Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957CDAA4630A11F0B9FD3D79DAE4EC9C.roa
File: 957CDAA4630A11F0B9FD3D79DAE4EC9C.roa (raw, json)
Hash identifier: iot0/T/9fKGq5ZumQ5mCXolCPfoy1DreThkxm3UE7Ok=
Subject key identifier: 8E:44:65:0A:E9:3A:7C:CB:22:07:69:42:33:D4:55:2D:AC:4B:7A:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957CDAA4630A11F0B9FD3D79DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 12:35:56 +0000
ROA not before: Thu 17 Jul 2025 12:35:51 +0000
ROA not after: Sat 30 Aug 2025 12:35:51 +0000
asID: 62240
IP address blocks: 154.194.82.0/24 maxlen: 24
154.195.116.0/24 maxlen: 24
154.195.117.0/24 maxlen: 24
154.195.118.0/24 maxlen: 24
154.195.152.0/24 maxlen: 24
154.195.153.0/24 maxlen: 24
154.195.154.0/24 maxlen: 24
154.195.155.0/24 maxlen: 24
154.195.156.0/24 maxlen: 24
154.195.157.0/24 maxlen: 24
154.195.158.0/24 maxlen: 24
154.195.159.0/24 maxlen: 24
154.195.160.0/24 maxlen: 24
154.195.161.0/24 maxlen: 24
154.195.162.0/24 maxlen: 24
154.195.163.0/24 maxlen: 24
154.195.164.0/24 maxlen: 24
154.195.165.0/24 maxlen: 24
154.195.166.0/24 maxlen: 24
154.195.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101932 (0x18e2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 12:35:51 2025 GMT
Not After : Aug 30 12:35:51 2025 GMT
Subject: CN=6878ee2c-fa38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:7c:8a:38:15:5b:7e:c9:0d:14:32:cb:6f:
b6:13:72:b2:62:1f:66:8c:f1:a0:f5:41:c2:9c:4e:
5d:ae:9f:c1:4e:0b:25:f6:18:ec:df:7b:e0:be:a0:
0f:0d:ec:b2:10:52:05:42:d5:c1:13:96:f0:22:41:
8a:31:69:6f:5b:a3:70:a0:28:15:f7:46:46:52:f4:
2e:43:41:07:31:23:30:a7:66:ad:4d:c2:11:55:52:
42:d1:8f:ac:7b:57:6d:f6:5d:74:4b:11:41:2e:99:
3d:06:27:3c:09:c9:3d:ca:58:7d:5f:a2:9d:b6:1b:
12:65:e2:cf:3c:42:98:fb:24:c6:33:02:09:c1:7f:
2f:88:40:60:13:02:30:71:22:95:b9:09:80:fc:3a:
c3:92:ef:f8:37:55:f9:c8:73:b6:1d:0b:2a:73:15:
58:cb:25:fa:26:10:12:73:17:63:4b:23:b4:2c:55:
0e:3c:ef:ee:b8:ee:cd:53:fc:84:20:d3:18:b2:61:
b4:c1:5a:9f:ce:35:66:76:00:89:b3:90:af:49:e9:
ce:78:0d:49:89:a1:52:e9:4c:ed:ed:aa:00:b7:7e:
13:46:8c:6e:87:92:df:eb:09:dd:dc:32:33:86:df:
58:49:96:f8:49:e7:61:2c:3f:52:50:1b:4d:5b:ec:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:65:0A:E9:3A:7C:CB:22:07:69:42:33:D4:55:2D:AC:4B:7A:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957CDAA4630A11F0B9FD3D79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.82.0/24
154.195.116.0-154.195.118.255
154.195.152.0-154.195.167.255
Signature Algorithm: sha256WithRSAEncryption
7c:99:89:92:26:db:6d:10:68:c9:50:2f:89:2c:bf:11:6a:09:
61:5d:4d:4b:7d:cb:3e:25:1c:26:88:f3:de:4a:fd:1b:5d:a1:
c7:c4:5c:ca:4f:ac:f4:27:df:51:37:0d:57:80:1c:95:5c:43:
fd:40:ff:85:5a:cb:d3:3d:4a:3d:41:bb:a7:c2:16:64:4f:39:
44:be:19:8c:fb:40:92:35:0e:68:44:d0:1b:85:91:68:3e:b9:
c1:48:53:0e:b3:8c:14:52:eb:9c:78:14:de:ad:74:4f:0d:95:
b0:0f:34:86:b8:ed:19:71:70:55:07:36:42:96:bb:1f:ae:b2:
e6:b6:6f:77:db:f1:19:e6:ea:72:e0:00:42:10:4b:8a:91:c0:
4c:8c:04:ba:0d:ce:a9:cb:57:b2:d6:43:4a:7c:5b:b5:a0:57:
e7:ac:2c:df:77:db:0b:c4:c0:78:ef:92:00:0f:d7:80:3d:c5:
6b:06:c1:b4:2d:e7:04:30:8e:63:84:67:0e:82:3f:19:3d:6e:
b9:40:c6:96:6c:b3:0e:b2:47:1c:d0:cc:78:a0:68:e9:e8:98:
21:56:db:65:06:15:28:46:86:df:5b:bd:ff:72:b5:18:8d:a1:
b0:4f:88:89:c4:f2:c4:69:7f:67:d1:f1:c9:6c:9d:22:51:13:
26:f9:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:42 2025 by rpki-client