Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAABAE74631511F08B217EBFDAE4EC9C.roa
File: DAABAE74631511F08B217EBFDAE4EC9C.roa (raw, json)
Hash identifier: d01kdmSfVbbAMBvJmib6Z6in3wijBaZ7JbZu5mGVU6Q=
Subject key identifier: 43:78:D1:92:D3:C0:BD:CE:8A:53:EC:27:45:F9:94:69:3C:99:26:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAABAE74631511F08B217EBFDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 13:56:37 +0000
ROA not before: Thu 17 Jul 2025 13:56:31 +0000
ROA not after: Sat 30 Aug 2025 13:56:31 +0000
asID: 62240
IP address blocks: 154.194.79.0/24 maxlen: 24
154.194.99.0/24 maxlen: 24
154.194.100.0/24 maxlen: 24
154.194.101.0/24 maxlen: 24
154.194.102.0/24 maxlen: 24
154.194.104.0/24 maxlen: 24
154.194.105.0/24 maxlen: 24
154.194.106.0/24 maxlen: 24
154.194.107.0/24 maxlen: 24
154.194.108.0/24 maxlen: 24
154.196.63.0/24 maxlen: 24
154.196.65.0/24 maxlen: 24
154.196.66.0/24 maxlen: 24
154.196.67.0/24 maxlen: 24
154.196.69.0/24 maxlen: 24
154.196.71.0/24 maxlen: 24
154.196.72.0/24 maxlen: 24
154.196.73.0/24 maxlen: 24
154.196.74.0/24 maxlen: 24
154.196.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101954 (0x18e42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 13:56:31 2025 GMT
Not After : Aug 30 13:56:31 2025 GMT
Subject: CN=68790114-06db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:2b:25:f9:7f:a8:cb:84:47:f3:54:f6:2a:
bd:41:74:29:46:2d:1e:18:e7:11:a0:d1:af:c6:48:
35:38:6f:9d:45:3f:0c:d6:fd:9f:4a:29:33:fc:56:
a0:85:98:70:ff:ca:81:88:ba:64:c9:0a:c6:00:ea:
e3:2b:7a:2f:ce:b1:69:0d:e7:88:92:f7:2e:bb:b4:
08:20:73:7e:65:7c:27:8d:dc:5d:63:44:6d:26:93:
57:8e:dc:7a:c3:fc:b0:9f:b5:fd:06:f8:f3:05:5a:
84:64:9c:d8:ad:d3:7b:2e:7d:48:5a:19:e0:81:e0:
af:22:cb:f2:c7:3d:59:5c:e8:a8:ef:fe:62:e8:9e:
cd:28:41:26:09:1e:ba:01:82:5a:8a:cf:9e:e9:62:
a3:f3:29:ec:17:c7:49:7f:ce:a3:f7:5a:e6:f6:5b:
36:6c:2f:1d:2d:35:fd:d6:25:45:2d:d6:82:4a:db:
ae:a4:0b:75:33:cc:65:b0:b3:cc:50:ee:be:1b:ea:
6b:12:f3:bf:a2:5b:e6:0c:6d:11:fd:83:cf:be:01:
da:fc:b3:93:5e:f9:a0:f6:cc:b8:13:45:46:d7:10:
47:a7:3e:c5:0f:12:08:2a:13:54:17:36:fa:61:dd:
ce:74:24:ef:12:51:b7:a1:34:43:a7:f0:61:8f:24:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:D1:92:D3:C0:BD:CE:8A:53:EC:27:45:F9:94:69:3C:99:26:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAABAE74631511F08B217EBFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.79.0/24
154.194.99.0-154.194.102.255
154.194.104.0-154.194.108.255
154.196.63.0/24
154.196.65.0-154.196.67.255
154.196.69.0/24
154.196.71.0-154.196.75.255
Signature Algorithm: sha256WithRSAEncryption
ca:b2:8b:51:6f:73:54:7d:8d:7e:85:d7:a8:4d:0d:0d:cf:17:
0d:7e:87:e0:dd:a0:28:1b:15:5f:51:0c:7a:06:e2:05:f7:45:
ca:bd:bb:8a:f4:76:b9:40:b2:d4:e6:2a:f8:77:5d:79:3e:99:
44:38:11:aa:ee:18:11:6d:a4:7c:69:f1:02:6a:2c:aa:71:bf:
0f:af:c3:83:ee:a4:6c:1b:ea:83:86:e9:b3:92:b0:c2:a6:64:
1f:f1:de:6b:d1:d0:3b:b1:36:b0:6a:b5:30:d9:d2:5e:c4:01:
52:52:7c:0e:10:f9:6a:4a:d8:d4:a6:8b:ac:83:cd:73:19:36:
19:56:2d:af:82:8b:ff:95:da:03:4a:19:01:c8:01:e9:e9:e6:
6b:3d:04:b8:37:65:89:e4:12:68:3a:23:86:e4:ab:d9:cb:bf:
e1:5f:81:9c:91:f3:30:91:53:8b:39:60:a6:94:db:25:56:21:
0f:92:1c:b6:9d:3e:21:af:44:8e:ca:3c:cf:02:d9:c2:f2:c5:
f7:0a:aa:d9:48:5f:0a:f1:74:14:35:8c:42:90:d8:16:93:0a:
fc:a6:7d:47:15:fa:cf:35:50:11:a1:18:72:60:05:c9:d0:18:
5d:52:5b:6b:89:27:0e:1c:6a:00:85:b1:e5:a8:cc:ca:ad:4f:
b2:ba:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:13 2025 by rpki-client