Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C60A91E265011F0AFCD51D5DAE4EC9C.roa
File: 9C60A91E265011F0AFCD51D5DAE4EC9C.roa (raw, json)
Hash identifier: LPj0e6X2fimFNh1zpS2SExQAW8yjR4FM00q01heHbDg=
Subject key identifier: B1:AE:4B:21:06:50:45:06:8A:B6:4D:35:0D:8C:DB:FE:65:3B:69:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C60A91E265011F0AFCD51D5DAE4EC9C.roa
Signing time: Thu 01 May 2025 05:53:32 +0000
ROA not before: Thu 01 May 2025 05:53:27 +0000
ROA not after: Tue 28 Apr 2026 05:53:27 +0000
asID: 984
IP address blocks: 154.215.250.0/24 maxlen: 24
154.215.251.0/24 maxlen: 24
154.215.252.0/24 maxlen: 24
154.215.253.0/24 maxlen: 24
154.215.254.0/24 maxlen: 24
154.215.255.0/24 maxlen: 24
154.221.128.0/24 maxlen: 24
154.221.129.0/24 maxlen: 24
154.221.130.0/24 maxlen: 24
154.221.131.0/24 maxlen: 24
154.221.132.0/24 maxlen: 24
154.221.133.0/24 maxlen: 24
154.221.134.0/24 maxlen: 24
154.221.135.0/24 maxlen: 24
154.221.136.0/24 maxlen: 24
154.221.137.0/24 maxlen: 24
154.221.138.0/24 maxlen: 24
154.221.139.0/24 maxlen: 24
154.221.140.0/24 maxlen: 24
154.221.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97710 (0x17dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 05:53:27 2025 GMT
Not After : Apr 28 05:53:27 2026 GMT
Subject: CN=68130c5b-e3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:25:d8:0c:e8:1e:8c:12:1a:89:9d:17:68:
92:f6:66:55:b0:a8:d9:9f:65:75:65:fe:49:4e:c1:
9f:37:98:8d:24:05:87:4f:b9:d2:99:31:9c:d3:1b:
06:d5:93:d9:8a:ed:91:d6:17:ef:23:3a:c4:d3:dd:
f1:09:72:e2:33:3f:34:98:89:d6:65:8f:72:47:7e:
b7:bd:b7:37:94:f7:84:93:0a:fd:5f:ee:40:0c:f0:
9b:0d:e5:32:61:6a:d9:62:d5:fd:5c:44:9d:62:e9:
78:05:bd:48:88:45:03:b3:4c:2c:8c:6c:1f:a7:79:
1e:df:f7:8b:e6:f0:80:30:ae:55:ec:e3:77:c2:e3:
fb:f2:8f:11:67:89:ba:19:34:36:e4:72:53:59:7b:
fc:68:3a:56:eb:3f:b7:2c:5d:b9:4d:a5:d8:11:a3:
7f:d1:8e:6a:1c:d5:67:02:c4:99:33:c0:33:d8:80:
8f:f3:69:f9:57:5e:0e:4e:3d:ae:14:4c:15:91:e6:
ff:26:bd:3f:cc:e7:8c:44:ca:45:f7:7c:ef:21:c3:
9a:13:93:fa:b6:6d:34:d2:18:91:b1:4c:7c:16:6f:
75:31:17:5d:ad:1c:6c:02:0e:27:b9:8b:d2:1d:98:
0f:32:d3:40:2d:10:b4:f1:e2:66:43:e9:64:9d:8b:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AE:4B:21:06:50:45:06:8A:B6:4D:35:0D:8C:DB:FE:65:3B:69:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C60A91E265011F0AFCD51D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.250.0-154.215.255.255
154.221.128.0-154.221.141.255
Signature Algorithm: sha256WithRSAEncryption
6b:41:a9:df:b1:3d:87:f3:39:9d:c3:bb:4a:f4:84:18:96:b8:
4f:87:93:b7:db:ac:44:f4:e3:1d:e6:4e:6d:71:2f:2c:05:4a:
45:28:a2:5d:e6:77:31:12:ca:e5:d0:2e:f3:e6:b8:5d:6a:41:
01:bd:54:cc:d8:94:1f:50:34:7f:fe:2d:11:9d:63:2e:6b:65:
fb:be:69:ab:9f:5d:17:a4:53:b3:19:05:2d:15:d2:06:f8:ef:
88:1d:a3:94:63:03:20:10:c9:e6:8e:ba:d8:bb:70:bf:b8:68:
f9:65:e5:f3:6f:64:64:7e:fb:96:b5:a3:31:82:c3:1e:7d:52:
3f:73:8d:a5:7f:26:09:d1:67:7f:1e:2d:c2:cb:a0:c6:81:ce:
e0:3d:21:c4:c9:4d:47:95:38:fa:dc:e5:1f:5a:e9:a7:16:cc:
97:64:6b:91:30:76:e4:2e:1a:c3:6a:cd:b4:60:6b:ea:44:6d:
96:71:1f:a9:1c:11:38:9d:fa:fe:be:40:8e:1b:9b:c0:88:9d:
df:47:14:99:d7:23:f1:0c:52:2c:02:97:55:5b:e4:d8:ab:0a:
bb:1b:29:8d:3c:ac:91:3e:94:16:8e:46:87:7b:96:04:e1:f5:
bd:f7:62:88:61:5a:84:ea:42:be:75:1c:b7:1e:1b:df:cf:07:
de:bb:58:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:17:21 2025 by rpki-client