Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F5147383BBC11F08B1CEAC2DAE4EC9C.roa
File: 4F5147383BBC11F08B1CEAC2DAE4EC9C.roa (raw, json)
Hash identifier: dIF8HHQjep6Wa4bDqTCRZa5PwJG9tr+HHAvMJDIF5Ls=
Subject key identifier: BF:17:FC:78:03:7F:76:0A:DF:1F:1A:7F:AE:81:BA:D3:5F:10:AD:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018360
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F5147383BBC11F08B1CEAC2DAE4EC9C.roa
Signing time: Wed 28 May 2025 12:07:22 +0000
ROA not before: Wed 28 May 2025 12:07:16 +0000
ROA not after: Sun 06 Jul 2025 12:07:16 +0000
asID: 202656
IP address blocks: 154.219.16.0/24 maxlen: 24
154.219.24.0/24 maxlen: 24
154.219.28.0/24 maxlen: 24
154.219.197.0/24 maxlen: 24
154.219.207.0/24 maxlen: 24
154.219.211.0/24 maxlen: 24
154.219.222.0/24 maxlen: 24
154.219.230.0/24 maxlen: 24
154.219.232.0/24 maxlen: 24
154.219.245.0/24 maxlen: 24
154.219.246.0/24 maxlen: 24
154.219.247.0/24 maxlen: 24
154.219.250.0/24 maxlen: 24
154.219.251.0/24 maxlen: 24
154.219.252.0/24 maxlen: 24
154.219.253.0/24 maxlen: 24
154.219.254.0/24 maxlen: 24
154.219.255.0/24 maxlen: 24
154.221.60.0/24 maxlen: 24
154.222.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99168 (0x18360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 12:07:16 2025 GMT
Not After : Jul 6 12:07:16 2025 GMT
Subject: CN=6836fc7a-5730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:ee:6e:a9:6a:ac:fb:6b:c2:db:9c:86:6e:
f8:92:7b:11:77:bd:ba:02:c2:9f:78:8c:10:ed:27:
ed:df:9a:b6:86:0e:53:5d:2c:20:66:c7:33:4d:fa:
70:a3:76:fb:d7:db:1d:af:42:c0:58:56:ce:35:54:
5b:59:f6:f6:df:9f:5c:d9:46:d0:83:17:b0:34:65:
af:ae:27:6f:e2:15:f2:1b:d9:e6:11:96:8b:4b:86:
a0:e3:9c:59:bf:72:b9:d9:ee:b2:7b:f1:73:8d:48:
ca:8f:12:0e:1a:87:29:6f:61:31:54:bf:1b:07:59:
35:00:cb:bb:d6:f6:60:1e:2a:f2:45:bd:ad:29:04:
3a:9f:85:e2:27:48:14:d6:3b:f9:92:88:a3:d9:34:
7a:d6:18:68:bb:b9:50:65:c6:4b:b1:f7:d4:ff:39:
3f:d1:ac:2a:64:34:db:17:43:69:d6:8a:9f:5a:5e:
a1:11:b2:70:20:0c:03:65:d9:39:4e:8f:23:fb:6b:
1a:e7:3a:7a:52:6e:d5:02:11:af:c8:33:13:ef:dc:
fe:a5:51:c7:94:d9:a3:d3:4c:66:5e:54:0a:9e:17:
c9:70:27:51:85:b3:43:48:aa:42:ea:0d:6b:74:aa:
55:ba:74:d2:ef:0f:28:a9:a2:0b:fc:9b:ae:0f:fe:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:FC:78:03:7F:76:0A:DF:1F:1A:7F:AE:81:BA:D3:5F:10:AD:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F5147383BBC11F08B1CEAC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.16.0/24
154.219.24.0/24
154.219.28.0/24
154.219.197.0/24
154.219.207.0/24
154.219.211.0/24
154.219.222.0/24
154.219.230.0/24
154.219.232.0/24
154.219.245.0-154.219.247.255
154.219.250.0-154.219.255.255
154.221.60.0/24
154.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8c:9d:f6:cc:16:66:a0:e6:c7:2b:76:4c:97:df:f2:51:e0:
5c:43:84:15:c9:e5:d0:3d:74:16:dc:38:63:54:fb:91:f8:3d:
e0:d4:63:c0:e3:e1:87:e9:8e:fe:37:e1:10:ff:48:a6:49:0c:
0e:8e:c4:dd:86:5c:c8:64:90:e3:f0:0c:0e:3e:f9:f6:0c:40:
be:b7:99:63:ca:47:94:a7:0e:7f:a8:24:2f:d4:97:d2:ff:a9:
02:18:17:e5:7a:30:7a:50:6a:e4:a9:0b:af:87:6b:20:f9:71:
74:d8:fc:82:5c:16:09:10:23:75:1e:68:41:3e:ff:b9:a2:02:
a6:3c:cc:ea:35:0a:da:55:58:08:11:3d:2d:24:1b:37:33:25:
32:fc:68:29:8f:0d:a8:4b:57:bc:ff:a1:ee:5d:b7:09:ee:82:
24:cc:6d:1b:22:4c:04:c2:04:41:95:f7:a6:77:47:ce:9d:3b:
7d:aa:6c:0b:f9:b1:58:7a:f7:04:e1:05:c3:8d:36:ec:28:f3:
59:83:f4:6e:e4:da:80:5f:b6:c3:8d:a3:31:17:08:5f:de:35:
24:36:88:fc:9e:34:3d:3b:70:69:84:9d:6e:f8:e4:86:67:3c:
1d:34:3a:b4:56:ad:ee:72:df:01:71:06:73:5b:77:7c:9a:8f:
a8:c1:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:22:26 2025 by rpki-client