Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91721B78269611F09210299FDAE4EC9C.roa
File: 91721B78269611F09210299FDAE4EC9C.roa (raw, json)
Hash identifier: LhNdzmfqZSqbzg7N/nqWjecVrwyXfJLhV7XM2APOCzY=
Subject key identifier: F8:7F:2E:9E:8D:F7:86:27:76:C2:2F:92:7C:00:1D:6F:BA:E8:ED:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91721B78269611F09210299FDAE4EC9C.roa
Signing time: Thu 01 May 2025 14:14:18 +0000
ROA not before: Thu 01 May 2025 14:14:12 +0000
ROA not after: Fri 28 Apr 2028 14:14:12 +0000
asID: 17561
IP address blocks: 154.93.169.0/24 maxlen: 24
154.93.170.0/24 maxlen: 24
154.93.171.0/24 maxlen: 24
154.93.172.0/24 maxlen: 24
154.93.173.0/24 maxlen: 24
154.93.174.0/24 maxlen: 24
154.93.175.0/24 maxlen: 24
154.93.176.0/24 maxlen: 24
154.93.177.0/24 maxlen: 24
154.93.178.0/24 maxlen: 24
154.93.179.0/24 maxlen: 24
154.93.180.0/24 maxlen: 24
154.93.181.0/24 maxlen: 24
154.93.182.0/24 maxlen: 24
154.93.183.0/24 maxlen: 24
154.93.184.0/24 maxlen: 24
154.93.185.0/24 maxlen: 24
154.93.187.0/24 maxlen: 24
154.93.188.0/24 maxlen: 24
154.93.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97816 (0x17e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 14:14:12 2025 GMT
Not After : Apr 28 14:14:12 2028 GMT
Subject: CN=681381ba-301d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:a0:c7:68:55:14:7c:e2:4f:ca:b8:40:db:
7c:76:3f:9a:38:08:c0:38:49:78:88:65:fa:78:1f:
3f:64:e3:89:8d:94:2a:7d:46:76:2a:c3:64:8a:a2:
f2:a5:56:4d:e5:82:78:21:a4:e0:3a:4b:e1:09:1e:
c0:51:66:89:99:a8:96:41:41:8c:c1:30:2a:1c:2a:
51:21:08:51:a6:90:65:68:65:e8:ed:51:59:73:89:
6a:a6:68:92:8b:c1:d9:d0:cc:9e:d1:e3:98:16:92:
14:0c:a8:83:7d:5c:7c:bc:b0:af:42:ee:3f:dc:0a:
f1:e6:0b:d4:fe:bc:17:3a:8c:f9:8d:f4:e6:dd:01:
f9:6b:63:e1:68:e7:7e:b1:d1:ed:60:f0:6d:5e:7f:
25:9c:05:5f:5c:43:af:c2:ec:47:f2:07:65:a3:8b:
c3:5e:6f:e1:27:91:41:04:50:7f:84:cd:03:ae:5d:
33:e6:50:f6:0c:d2:fd:43:f3:2d:d6:3a:ec:0c:41:
c5:a2:05:70:76:4b:fa:43:94:ee:8b:ca:f4:92:9e:
16:2b:43:ca:3d:e1:87:17:5a:3b:36:7c:8b:16:41:
04:27:b8:29:a4:9d:71:78:e3:f8:b9:6b:94:bd:4f:
44:d5:5e:f7:16:d2:ff:4b:a8:0c:36:5c:fc:63:9e:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:2E:9E:8D:F7:86:27:76:C2:2F:92:7C:00:1D:6F:BA:E8:ED:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91721B78269611F09210299FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.169.0-154.93.185.255
154.93.187.0-154.93.189.255
Signature Algorithm: sha256WithRSAEncryption
3d:18:18:e3:cd:f6:86:38:14:ed:70:f2:e4:83:52:8e:e2:c2:
37:e6:83:e3:90:6d:b7:c6:83:7d:b4:98:c1:b9:52:ba:b2:ae:
06:59:71:45:28:00:4d:8a:fe:ee:31:fd:cf:1d:b1:5c:c4:b8:
cf:e3:92:60:dd:85:e9:3a:24:3a:fd:07:25:cb:4b:14:a3:f8:
3a:4c:53:a2:24:db:b6:eb:9f:41:ff:21:2d:ab:01:ea:18:c2:
1c:9c:15:8e:c6:71:98:35:b7:ca:bf:21:1a:3a:a9:4b:7c:d9:
ab:ed:35:21:97:88:eb:6e:7f:87:11:5d:57:da:ec:46:b8:e6:
d8:b2:3e:b0:d1:6b:21:b9:f8:b4:0e:d0:ab:61:b6:38:d5:d4:
87:f4:8f:bb:33:76:a4:3e:0a:a4:b0:08:e0:d7:17:ee:cc:19:
e3:23:12:05:e6:08:57:29:96:57:e7:e8:e8:88:db:16:ef:47:
eb:77:16:18:fa:2d:a3:8b:15:68:c8:07:ba:5b:63:99:3f:0d:
f5:79:08:94:d3:66:03:ca:4a:ca:d2:35:1c:05:1f:89:c9:f3:
4d:8e:7e:fc:9d:e9:4a:c4:0e:db:51:7c:63:fa:64:28:75:22:
27:69:de:63:a9:ac:29:96:9e:2b:ab:cc:80:18:6c:63:bd:28:
05:5f:72:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 11 15:39:31 2025 by rpki-client