Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FBA5684357911F099C9D2B9DAE4EC9C.roa
File: 1FBA5684357911F099C9D2B9DAE4EC9C.roa (raw, json)
Hash identifier: IgOSNXeCAW+5dX9Be0REUiRpUTPnoOmd4BWF9oHyqDM=
Subject key identifier: 8A:76:FA:31:8C:B3:C3:CD:69:DF:E6:E3:5D:38:3F:30:A7:E2:E1:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FBA5684357911F099C9D2B9DAE4EC9C.roa
Signing time: Tue 20 May 2025 12:51:19 +0000
ROA not before: Tue 20 May 2025 12:51:14 +0000
ROA not after: Mon 30 Jun 2025 12:51:14 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
154.194.119.0/24 maxlen: 24
154.194.120.0/24 maxlen: 24
154.194.121.0/24 maxlen: 24
154.194.122.0/24 maxlen: 24
154.194.123.0/24 maxlen: 24
154.194.124.0/24 maxlen: 24
154.194.125.0/24 maxlen: 24
154.194.126.0/24 maxlen: 24
154.194.127.0/24 maxlen: 24
154.196.29.0/24 maxlen: 24
154.196.32.0/24 maxlen: 24
154.196.34.0/24 maxlen: 24
154.196.35.0/24 maxlen: 24
154.196.37.0/24 maxlen: 24
154.196.38.0/24 maxlen: 24
154.196.39.0/24 maxlen: 24
154.196.89.0/24 maxlen: 24
154.196.90.0/24 maxlen: 24
154.196.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98735 (0x181af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 12:51:14 2025 GMT
Not After : Jun 30 12:51:14 2025 GMT
Subject: CN=682c7ac7-e553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:43:ee:94:6e:1a:b4:53:48:7d:3c:6e:1b:
f0:8a:d6:c7:8d:36:5f:e7:e4:29:b6:af:7d:0f:b6:
f0:ea:18:c0:45:71:9d:6d:75:ad:e9:8f:db:e3:9f:
e9:18:4a:94:32:b3:ec:a3:ef:f6:06:c0:21:6f:89:
10:4e:a2:f8:af:86:f3:dc:3e:12:53:b3:a3:ea:4f:
53:e8:35:c7:51:ee:56:10:48:67:c1:80:c2:1c:e8:
2a:1f:31:1f:a9:78:48:e0:08:46:08:46:85:c3:22:
b6:a7:a5:dd:53:0b:43:9c:13:07:f4:56:3e:6e:15:
7f:c1:2f:80:de:5c:4f:de:c1:bd:a6:94:a5:a0:b4:
39:fb:56:d3:2c:78:f3:1d:d5:f8:20:2b:37:43:3d:
9c:dc:b2:db:2a:aa:cd:e4:70:39:c3:4b:c5:c8:17:
1b:7c:3e:61:73:25:c4:1f:83:6a:ff:1d:b2:9d:87:
28:45:d1:31:54:71:21:8f:fc:b9:24:30:af:62:75:
4f:6b:94:20:f4:02:5f:c5:d7:d0:61:f9:d2:f8:0b:
fe:50:a8:59:0a:fd:33:52:9a:c8:df:76:5c:ad:09:
b4:17:fa:e7:5f:df:dc:23:f4:32:28:c4:6d:12:14:
c7:de:9f:bc:d7:08:92:b7:a3:b6:7d:c7:f3:54:42:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:FA:31:8C:B3:C3:CD:69:DF:E6:E3:5D:38:3F:30:A7:E2:E1:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FBA5684357911F099C9D2B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
154.194.119.0-154.194.127.255
154.196.29.0/24
154.196.32.0/24
154.196.34.0/23
154.196.37.0-154.196.39.255
154.196.89.0-154.196.91.255
Signature Algorithm: sha256WithRSAEncryption
c3:ae:57:84:bc:e5:a2:01:03:37:ce:44:c6:79:10:d9:b2:1b:
96:0a:f7:bf:ff:39:22:ae:2f:cb:d8:e5:f9:56:23:ba:92:6e:
a0:dd:03:a3:6b:1f:ee:f1:aa:0f:f9:d4:42:6a:3f:72:31:a2:
50:7b:1e:0e:0c:6b:73:ca:1f:4b:92:4d:91:ba:45:cf:2e:14:
21:b3:92:19:85:c5:7b:fd:bb:0f:1d:7f:53:35:e2:4b:df:91:
79:fd:b3:24:66:7f:97:42:8c:45:cc:18:43:07:51:17:d1:06:
98:d6:49:8e:d1:93:61:a6:12:18:e1:70:d4:a6:16:74:e7:13:
08:c7:03:2b:8b:97:45:2e:1e:a1:66:a8:cb:4f:65:78:31:c1:
c9:8e:04:c6:c7:7d:aa:c5:bf:ed:6e:60:2a:f7:18:09:53:63:
ff:a0:b7:dc:21:ae:5e:19:7e:c3:18:7b:4f:23:cb:96:13:95:
dd:9a:48:55:ac:c2:74:e2:d2:7d:c9:c5:5e:b6:72:17:8a:8d:
5f:43:8e:8d:55:2d:a3:d1:83:fe:38:e5:c0:0e:22:c1:f9:c4:
cd:52:93:c4:11:0b:bc:84:43:2e:df:09:a2:68:f4:ca:bd:87:
95:c7:69:86:e8:5b:3a:ae:60:c3:ce:1d:1a:7b:45:ca:48:d6:
fd:94:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:30:46 2025 by rpki-client