Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91214558357E11F0BCE875DDDAE4EC9C.roa
File: 91214558357E11F0BCE875DDDAE4EC9C.roa (raw, json)
Hash identifier: wqmcz8pm+iv+Z0u5DH0Z0kqqk7BmHCtX+DWRfdWk/mA=
Subject key identifier: 9F:92:0B:60:7C:BD:F9:52:F9:52:EE:B2:11:C3:1B:07:30:F8:96:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91214558357E11F0BCE875DDDAE4EC9C.roa
Signing time: Tue 20 May 2025 13:30:17 +0000
ROA not before: Tue 20 May 2025 13:30:12 +0000
ROA not after: Mon 30 Jun 2025 13:30:12 +0000
asID: 62240
IP address blocks: 154.194.79.0/24 maxlen: 24
154.194.99.0/24 maxlen: 24
154.194.100.0/24 maxlen: 24
154.194.101.0/24 maxlen: 24
154.194.102.0/24 maxlen: 24
154.194.104.0/24 maxlen: 24
154.194.105.0/24 maxlen: 24
154.194.106.0/24 maxlen: 24
154.194.107.0/24 maxlen: 24
154.194.108.0/24 maxlen: 24
154.196.63.0/24 maxlen: 24
154.196.65.0/24 maxlen: 24
154.196.66.0/24 maxlen: 24
154.196.67.0/24 maxlen: 24
154.196.69.0/24 maxlen: 24
154.196.71.0/24 maxlen: 24
154.196.72.0/24 maxlen: 24
154.196.73.0/24 maxlen: 24
154.196.74.0/24 maxlen: 24
154.196.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98745 (0x181b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 13:30:12 2025 GMT
Not After : Jun 30 13:30:12 2025 GMT
Subject: CN=682c83e9-e885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:d5:c9:93:6a:cb:11:1e:8d:da:95:29:5c:
f0:db:c1:0c:39:39:55:4e:53:83:ad:7a:a4:d9:1c:
f4:60:de:c5:e0:0d:a1:3e:d5:64:5a:57:7f:75:c5:
c4:e4:0a:de:7d:ad:f7:4d:2d:f7:90:c3:16:30:53:
31:70:4f:c9:7a:71:0a:70:db:35:25:af:58:eb:b5:
b0:9e:80:4b:c8:2b:62:c7:96:49:b1:1d:08:8d:90:
7e:0b:89:67:af:64:46:15:55:e5:8d:74:be:16:ed:
2a:01:1c:2b:f5:3f:13:24:8d:8d:41:b8:5e:1f:15:
ba:84:dc:2c:6c:c8:4a:b9:bc:65:96:18:a7:4a:8c:
b2:cc:7d:8a:8f:15:83:a2:b3:62:a7:0d:66:ef:3d:
1c:14:a8:7e:26:47:f3:1c:45:f9:1b:27:bc:84:3c:
f7:75:f2:ea:3d:13:9f:68:40:06:6c:cf:ee:18:2b:
b7:36:29:d6:c9:c9:2e:a8:c5:4c:e4:81:52:22:60:
59:0b:ae:b2:b2:97:ed:ac:18:5a:38:51:73:2a:f6:
57:88:e4:6a:90:db:05:6c:f7:64:13:08:ce:9e:5d:
2e:34:96:b4:91:c9:d4:7a:3c:ba:76:cb:04:09:18:
56:0e:ba:df:51:d5:25:31:19:e5:ee:a5:7d:54:68:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:92:0B:60:7C:BD:F9:52:F9:52:EE:B2:11:C3:1B:07:30:F8:96:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91214558357E11F0BCE875DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.79.0/24
154.194.99.0-154.194.102.255
154.194.104.0-154.194.108.255
154.196.63.0/24
154.196.65.0-154.196.67.255
154.196.69.0/24
154.196.71.0-154.196.75.255
Signature Algorithm: sha256WithRSAEncryption
bb:63:87:e7:a8:21:7e:04:50:a8:68:e6:78:a5:fe:82:44:08:
67:29:d9:53:90:d2:14:77:bc:4c:4f:91:ea:27:72:64:e3:90:
4e:98:bc:f4:35:e1:f5:ad:a7:74:41:25:58:85:66:29:58:a3:
f5:db:38:8c:3d:dd:ef:f0:5c:7b:a6:5b:80:bc:5f:40:ae:7e:
99:e5:5c:ac:e4:fe:21:74:c5:01:df:bf:85:ae:be:86:7f:8c:
3c:ed:ed:1e:c7:8b:b0:5c:23:59:5b:c4:11:44:fa:e8:c8:f0:
fa:33:53:bd:34:53:ad:a6:a8:77:fb:e4:9d:02:9e:fb:90:24:
d1:0a:7a:3e:ef:ac:51:10:9e:99:11:ec:76:f3:21:5e:9e:65:
88:5b:52:8b:a5:95:90:6c:be:20:d3:f1:f5:03:4a:80:7d:cf:
d6:e5:04:21:f4:85:93:cc:2a:5b:82:0f:8d:89:8f:86:32:19:
b0:71:c1:70:7f:c3:ef:3c:70:82:9f:76:cb:f7:85:0e:80:39:
e8:ce:08:6d:c2:cc:49:d3:0d:2d:e2:c1:ed:03:1f:0a:65:2c:
d5:e1:85:eb:62:ee:10:12:d3:9a:01:2c:23:2d:a1:97:5b:10:
0a:84:75:0e:77:c2:e1:a8:86:58:1a:47:9d:32:2b:d8:95:7d:
d0:ba:11:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:58:56 2025 by rpki-client