Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B59F556630C11F0B3F8BC82DAE4EC9C.roa
File: 2B59F556630C11F0B3F8BC82DAE4EC9C.roa (raw, json)
Hash identifier: RbSLeEmkGJ+GTSKcsnLgn9HtJS7OjfD1xAkEyLkny78=
Subject key identifier: BA:46:80:49:A3:9E:1F:1C:EA:95:D7:F8:52:E9:F9:DD:8F:D4:00:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B59F556630C11F0B3F8BC82DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 12:47:17 +0000
ROA not before: Thu 17 Jul 2025 12:47:12 +0000
ROA not after: Sat 30 Aug 2025 12:47:12 +0000
asID: 62240
IP address blocks: 154.195.6.0/24 maxlen: 24
154.195.7.0/24 maxlen: 24
154.195.16.0/24 maxlen: 24
154.195.17.0/24 maxlen: 24
154.195.18.0/24 maxlen: 24
154.195.19.0/24 maxlen: 24
154.195.20.0/24 maxlen: 24
154.195.21.0/24 maxlen: 24
154.195.22.0/24 maxlen: 24
154.195.23.0/24 maxlen: 24
154.195.178.0/24 maxlen: 24
154.195.179.0/24 maxlen: 24
154.195.180.0/24 maxlen: 24
154.195.181.0/24 maxlen: 24
154.195.182.0/24 maxlen: 24
154.195.183.0/24 maxlen: 24
154.195.184.0/24 maxlen: 24
154.195.185.0/24 maxlen: 24
154.195.186.0/24 maxlen: 24
154.195.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101936 (0x18e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 12:47:12 2025 GMT
Not After : Aug 30 12:47:12 2025 GMT
Subject: CN=6878f0d5-c9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:aa:19:52:58:6b:10:aa:13:a3:35:71:45:
9d:c4:72:c2:c4:a0:98:7a:9d:1f:02:a6:71:bf:b6:
36:89:88:b2:33:c7:6e:26:e7:c1:d8:9b:7b:dd:eb:
41:6e:3b:f0:5e:44:ea:af:80:64:6f:a5:1c:4b:39:
66:bd:2e:61:f3:82:9d:b7:07:4e:83:6a:ae:a4:fd:
3e:65:5a:cb:e2:af:1d:74:01:b3:b4:e8:fc:b3:af:
4e:7d:6b:e1:ca:5a:19:60:6a:35:fd:70:e5:a4:c9:
7d:61:4f:b9:45:2f:b0:75:e1:0a:00:80:29:28:b2:
bb:43:47:a6:13:f6:cd:4f:7e:69:09:56:ce:aa:01:
a0:6e:b3:27:56:3a:5f:7a:18:12:24:fa:12:9c:13:
23:23:fa:79:ce:3e:57:00:25:a6:51:7e:4a:6f:73:
e3:41:0f:a9:99:55:00:e7:2d:ca:66:5f:ce:25:a3:
42:e9:ae:88:0f:c5:17:cb:e1:af:13:64:10:96:96:
3e:18:4e:79:7c:90:79:d9:d1:c0:8f:ae:8f:f8:9d:
0f:d7:12:cb:33:e9:78:6d:e1:13:94:bd:e2:48:ac:
ef:b8:33:c2:0a:bf:2d:2f:ed:7f:1e:22:59:6f:72:
20:e0:45:d4:5a:34:b9:ec:bc:23:70:f4:c7:e3:20:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:46:80:49:A3:9E:1F:1C:EA:95:D7:F8:52:E9:F9:DD:8F:D4:00:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B59F556630C11F0B3F8BC82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.6.0/23
154.195.16.0/21
154.195.178.0-154.195.187.255
Signature Algorithm: sha256WithRSAEncryption
04:d1:b7:a8:89:69:86:fa:2f:02:05:b3:33:98:c0:d8:a5:86:
26:eb:80:b7:97:e0:5e:38:69:d4:7c:47:79:5a:a6:83:8f:10:
d4:04:66:45:35:f5:4d:3d:cb:0d:a0:40:28:41:95:dc:96:fd:
10:4c:fc:2b:1a:67:0c:24:1f:98:45:ea:53:76:66:57:42:64:
4f:27:ff:9f:aa:b9:ac:76:03:9d:03:71:96:a1:6e:6c:07:a5:
7c:f2:6c:82:9b:d1:ab:fb:79:2b:ae:78:5d:a4:b3:d7:0c:82:
97:91:2d:f5:ac:5a:b4:ac:fe:41:8c:19:1b:c5:34:82:42:1c:
c9:7a:1a:81:a5:72:d8:36:59:57:c1:21:60:cd:8c:d9:fe:b3:
a4:cd:ff:4b:9f:77:88:95:3a:87:9b:54:eb:95:c0:90:c6:de:
98:1b:ee:1e:d2:d9:40:6a:59:f9:0a:47:3d:6b:9f:07:15:17:
8a:90:3b:8f:04:2b:3f:b1:68:f2:ed:f7:0c:85:29:35:9c:86:
4d:ff:4c:30:b1:ec:87:dd:9b:45:6c:50:01:51:ff:b2:a6:85:
46:6b:d0:46:8e:e7:f4:c0:85:67:63:a8:a9:99:cc:56:c7:9f:
82:da:c6:06:e2:71:15:82:8d:02:9f:58:48:f7:ba:e8:7c:7a:
4c:98:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:13 2025 by rpki-client