Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89C96A68631111F0BE4547A5DAE4EC9C.roa
File: 89C96A68631111F0BE4547A5DAE4EC9C.roa (raw, json)
Hash identifier: 0OK5oAvuBTMRM7p9TbbjOFT6Jm+aw7icJJLUzVSPVFs=
Subject key identifier: 6A:90:4C:F5:DE:CA:BB:50:AC:B4:E5:C1:E0:22:30:21:9C:0E:8C:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89C96A68631111F0BE4547A5DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 13:25:43 +0000
ROA not before: Thu 17 Jul 2025 13:25:38 +0000
ROA not after: Sat 30 Aug 2025 13:25:38 +0000
asID: 62240
IP address blocks: 154.195.108.0/24 maxlen: 24
154.195.111.0/24 maxlen: 24
154.195.112.0/24 maxlen: 24
154.195.120.0/24 maxlen: 24
154.195.124.0/24 maxlen: 24
154.195.136.0/24 maxlen: 24
154.195.137.0/24 maxlen: 24
154.195.138.0/24 maxlen: 24
154.195.140.0/24 maxlen: 24
154.196.30.0/24 maxlen: 24
154.196.31.0/24 maxlen: 24
154.196.33.0/24 maxlen: 24
154.196.36.0/24 maxlen: 24
154.196.40.0/24 maxlen: 24
154.196.41.0/24 maxlen: 24
154.196.42.0/24 maxlen: 24
154.196.43.0/24 maxlen: 24
154.196.44.0/24 maxlen: 24
154.196.45.0/24 maxlen: 24
154.196.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101946 (0x18e3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 13:25:38 2025 GMT
Not After : Aug 30 13:25:38 2025 GMT
Subject: CN=6878f9d7-6fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:dc:64:c2:19:00:d9:01:83:cd:24:0c:e0:
02:3e:e3:e2:cf:68:f6:c5:b5:88:04:14:33:ed:ec:
fa:29:90:f8:15:ba:e8:6c:5b:38:95:1c:54:db:c8:
94:d2:ae:b5:3a:ed:bb:fb:aa:d0:e4:18:af:db:7d:
14:c4:f0:c0:c2:b6:f4:b1:d1:90:fb:bc:c0:02:67:
f1:1d:ec:f2:f2:8f:69:20:2c:9c:03:78:a3:0f:de:
ee:0e:53:2b:50:af:d9:99:3d:66:64:a0:ea:9b:f1:
73:73:19:c6:f1:9d:0e:22:b8:0f:eb:57:1c:8e:5d:
92:3e:9d:6b:14:8d:ee:64:e2:50:b6:cc:5f:4f:34:
e5:52:ed:74:84:e9:2b:b0:6d:95:80:26:82:f3:f4:
7d:0d:e9:1f:b7:8e:ec:9b:0c:d5:36:87:02:de:49:
fc:0c:3a:a9:c1:5b:b7:6f:40:4d:84:75:36:8e:ef:
78:20:58:55:6b:d7:e8:2a:60:2a:b4:16:7e:36:34:
e4:f8:c5:16:e0:2f:5e:28:06:fb:55:cb:0d:94:53:
4b:0a:46:13:bf:f5:05:13:93:0c:ac:9f:80:c0:1d:
ce:10:4c:9d:50:5a:fb:aa:c1:69:9a:b6:45:1b:23:
b1:30:8d:3c:b9:bb:11:9c:54:e5:06:aa:da:ee:90:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:90:4C:F5:DE:CA:BB:50:AC:B4:E5:C1:E0:22:30:21:9C:0E:8C:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89C96A68631111F0BE4547A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.108.0/24
154.195.111.0-154.195.112.255
154.195.120.0/24
154.195.124.0/24
154.195.136.0-154.195.138.255
154.195.140.0/24
154.196.30.0/23
154.196.33.0/24
154.196.36.0/24
154.196.40.0-154.196.46.255
Signature Algorithm: sha256WithRSAEncryption
83:6b:41:d6:b1:bf:54:50:c0:d2:a6:3c:96:0b:82:f0:51:d3:
8d:07:46:49:9c:89:71:fa:e9:2e:cf:52:f0:3d:4b:c7:fd:0a:
3a:e3:6b:02:2c:e0:d0:a4:2c:93:c2:de:99:75:84:a7:b1:ae:
e5:e3:21:9d:47:5e:72:78:1e:36:a9:92:91:66:1b:3a:0c:e4:
bf:d9:cb:9e:2a:a4:25:75:1a:5d:dc:55:2b:37:01:04:ea:ce:
ed:3d:6b:bd:49:ec:70:6e:d2:ba:ab:b1:1a:c1:e6:39:cb:19:
44:35:f8:9d:10:6c:ee:97:ce:72:8b:cf:ad:a9:76:b4:43:18:
83:af:29:ae:b9:4e:95:95:d4:f2:e2:76:64:24:9c:8b:8b:83:
54:28:75:9f:90:c0:66:da:3e:c0:75:09:8e:7e:fc:f6:22:99:
3c:cb:04:a0:6e:95:56:7a:a8:ce:f4:44:7b:f3:8f:9d:ab:5d:
14:7b:c7:23:37:f8:51:7c:32:20:2b:45:18:7e:6f:b2:bb:10:
73:07:08:e7:98:4c:f3:19:48:df:75:36:d2:04:36:77:b5:f4:
49:72:6c:43:ce:75:95:5e:52:bb:0b:93:78:55:0f:9c:00:f8:
e5:85:98:1c:97:a3:b8:36:6b:97:c9:ee:89:75:2a:4f:b9:20:
eb:65:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:33:46 2025 by rpki-client