Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5621422273611F0972AD8D6DAE4EC9C.roa
File: E5621422273611F0972AD8D6DAE4EC9C.roa (raw, json)
Hash identifier: gfexozKHqSjbbLTMFqatSkq8GYjARMUjhtfqnBatgs8=
Subject key identifier: 09:F7:6C:DB:16:83:53:C4:AE:26:E2:06:DC:71:30:FF:B5:50:82:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5621422273611F0972AD8D6DAE4EC9C.roa
Signing time: Fri 02 May 2025 09:21:58 +0000
ROA not before: Fri 02 May 2025 09:21:53 +0000
ROA not after: Mon 09 Jun 2025 09:21:53 +0000
asID: 203020
IP address blocks: 154.197.120.0/24 maxlen: 24
154.202.70.0/23 maxlen: 24
154.202.86.0/23 maxlen: 24
154.203.63.0/24 maxlen: 24
154.203.95.0/24 maxlen: 24
154.204.37.0/24 maxlen: 24
154.204.42.0/24 maxlen: 24
154.204.48.0/24 maxlen: 24
154.204.51.0/24 maxlen: 24
154.205.174.0/23 maxlen: 24
154.206.13.0/24 maxlen: 24
154.207.102.0/23 maxlen: 24
154.207.216.0/22 maxlen: 24
154.207.228.0/22 maxlen: 24
154.207.248.0/22 maxlen: 24
154.208.1.0/24 maxlen: 24
154.208.128.0/23 maxlen: 24
154.208.136.0/22 maxlen: 24
154.208.175.0/24 maxlen: 24
154.209.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97878 (0x17e56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 09:21:53 2025 GMT
Not After : Jun 9 09:21:53 2025 GMT
Subject: CN=68148eb6-44a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:0b:65:6b:36:8b:67:ef:01:63:43:59:1b:
64:5f:bc:f9:8c:a3:12:7a:85:29:95:fe:70:2d:34:
40:12:d5:5d:58:eb:b1:e6:c7:c4:fe:fe:72:51:f9:
8e:a7:04:12:35:85:5c:a2:36:d5:62:44:cc:cb:a3:
cd:09:34:94:26:d7:d8:dc:bc:cb:21:e6:a8:c8:06:
f2:e8:72:94:5b:56:34:15:9e:43:5a:04:a7:70:95:
df:24:3a:27:5b:54:5d:4d:7d:f8:27:4a:79:4d:ec:
8a:c8:9e:be:b5:fd:e5:56:86:10:da:f1:2d:50:c1:
92:a0:e1:5b:a1:0e:43:a7:6c:c2:17:7d:68:83:b1:
6f:39:f1:41:50:94:8a:76:03:fc:cc:50:21:f5:b1:
dc:99:d1:96:be:4d:9e:0e:95:2f:66:f0:82:5d:c2:
b9:68:a7:d2:ee:27:40:7a:46:4a:1c:3c:bb:43:e2:
1e:6a:6f:e9:86:5e:f6:15:89:d6:86:c3:ab:37:93:
df:4c:62:fb:bc:04:c6:cd:94:a5:cc:9b:dc:4c:d1:
9d:1b:a9:6e:be:74:d2:c6:4b:aa:2f:3d:be:28:45:
70:15:09:43:29:33:f9:8c:1d:7f:d3:2e:39:d9:e7:
ab:85:9c:a6:dd:81:09:d6:69:b8:55:06:62:85:4d:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:6C:DB:16:83:53:C4:AE:26:E2:06:DC:71:30:FF:B5:50:82:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5621422273611F0972AD8D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.120.0/24
154.202.70.0/23
154.202.86.0/23
154.203.63.0/24
154.203.95.0/24
154.204.37.0/24
154.204.42.0/24
154.204.48.0/24
154.204.51.0/24
154.205.174.0/23
154.206.13.0/24
154.207.102.0/23
154.207.216.0/22
154.207.228.0/22
154.207.248.0/22
154.208.1.0/24
154.208.128.0/23
154.208.136.0/22
154.208.175.0/24
154.209.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:6d:1a:cb:9c:20:de:be:ea:74:13:5d:42:e8:4a:ab:1f:5b:
ea:cd:44:c9:14:08:f9:57:5f:76:b2:47:19:0f:ad:c3:43:3e:
7c:ae:3f:f3:c9:b0:d2:dc:d0:be:c8:24:26:dd:b2:04:43:d8:
38:ad:6a:54:3f:31:0a:a0:14:fb:1f:75:ad:34:be:69:a8:21:
80:73:a1:f9:7f:00:1e:b3:77:53:17:80:5d:28:15:80:ea:60:
17:e9:28:ba:b2:23:eb:bc:c1:2b:ca:7b:f6:84:b7:9f:67:13:
bf:92:a4:27:07:1a:84:7e:7a:dd:8c:f9:23:67:cf:27:19:2b:
3c:1d:ed:ed:1e:48:99:db:2f:7f:87:71:e8:79:e2:0e:f7:98:
7f:89:24:4d:90:2e:ca:7b:a7:99:ac:50:50:d5:d2:2e:09:46:
26:3e:f2:76:a7:ce:2c:1a:f1:a6:3a:8f:d1:b5:23:09:4f:3d:
c2:37:f0:f3:c6:27:10:d3:b8:c2:58:05:45:85:3c:29:21:61:
57:db:ad:27:36:a2:5e:7f:30:2f:80:04:e2:6a:ff:78:6c:85:
51:2a:c6:2d:e6:b3:a1:06:c6:0f:cf:99:fb:f8:c9:b2:25:cb:
50:73:1e:b2:49:18:f3:e3:4a:43:ed:27:f2:23:01:0f:2c:d1:
e6:84:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:07:40 2025 by rpki-client