)
Hash identifier: inEe7G6/LCmsjl7wFWp1woz4yIQfecuahvDbvNKgHQo=
Subject key identifier: 43:2A:74:79:98:B3:6F:49:7C:F4:07:8D:EB:44:E6:5F:DA:8A:65:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26609D5A269B11F0B4ED77BFDAE4EC9C.roa
Signing time: Thu 01 May 2025 14:47:06 +0000
ROA not before: Thu 01 May 2025 14:47:01 +0000
ROA not after: Fri 28 Apr 2028 14:47:01 +0000
asID: 17561
IP address blocks: 154.95.134.0/24 maxlen: 24
154.95.135.0/24 maxlen: 24
154.95.136.0/24 maxlen: 24
154.95.137.0/24 maxlen: 24
154.95.138.0/24 maxlen: 24
154.95.139.0/24 maxlen: 24
154.95.140.0/24 maxlen: 24
154.95.141.0/24 maxlen: 24
154.95.142.0/24 maxlen: 24
154.95.143.0/24 maxlen: 24
154.95.144.0/24 maxlen: 24
154.95.145.0/24 maxlen: 24
154.95.146.0/24 maxlen: 24
154.95.147.0/24 maxlen: 24
154.95.148.0/24 maxlen: 24
154.95.149.0/24 maxlen: 24
154.95.150.0/24 maxlen: 24
154.95.151.0/24 maxlen: 24
154.95.152.0/24 maxlen: 24
154.95.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97824 (0x17e20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 14:47:01 2025 GMT
Not After : Apr 28 14:47:01 2028 GMT
Subject: CN=6813896a-6a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:16:d0:ef:35:b4:91:1f:08:bf:6a:95:5e:43:
1c:2e:4d:2b:36:84:01:4d:ef:00:76:68:a4:73:26:
fb:a7:8b:dd:5e:41:3c:6b:e6:f4:84:9d:98:78:38:
08:88:f3:31:6a:1f:32:48:dc:af:f0:4d:de:99:9c:
f4:71:fc:2c:09:f7:0a:b8:cd:c1:28:63:44:67:de:
c3:eb:d3:96:ae:5f:2e:50:0d:63:4f:e1:91:bc:e1:
3d:35:dd:8d:d5:05:4b:92:6b:5d:51:f0:2e:33:0d:
7f:aa:f9:45:2d:a3:11:9d:7a:16:d8:49:6f:2d:7a:
b0:0b:fc:78:dd:b9:22:ab:45:bc:3c:56:21:c9:f2:
60:bd:f6:d6:db:f2:95:9c:86:33:8b:0c:b0:27:4d:
2d:97:56:99:60:a0:96:c6:19:6a:6a:8e:1d:74:67:
57:3b:2d:4e:96:0b:5f:3c:4a:c3:1d:ad:48:19:2e:
81:40:98:4d:09:33:94:2f:ff:40:70:78:5d:ae:fe:
42:19:43:ed:ba:e1:4b:4b:20:32:e5:f0:1d:a1:f7:
7c:7b:e6:89:d8:52:0c:f4:88:96:bb:3c:c1:f3:67:
45:52:fb:2d:b5:af:69:0f:14:d1:ea:f7:0d:b6:2b:
af:f9:69:fe:7c:d4:d1:b0:a6:53:70:70:ee:5a:80:
6e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2A:74:79:98:B3:6F:49:7C:F4:07:8D:EB:44:E6:5F:DA:8A:65:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26609D5A269B11F0B4ED77BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.134.0-154.95.153.255
Signature Algorithm: sha256WithRSAEncryption
41:f1:50:dc:40:42:0f:43:9f:14:11:2d:48:e3:03:a5:73:8c:
b3:10:5c:b6:f4:f6:b9:e9:ed:90:65:8a:ad:b3:b0:b7:c6:38:
b5:65:b5:db:85:9b:4b:eb:84:9b:4f:a5:40:38:34:aa:de:94:
cb:58:51:ae:b3:bf:61:42:55:b6:52:cb:0f:24:79:13:39:9c:
b4:42:e3:08:3e:6d:63:2e:24:84:d1:ff:2e:30:6d:e7:7c:2c:
2c:e9:08:ca:f5:1d:5c:00:19:58:6a:6e:66:b1:7f:15:d9:9d:
13:a6:2f:ed:eb:0e:1f:58:d6:a1:04:d4:85:77:d8:d1:25:05:
a4:31:a0:50:62:fd:5d:70:06:fa:43:57:4f:be:ae:0d:a0:44:
65:f9:3a:b2:b9:7c:0a:74:fa:0a:a1:f2:63:4b:7b:8e:dd:7a:
89:a4:4f:3b:c8:88:62:a3:81:d0:64:35:67:96:93:6f:ae:e5:
6d:3e:91:10:1b:8c:ad:00:12:17:45:11:ef:62:36:b2:4a:c3:
1f:79:37:8e:2c:57:72:99:4e:0a:b4:9a:df:e8:3d:b7:3e:1e:
86:65:b5:92:de:9c:ff:09:be:f7:49:37:02:c9:88:c9:f5:6b:
e7:b2:2c:76:40:38:22:a4:e6:b0:99:1d:2b:4e:6b:2b:8b:e8:
4c:6a:64:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:13:44 2025 by rpki-client