Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06632492631711F0912BECC7DAE4EC9C.roa
File: 06632492631711F0912BECC7DAE4EC9C.roa (raw, json)
Hash identifier: iMqoH3dJjf6DBvjjn5MnorkggaqjI74BR9k1lc6I3kQ=
Subject key identifier: E6:AD:55:FD:41:0E:E1:44:98:CD:B9:69:C8:DA:3B:15:6F:D6:B7:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06632492631711F0912BECC7DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 14:05:00 +0000
ROA not before: Thu 17 Jul 2025 14:04:54 +0000
ROA not after: Sat 30 Aug 2025 14:04:54 +0000
asID: 62240
IP address blocks: 154.194.36.0/24 maxlen: 24
154.194.59.0/24 maxlen: 24
154.194.67.0/24 maxlen: 24
154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.194.117.0/24 maxlen: 24
154.194.207.0/24 maxlen: 24
154.195.113.0/24 maxlen: 24
154.195.141.0/24 maxlen: 24
154.195.142.0/24 maxlen: 24
154.196.68.0/24 maxlen: 24
154.196.70.0/24 maxlen: 24
154.196.76.0/24 maxlen: 24
154.196.77.0/24 maxlen: 24
154.196.78.0/24 maxlen: 24
154.196.79.0/24 maxlen: 24
154.196.80.0/24 maxlen: 24
154.198.63.0/24 maxlen: 24
154.198.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101956 (0x18e44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 14:04:54 2025 GMT
Not After : Aug 30 14:04:54 2025 GMT
Subject: CN=6879030b-9808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:0e:d5:d6:7e:0c:d0:a4:63:10:18:aa:15:
1c:2e:4e:37:e9:1a:bc:8c:97:47:29:aa:31:65:2c:
b2:b0:90:3f:04:70:b2:2a:f7:f0:c7:35:89:94:82:
3c:c3:75:fb:fb:34:b8:45:ec:38:30:2c:f3:af:85:
08:72:da:0b:74:86:11:fe:ee:45:86:78:89:fc:13:
aa:61:73:ad:c7:41:3f:72:68:43:eb:4b:6b:79:ac:
d2:b6:22:98:e1:ef:98:e2:13:27:86:b6:85:2f:77:
94:49:d5:83:2c:6d:54:e9:73:14:06:d5:eb:1a:d7:
6e:77:4b:2a:61:21:a7:f3:cd:28:b1:0f:5c:2c:95:
05:b8:5a:8a:50:aa:93:15:9c:7a:b9:71:84:9d:4c:
a4:7e:b1:6f:1f:00:9a:d4:00:2d:69:d2:9f:9f:32:
4d:07:49:7f:8a:6d:1e:d1:cf:e3:8f:72:5e:8d:b1:
da:bf:1b:2a:76:6d:37:98:49:0d:81:03:8b:04:31:
df:84:28:48:d6:bb:6a:64:c7:26:dd:22:52:64:5f:
9b:17:86:2d:c4:c7:c0:5a:45:6f:00:28:0e:77:cb:
ed:c5:31:57:29:8d:eb:f1:34:f7:20:fe:fb:d6:b0:
68:c3:3d:f6:e8:ee:36:a1:13:45:b4:5a:34:84:07:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AD:55:FD:41:0E:E1:44:98:CD:B9:69:C8:DA:3B:15:6F:D6:B7:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06632492631711F0912BECC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
154.194.59.0/24
154.194.67.0/24
154.194.109.0-154.194.111.255
154.194.117.0/24
154.194.207.0/24
154.195.113.0/24
154.195.141.0-154.195.142.255
154.196.68.0/24
154.196.70.0/24
154.196.76.0-154.196.80.255
154.198.63.0/24
154.198.191.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:c8:0c:4a:bd:01:16:fa:c8:9a:a1:97:97:c3:ee:31:fd:a5:
4d:0b:b3:74:dd:b9:55:e8:0f:1d:f8:30:96:79:27:45:db:cf:
56:80:e3:7b:08:f0:93:1f:d8:60:2c:87:9d:30:84:fd:c2:f9:
8e:ba:31:14:be:50:4d:b6:f4:6d:e6:f1:9b:ed:a5:7f:84:ee:
78:bb:87:42:e5:cb:83:12:01:94:83:7e:51:78:71:2c:01:ee:
95:f0:45:a5:cb:5f:14:44:1d:28:ea:b5:a1:96:f5:5b:3a:d9:
5a:cc:fc:92:89:53:9e:72:15:82:ea:62:5a:c9:e6:5f:cb:b7:
4f:3c:12:15:d6:1d:12:2f:f8:9f:d9:7d:32:ba:f3:b9:18:be:
4a:67:6d:10:64:65:e3:55:c5:5f:25:2f:52:59:9a:f4:9a:d5:
69:dd:b9:da:19:53:c2:cc:32:aa:4c:dc:b9:f9:e7:b8:84:be:
ef:ec:32:30:33:0f:65:d7:b3:a6:48:7e:b1:9c:2e:83:ea:e6:
d1:12:82:42:d0:a6:b9:6b:9d:35:69:b2:36:d0:2d:45:08:38:
91:f4:df:35:0a:07:6b:28:bd:ae:c1:be:d8:ed:d8:17:14:f7:
57:99:b4:08:d3:53:3a:be:c5:75:45:ef:5b:3c:fd:06:2c:e6:
0a:27:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:53 2025 by rpki-client