Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40543298265611F084D1067BDAE4EC9C.roa
File: 40543298265611F084D1067BDAE4EC9C.roa (raw, json)
Hash identifier: pzoySRDVXLWAzTQ2990OHqvCMhlLwBvVav3fr3TrKGQ=
Subject key identifier: 07:4A:2C:E7:55:3C:03:15:0E:59:66:74:E5:C3:6E:BA:B7:F5:41:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40543298265611F084D1067BDAE4EC9C.roa
Signing time: Thu 01 May 2025 06:33:54 +0000
ROA not before: Thu 01 May 2025 06:33:49 +0000
ROA not after: Fri 01 May 2026 06:33:49 +0000
asID: 984
IP address blocks: 154.218.94.0/24 maxlen: 24
154.218.95.0/24 maxlen: 24
154.218.96.0/24 maxlen: 24
154.218.97.0/24 maxlen: 24
154.218.98.0/24 maxlen: 24
154.218.99.0/24 maxlen: 24
154.218.100.0/24 maxlen: 24
154.218.101.0/24 maxlen: 24
154.218.102.0/24 maxlen: 24
154.218.103.0/24 maxlen: 24
154.218.104.0/24 maxlen: 24
154.218.105.0/24 maxlen: 24
154.218.106.0/24 maxlen: 24
154.218.107.0/24 maxlen: 24
154.218.108.0/24 maxlen: 24
154.218.109.0/24 maxlen: 24
154.218.110.0/24 maxlen: 24
154.218.111.0/24 maxlen: 24
154.218.112.0/24 maxlen: 24
154.218.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97728 (0x17dc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 06:33:49 2025 GMT
Not After : May 1 06:33:49 2026 GMT
Subject: CN=681315d2-19c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:ab:46:87:17:b6:f8:95:68:72:74:f8:24:
44:39:85:35:bd:c4:13:12:dc:be:dd:ba:00:c8:9e:
18:9d:f4:4d:ed:a1:61:84:54:b0:f2:ce:88:2a:f6:
9c:b0:0e:6d:7f:6f:ed:5a:1c:56:23:f8:fb:94:02:
9c:31:4f:4e:a7:7e:e9:12:f9:64:f9:ce:a0:ea:2c:
53:4f:c1:6a:5c:29:27:3f:ca:8a:19:e9:b0:72:35:
f7:20:e8:fd:b4:57:5a:86:b9:2a:59:23:29:f6:f1:
a3:d8:c3:68:42:ec:ee:17:06:d2:e4:e1:d8:87:ce:
41:ac:c3:ee:3e:c6:d6:42:83:c2:80:52:c6:cc:40:
5a:18:1e:35:58:06:b7:c9:50:31:bb:37:ca:45:98:
7b:01:86:2d:f1:2e:32:9b:20:84:7c:08:37:e3:8d:
80:67:81:df:cb:31:68:2f:e6:ff:95:b9:93:52:8c:
d5:e6:78:a9:b1:5a:0f:d9:12:b3:5c:79:c1:5d:62:
ad:e7:8c:1b:32:c3:a8:bc:fa:07:76:25:67:f0:8c:
d8:7b:c5:80:a8:65:65:97:20:e6:8a:c0:db:6f:c8:
b1:ef:c5:c5:f7:82:92:b4:5a:3d:a2:0c:78:b2:b6:
f7:5f:c0:45:68:e8:01:2f:d5:36:25:e7:5c:4e:0c:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4A:2C:E7:55:3C:03:15:0E:59:66:74:E5:C3:6E:BA:B7:F5:41:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40543298265611F084D1067BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.94.0-154.218.113.255
Signature Algorithm: sha256WithRSAEncryption
5f:63:96:ee:a5:d2:10:e3:29:a9:89:5c:7a:e1:dc:a6:b3:a6:
7f:7a:33:fe:93:5a:c6:86:6d:81:0d:6f:99:aa:18:22:c3:98:
7d:89:96:0a:d2:73:20:8c:d7:b3:e2:d7:55:18:2e:99:c9:d4:
9e:dd:f7:f5:cc:f0:25:22:2e:8a:ae:b4:46:39:57:2a:ad:43:
f3:0b:48:2e:b4:db:62:79:83:f3:69:84:2a:5f:c7:38:6c:e9:
f6:06:49:7f:fa:11:1b:ed:f9:e0:4c:91:48:f9:f1:f1:ae:02:
54:51:2a:96:be:1d:46:ca:99:7f:2b:a3:dd:3d:72:5e:2c:b3:
a7:d7:68:31:1f:5a:b2:6c:b7:87:54:33:bb:b4:60:9f:29:d5:
7c:79:78:d4:1d:3f:24:c9:5e:df:6b:a8:fc:0b:2a:4a:68:22:
4f:d6:e1:99:87:77:9b:d8:e0:50:39:14:9d:6f:1f:77:5a:3e:
56:be:f5:96:3a:ea:3b:25:7c:06:86:41:50:d2:0e:3e:09:d2:
6f:1c:08:42:38:44:f3:56:b5:2f:c9:06:2a:3a:6c:aa:14:f5:
76:28:ec:11:e7:6f:7e:eb:fd:5f:f1:1a:41:7f:ba:62:2e:db:
2d:06:52:78:31:9d:e5:58:8d:51:98:6e:fa:db:16:f7:96:3e:
e3:02:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:11:25 2025 by rpki-client