Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1554E020332A11F0B0D190C5DAE4EC9C.roa
File: 1554E020332A11F0B0D190C5DAE4EC9C.roa (raw, json)
Hash identifier: eXbpsncmthrtg0vK2cYmVU9CJfzJQc/bmdYRIdycPvI=
Subject key identifier: 5F:20:90:30:18:22:E9:20:AD:22:77:66:06:95:0D:0C:E9:6B:CE:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018142
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1554E020332A11F0B0D190C5DAE4EC9C.roa
Signing time: Sat 17 May 2025 14:20:29 +0000
ROA not before: Sat 17 May 2025 14:20:24 +0000
ROA not after: Tue 16 Jun 2026 14:20:24 +0000
asID: 984
IP address blocks: 154.194.202.0/24 maxlen: 24
154.194.203.0/24 maxlen: 24
154.194.204.0/24 maxlen: 24
154.194.205.0/24 maxlen: 24
154.194.206.0/24 maxlen: 24
154.196.128.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.135.0/24 maxlen: 24
154.196.136.0/24 maxlen: 24
154.196.152.0/24 maxlen: 24
154.196.153.0/24 maxlen: 24
154.196.154.0/24 maxlen: 24
154.196.155.0/24 maxlen: 24
154.196.156.0/24 maxlen: 24
154.196.157.0/24 maxlen: 24
154.196.158.0/24 maxlen: 24
154.196.159.0/24 maxlen: 24
154.196.173.0/24 maxlen: 24
154.196.174.0/24 maxlen: 24
154.196.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98626 (0x18142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 14:20:24 2025 GMT
Not After : Jun 16 14:20:24 2026 GMT
Subject: CN=68289b2d-2b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:ca:72:ce:56:73:77:8a:bd:2c:d7:3b:4c:
49:80:2b:1b:1e:21:26:00:9b:77:5b:57:58:7e:1a:
0b:83:f8:c2:ec:32:96:b4:59:f2:ff:15:02:bb:6b:
93:91:3e:e8:94:c2:7c:65:2e:14:dd:7f:ea:08:87:
38:f7:29:ce:c3:d4:58:5f:ac:fe:30:9a:fd:5e:26:
8a:d9:3e:56:34:53:8c:96:f7:35:1e:02:48:3c:50:
d0:c1:0e:1d:24:18:68:9b:3b:2b:36:54:4e:25:6c:
c5:bd:3a:95:4d:04:4d:db:95:d6:08:e8:60:e9:c5:
4b:48:18:dc:1d:f6:79:6f:7d:2d:f2:a7:7e:37:4f:
3e:32:ed:10:d7:f0:89:e5:9b:0f:07:d8:e4:dd:22:
29:22:43:25:a0:7e:03:81:94:e4:6d:8a:26:3e:fe:
52:fd:01:1d:c8:2f:4d:f8:b8:54:f9:9e:7c:90:84:
7c:0c:6b:cf:a2:23:84:5d:8a:4a:eb:66:ae:22:02:
80:28:2a:e3:70:1d:87:61:9f:04:11:c2:38:7b:50:
a8:62:18:f0:77:de:5d:24:ef:91:a1:97:41:38:e9:
82:e8:b4:57:f5:05:ba:c1:c3:9b:b7:96:99:5e:5c:
4b:aa:37:f0:7e:75:c8:f2:73:78:30:db:bc:59:1b:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:90:30:18:22:E9:20:AD:22:77:66:06:95:0D:0C:E9:6B:CE:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1554E020332A11F0B0D190C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.202.0-154.194.206.255
154.196.128.0/24
154.196.134.0-154.196.136.255
154.196.152.0/21
154.196.173.0-154.196.175.255
Signature Algorithm: sha256WithRSAEncryption
42:7a:e3:7a:36:ec:53:39:a3:4a:90:63:e8:1b:d5:a8:0e:78:
3b:61:14:e8:96:47:4e:86:ad:6e:bb:d7:67:d7:ca:b8:e3:3f:
f4:36:27:27:20:4d:e5:c5:8b:db:cf:03:11:50:bb:c6:25:35:
5f:fa:ee:b9:71:e0:5b:2c:d1:6d:59:5e:06:da:28:22:fd:52:
98:47:ba:11:45:20:13:6d:1a:78:63:06:3d:0c:5e:2f:ed:4b:
35:cc:99:69:83:f1:9d:28:17:40:0e:e4:e4:c9:5f:97:b2:d7:
c0:31:54:c7:61:23:b9:73:86:3c:fc:24:a1:f2:bf:10:62:b2:
cf:90:16:6d:b7:0c:94:72:c0:03:8e:9a:d4:d5:bb:cb:13:b1:
85:d6:09:46:cb:bc:ad:c6:c7:e4:d7:82:88:66:5b:84:e2:4a:
f9:11:a6:93:c9:38:9b:3a:a0:87:81:1f:b4:31:78:a7:af:20:
44:58:1c:a7:38:b4:af:6f:74:2d:2e:6f:e5:b0:69:36:6c:f9:
b0:0b:38:46:c2:f6:d2:fa:61:86:90:8c:d9:14:84:49:be:ea:
e2:c9:de:80:25:af:0b:5e:d6:57:9c:f8:dc:81:df:bb:a0:66:
a3:f3:18:7a:3a:3c:3e:2c:96:cf:86:fc:07:d7:07:99:61:ff:
23:fd:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:07:38 2025 by rpki-client