Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA237578268211F0812B979EDAE4EC9C.roa
File: EA237578268211F0812B979EDAE4EC9C.roa (raw, json)
Hash identifier: 4HMlWMJr3bBrr1nN7IcePIXqgAMA54+REQLd0MIWXiM=
Subject key identifier: 58:B1:FF:DA:75:E1:5F:2E:C1:FE:E5:F9:59:51:30:F2:C6:2C:8B:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA237578268211F0812B979EDAE4EC9C.roa
Signing time: Thu 01 May 2025 11:53:37 +0000
ROA not before: Thu 01 May 2025 11:53:32 +0000
ROA not after: Wed 26 Apr 2028 11:53:32 +0000
asID: 17561
IP address blocks: 154.84.31.0/24 maxlen: 24
154.84.144.0/24 maxlen: 24
154.84.145.0/24 maxlen: 24
154.84.146.0/24 maxlen: 24
154.84.148.0/24 maxlen: 24
154.84.149.0/24 maxlen: 24
154.84.150.0/24 maxlen: 24
154.84.151.0/24 maxlen: 24
154.84.168.0/24 maxlen: 24
154.84.169.0/24 maxlen: 24
154.84.170.0/24 maxlen: 24
154.84.171.0/24 maxlen: 24
154.84.173.0/24 maxlen: 24
154.84.176.0/24 maxlen: 24
154.84.177.0/24 maxlen: 24
154.84.178.0/24 maxlen: 24
154.84.179.0/24 maxlen: 24
154.84.182.0/24 maxlen: 24
154.84.183.0/24 maxlen: 24
154.84.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97778 (0x17df2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:53:32 2025 GMT
Not After : Apr 26 11:53:32 2028 GMT
Subject: CN=681360c1-1ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:2b:92:14:46:26:02:13:8d:ac:25:fb:9a:
70:08:fd:a4:27:5f:de:13:ad:2c:42:4a:75:cf:c3:
e6:65:84:2a:20:73:1a:60:1f:59:6d:c0:d3:34:0b:
53:be:62:54:8b:fc:a4:f3:c8:e2:4c:03:4d:dd:b1:
9b:dc:13:ab:bd:0b:01:c4:56:a4:c3:e0:31:27:e6:
09:25:de:2d:89:e7:ef:0d:ae:10:75:12:64:02:54:
b8:09:1c:7d:a9:b8:26:8c:08:d5:41:8d:72:fa:0d:
12:fd:62:f3:70:ce:2d:1d:47:37:e2:b4:77:83:13:
ef:ca:59:d6:65:ec:7c:7c:0a:20:3d:97:ce:12:91:
cd:4f:7a:51:87:31:05:bb:9d:b7:77:86:5a:85:09:
91:a6:eb:22:88:2e:36:ab:bf:36:bb:41:c6:d9:a6:
f8:74:cb:67:da:70:02:34:ae:20:fb:35:a0:ce:f8:
76:a0:f0:fb:51:84:69:71:a5:9e:6f:03:66:88:b2:
d8:8d:93:61:8f:78:93:9b:63:55:42:05:5b:ee:3d:
42:48:3c:cb:4a:2f:e1:33:ee:56:10:1c:e5:d1:63:
fe:72:ff:4e:fd:21:f0:e0:de:59:19:fa:04:f4:c2:
ba:0b:0f:6f:20:b4:a7:21:15:c1:9f:1d:6c:32:17:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B1:FF:DA:75:E1:5F:2E:C1:FE:E5:F9:59:51:30:F2:C6:2C:8B:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA237578268211F0812B979EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.31.0/24
154.84.144.0-154.84.146.255
154.84.148.0/22
154.84.168.0/22
154.84.173.0/24
154.84.176.0/22
154.84.182.0-154.84.184.255
Signature Algorithm: sha256WithRSAEncryption
61:f6:44:c7:48:37:9e:e1:6b:74:a6:69:b7:d5:46:6e:da:0d:
9c:a1:b4:00:89:74:c4:27:a4:15:c8:a8:8b:9e:8c:e5:b2:a8:
c1:65:e5:d9:56:a6:fc:62:99:2e:8f:12:9c:a1:22:b3:39:3f:
10:36:c2:50:00:cd:5f:e0:e2:19:f0:3b:17:17:d1:6e:de:08:
bb:7f:4d:43:36:45:d8:1e:ea:bd:70:c0:f3:f9:cc:77:8d:85:
b4:3d:66:29:ef:0b:f2:69:5b:a1:a0:fe:e5:5d:17:71:ff:17:
40:da:34:e9:30:00:7e:28:99:dd:e9:62:35:a4:e5:c7:36:75:
2c:a5:7c:7b:a5:d1:f9:0f:3c:68:2d:1c:dd:7a:68:a0:0b:65:
bc:3f:98:e0:83:22:91:1b:2f:36:d3:14:1f:f7:ee:3c:1e:c4:
11:5b:a4:82:7c:a4:14:17:93:20:69:8f:37:b2:c6:70:1d:df:
0b:4c:e7:82:44:24:76:49:30:e2:18:ab:cf:53:c9:b4:a1:ea:
0a:c9:12:72:88:6e:50:17:42:0c:71:ca:0c:53:f0:67:68:2e:
90:ce:06:71:b8:ff:13:ca:35:22:4d:3e:6c:98:8e:e4:68:19:
69:4a:ae:de:9a:21:e8:54:68:f0:5a:8f:26:3b:2c:05:67:93:
78:26:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:36:32 2025 by rpki-client