Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DC10FE58FD11F0BFB8779FDAE4EC9C.roa
File: B2DC10FE58FD11F0BFB8779FDAE4EC9C.roa (raw, json)
Hash identifier: fdxTtCjqak3ridkBg9QTLJKQvGztBiG/n4zEaQLEmDI=
Subject key identifier: E7:E4:20:84:D3:B3:53:EC:56:D0:62:B3:58:CC:23:5A:6E:54:11:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DC10FE58FD11F0BFB8779FDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 17:38:30 +0000
ROA not before: Fri 04 Jul 2025 17:38:26 +0000
ROA not after: Wed 03 Sep 2025 17:38:26 +0000
asID: 150008
IP address blocks: 154.206.17.0/24 maxlen: 24
154.206.18.0/24 maxlen: 24
154.209.252.0/24 maxlen: 24
154.209.253.0/24 maxlen: 24
154.209.254.0/24 maxlen: 24
154.209.255.0/24 maxlen: 24
154.210.213.0/24 maxlen: 24
154.210.224.0/24 maxlen: 24
154.210.225.0/24 maxlen: 24
154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
154.210.228.0/24 maxlen: 24
154.210.229.0/24 maxlen: 24
154.210.230.0/24 maxlen: 24
154.210.231.0/24 maxlen: 24
154.210.232.0/24 maxlen: 24
154.210.233.0/24 maxlen: 24
154.210.234.0/24 maxlen: 24
154.210.235.0/24 maxlen: 24
154.210.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101004 (0x18a8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 17:38:26 2025 GMT
Not After : Sep 3 17:38:26 2025 GMT
Subject: CN=68681196-647a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:ff:06:68:60:d8:37:13:26:9e:f8:17:73:
11:cc:45:2d:61:60:ec:dc:06:57:2e:f4:8a:ac:bf:
f2:3a:5b:88:30:5f:2b:2d:1b:59:18:98:12:ab:86:
be:d7:ef:e3:0e:4b:d7:f6:48:a5:cd:17:e4:a8:16:
e2:33:96:b6:53:4c:69:50:15:a5:2f:ce:ba:a4:3a:
4b:10:2e:a3:05:e0:74:b7:bf:40:46:42:38:c6:26:
3a:8d:1a:d7:ec:c8:51:a3:73:dd:27:15:24:94:59:
c9:8c:4a:d9:4d:75:e2:d3:6b:15:d3:4c:3f:9b:13:
cc:e1:08:a4:d2:bd:8a:b3:ad:5c:f5:1e:21:71:42:
a2:c7:6c:bb:64:65:44:d7:66:d2:3f:f1:46:25:5d:
8f:4c:dc:2a:f5:b0:87:ba:c0:42:8c:df:8f:d9:df:
da:7e:c4:fe:c8:a4:14:a4:79:7a:10:75:df:1b:ca:
eb:6d:a6:d3:4a:84:a7:bb:16:14:19:6c:25:82:08:
38:e1:0a:65:e1:13:ca:81:cb:d9:c7:f4:90:55:41:
94:27:ee:2b:76:d5:47:a9:d7:7c:6a:f3:47:6f:37:
3c:7d:c2:3a:0a:46:bc:96:42:c5:a8:11:d4:e3:22:
77:7e:92:56:11:20:b8:21:39:82:bb:95:99:70:7f:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E4:20:84:D3:B3:53:EC:56:D0:62:B3:58:CC:23:5A:6E:54:11:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DC10FE58FD11F0BFB8779FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.17.0-154.206.18.255
154.209.252.0/22
154.210.213.0/24
154.210.224.0-154.210.236.255
Signature Algorithm: sha256WithRSAEncryption
bb:b0:08:7d:f6:83:bb:c0:5d:11:26:2f:88:03:bd:7f:b8:9a:
43:9d:fe:98:1b:d3:e2:d1:11:da:64:a0:54:b0:ca:83:66:28:
e1:41:d3:e0:89:f3:8d:a0:7d:a6:db:3d:0f:17:d6:e3:3b:eb:
69:24:c0:6d:8d:15:e4:82:3f:19:c1:8c:09:29:3a:b8:b8:da:
fe:9e:33:d5:3f:b3:44:e8:2a:55:11:d0:73:4e:88:5f:16:60:
84:49:0c:ca:3f:fc:db:a4:53:40:cd:11:ff:30:62:27:8a:f4:
9a:99:ae:84:3b:3c:f9:2f:d8:17:d5:76:cb:1f:65:23:43:98:
71:1c:a4:48:13:63:10:31:b8:2a:a1:12:cb:8f:56:46:6d:24:
d7:68:be:85:40:c2:c4:94:21:cf:a8:de:95:1f:fe:c6:06:17:
d6:24:ba:db:51:c8:09:53:6b:65:c8:a1:33:bb:50:c3:44:8c:
e2:dc:72:5b:ff:de:21:08:13:65:f6:d8:33:64:49:39:77:33:
e6:f8:4e:b1:8f:07:02:50:1f:f0:60:1d:75:b7:22:0c:cc:c0:
1b:79:80:d4:a5:07:a6:57:70:9b:03:54:17:53:61:4f:7e:c2:
51:c5:fb:18:cc:a2:6f:23:2a:93:60:7a:dc:ea:74:1d:90:64:
7f:7e:cf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:52 2025 by rpki-client