Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/434DA728630E11F0B69AD98FDAE4EC9C.roa
File: 434DA728630E11F0B69AD98FDAE4EC9C.roa (raw, json)
Hash identifier: /oibt8QLfoVw+wB0fdjhx8MCNQL0vL/U9+fDQnIoGK0=
Subject key identifier: F7:58:B7:EE:AA:3A:7F:2E:0C:69:DC:C7:F8:3B:59:6C:7C:44:32:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/434DA728630E11F0B69AD98FDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 13:02:16 +0000
ROA not before: Thu 17 Jul 2025 13:02:11 +0000
ROA not after: Sat 30 Aug 2025 13:02:11 +0000
asID: 62240
IP address blocks: 154.195.2.0/24 maxlen: 24
154.195.3.0/24 maxlen: 24
154.195.97.0/24 maxlen: 24
154.195.98.0/24 maxlen: 24
154.195.99.0/24 maxlen: 24
154.195.101.0/24 maxlen: 24
154.195.102.0/24 maxlen: 24
154.195.103.0/24 maxlen: 24
154.195.104.0/24 maxlen: 24
154.195.105.0/24 maxlen: 24
154.195.106.0/24 maxlen: 24
154.195.107.0/24 maxlen: 24
154.195.109.0/24 maxlen: 24
154.195.110.0/24 maxlen: 24
154.195.114.0/24 maxlen: 24
154.195.115.0/24 maxlen: 24
154.195.119.0/24 maxlen: 24
154.196.83.0/24 maxlen: 24
154.196.84.0/24 maxlen: 24
154.196.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101940 (0x18e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 13:02:11 2025 GMT
Not After : Aug 30 13:02:11 2025 GMT
Subject: CN=6878f458-21d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:5a:7c:a8:ec:0d:fe:8d:e3:5c:23:78:eb:
9d:7a:ab:df:13:d0:96:94:e9:36:b9:17:7f:53:bd:
27:c4:d3:05:6f:cd:1e:6e:96:e5:8e:55:8c:c8:c0:
84:d8:8d:c1:94:46:72:7d:b1:f4:6a:d8:98:c9:1e:
90:88:0b:cb:72:88:6e:e0:1d:15:63:05:b5:2f:14:
2a:32:95:29:79:9b:66:3c:7d:4e:90:7c:68:2b:ca:
e1:aa:7d:ed:eb:bd:15:9c:17:42:a4:9e:1f:ec:e4:
a1:41:56:18:cb:9d:b3:84:28:e4:bb:bc:cb:ad:d0:
5a:ad:5d:eb:db:c9:a6:3d:81:b0:cd:30:99:9e:c8:
85:ba:02:b1:f5:89:c8:b5:31:5a:84:8a:0f:0e:7c:
39:6f:b9:dd:43:49:dd:89:72:13:1f:5f:68:df:69:
39:ea:4a:26:d4:bd:10:b6:71:4c:af:db:fe:9b:c4:
be:b2:e5:89:a3:8e:3a:75:3d:0f:16:8e:68:77:88:
a0:99:cd:d3:f3:56:0f:db:3f:64:e4:a7:59:04:79:
d7:fc:27:39:dc:39:aa:1a:85:b1:16:82:34:e4:5d:
29:6d:b7:1f:86:30:47:85:7a:17:37:f9:0a:40:42:
57:d2:ff:b3:dc:ce:c7:f1:fe:60:b2:5d:e2:1a:70:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:58:B7:EE:AA:3A:7F:2E:0C:69:DC:C7:F8:3B:59:6C:7C:44:32:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/434DA728630E11F0B69AD98FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.2.0/23
154.195.97.0-154.195.99.255
154.195.101.0-154.195.107.255
154.195.109.0-154.195.110.255
154.195.114.0/23
154.195.119.0/24
154.196.83.0-154.196.85.255
Signature Algorithm: sha256WithRSAEncryption
3f:5c:cc:76:cf:19:83:c0:dd:c4:9f:45:4b:1b:03:06:65:41:
f9:6d:45:23:c0:11:ae:1b:6f:d0:be:24:1b:6d:b7:3a:0c:b9:
a2:39:a7:33:b4:48:cc:73:c5:8d:0e:0a:bd:ed:97:a1:01:1f:
e3:5b:2f:6c:9b:a8:9d:b5:dd:aa:27:80:d9:7e:a1:c7:74:c9:
91:3c:87:ae:24:34:1e:e1:17:0c:88:f3:41:36:ab:aa:f9:eb:
54:8c:03:a4:63:be:32:67:2c:23:92:12:1b:a5:11:17:aa:42:
f6:9f:ee:c5:7d:85:1b:84:1e:ca:b6:a7:d1:97:aa:1c:6b:92:
49:95:3e:48:b0:8a:d7:37:9f:a5:a5:b4:df:a2:70:38:d1:83:
14:be:fc:da:fa:3d:02:5d:18:c4:a3:41:8e:5e:aa:e5:e0:09:
eb:46:8b:f7:f6:d4:ae:7a:6a:40:78:35:51:1a:6c:dd:75:9b:
92:81:47:c8:43:5b:dc:c8:ec:5b:eb:ed:a8:7d:d9:b5:d5:3a:
8e:60:0f:d1:73:06:68:f2:a3:6d:e6:b3:79:9d:c1:3b:ac:11:
4e:25:08:83:7a:11:9e:bd:4d:18:01:1a:b1:04:b5:06:63:41:
2f:a8:1d:59:b7:57:89:63:7a:44:56:92:95:9b:62:02:47:cf:
4d:a3:bb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:15 2025 by rpki-client