Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/607B6BF2264E11F0BB96B9C7DAE4EC9C.roa
File: 607B6BF2264E11F0BB96B9C7DAE4EC9C.roa (raw, json)
Hash identifier: qvod3G9408IyqrKSYkSrAH7qaJ++6xZc2qY5nkHsDiU=
Subject key identifier: 36:0B:59:9B:80:77:48:E8:02:E8:A5:EF:9E:F1:FD:FD:A8:7D:50:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/607B6BF2264E11F0BB96B9C7DAE4EC9C.roa
Signing time: Thu 01 May 2025 05:37:32 +0000
ROA not before: Thu 01 May 2025 05:37:28 +0000
ROA not after: Tue 28 Apr 2026 05:37:28 +0000
asID: 984
IP address blocks: 154.193.6.0/24 maxlen: 24
154.193.7.0/24 maxlen: 24
154.193.8.0/24 maxlen: 24
154.206.4.0/24 maxlen: 24
154.206.5.0/24 maxlen: 24
154.206.6.0/24 maxlen: 24
154.206.7.0/24 maxlen: 24
154.206.8.0/24 maxlen: 24
154.206.9.0/24 maxlen: 24
154.215.220.0/24 maxlen: 24
154.215.221.0/24 maxlen: 24
154.215.222.0/24 maxlen: 24
154.215.223.0/24 maxlen: 24
154.215.224.0/24 maxlen: 24
154.215.225.0/24 maxlen: 24
154.215.226.0/24 maxlen: 24
154.215.227.0/24 maxlen: 24
154.215.228.0/24 maxlen: 24
154.215.229.0/24 maxlen: 24
154.220.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97706 (0x17daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 05:37:28 2025 GMT
Not After : Apr 28 05:37:28 2026 GMT
Subject: CN=6813089c-a601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:fb:d6:b2:16:5d:db:3e:77:85:9e:37:9d:
48:a6:0c:ca:c7:bb:14:db:8a:0f:f7:f8:05:92:22:
da:45:5a:71:32:b1:7e:5d:12:d8:a1:80:08:58:85:
ac:67:25:00:58:8c:5c:8d:77:82:4e:20:68:a5:f8:
ad:d9:ca:06:a9:bf:77:09:a1:79:23:63:62:e1:d1:
bf:a8:20:36:e9:74:30:13:c0:b5:24:d8:82:8d:3e:
4c:a8:d5:4a:46:cf:5a:83:21:7d:dc:bd:86:5c:b5:
fd:92:8c:db:1c:29:8d:ff:70:2b:0b:71:54:9d:17:
fb:63:a2:61:e4:ef:fd:a8:24:3f:71:4c:05:1a:a9:
04:64:4c:fd:c5:c3:73:b2:f6:97:0d:87:16:50:e2:
5a:39:c4:58:fd:8a:23:77:74:fb:a5:9c:76:a5:5e:
94:39:90:bc:9a:4d:c8:a4:d1:e8:07:6b:77:36:0b:
4f:b9:97:7b:f5:9b:fb:6f:3f:38:04:19:b3:79:c0:
9a:6c:74:66:ef:47:43:40:59:11:d8:e3:d1:00:1e:
5f:e9:55:1a:df:6c:fe:44:b3:82:91:97:50:29:63:
e2:1e:49:59:db:3b:14:5f:d2:32:79:2a:57:38:0a:
35:a9:86:c8:6d:94:96:1d:68:20:4a:fa:52:03:e1:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0B:59:9B:80:77:48:E8:02:E8:A5:EF:9E:F1:FD:FD:A8:7D:50:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/607B6BF2264E11F0BB96B9C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.6.0-154.193.8.255
154.206.4.0-154.206.9.255
154.215.220.0-154.215.229.255
154.220.252.0/24
Signature Algorithm: sha256WithRSAEncryption
25:25:36:53:62:b8:94:ba:01:84:a9:95:5e:89:85:9a:1c:ef:
df:02:ff:5c:11:5d:20:a4:fa:93:12:a2:7b:3a:5c:5f:c7:3f:
88:d3:09:3c:4b:0c:61:bc:50:71:22:b4:b7:ac:8c:f3:0b:21:
89:28:ae:48:5e:5b:d8:b7:70:b1:29:8f:6a:12:cd:c4:10:03:
69:c0:ea:31:b2:47:38:a0:55:c9:35:9f:d4:32:d9:be:4b:6f:
31:86:f3:5c:e6:c0:a7:fe:96:3b:17:88:58:da:3c:f2:62:51:
d8:88:01:0c:22:2a:9e:ba:5d:29:83:45:27:eb:1f:55:b6:9f:
09:ab:57:3d:76:ed:4d:f3:dd:7f:7d:11:d1:9b:a0:66:c5:54:
bd:67:26:f8:64:62:30:b0:7b:51:76:1a:10:b6:5a:63:9d:7a:
08:f7:d0:b3:2e:e7:ec:b7:1f:ad:af:5c:17:e4:90:b7:a4:e2:
3e:53:16:62:a9:a7:7b:36:cc:85:d9:e5:d9:73:46:55:2d:b6:
fb:72:96:93:34:09:fc:83:95:8c:bf:80:c4:21:09:65:8e:99:
37:e1:5c:06:3e:7e:39:47:43:d2:56:a7:88:38:55:ac:13:e5:
3a:9c:92:f9:a7:3c:5a:cf:31:b3:34:a8:ec:e6:8d:d9:f5:b6:
b8:14:18:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:49:09 2025 by rpki-client