Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B46DB48C357511F0BB9D29A5DAE4EC9C.roa
File: B46DB48C357511F0BB9D29A5DAE4EC9C.roa (raw, json)
Hash identifier: lPTuKDCiFi/dwa+V1mHkWeWI7cA4seVeK4eiltUtiYc=
Subject key identifier: C7:B4:57:5A:9A:C8:39:BF:71:AD:8C:1C:2E:63:2F:E4:CD:F5:0D:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B46DB48C357511F0BB9D29A5DAE4EC9C.roa
Signing time: Tue 20 May 2025 12:26:51 +0000
ROA not before: Tue 20 May 2025 12:26:46 +0000
ROA not after: Mon 30 Jun 2025 12:26:46 +0000
asID: 62240
IP address blocks: 154.194.112.0/24 maxlen: 24
154.194.113.0/24 maxlen: 24
154.194.114.0/24 maxlen: 24
154.194.115.0/24 maxlen: 24
154.194.116.0/24 maxlen: 24
154.195.24.0/24 maxlen: 24
154.195.25.0/24 maxlen: 24
154.195.26.0/24 maxlen: 24
154.195.27.0/24 maxlen: 24
154.195.28.0/24 maxlen: 24
154.195.29.0/24 maxlen: 24
154.195.30.0/24 maxlen: 24
154.195.31.0/24 maxlen: 24
154.195.96.0/24 maxlen: 24
154.195.188.0/24 maxlen: 24
154.195.189.0/24 maxlen: 24
154.195.190.0/24 maxlen: 24
154.195.191.0/24 maxlen: 24
154.196.82.0/24 maxlen: 24
154.196.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98729 (0x181a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 12:26:46 2025 GMT
Not After : Jun 30 12:26:46 2025 GMT
Subject: CN=682c750b-ca69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:3b:02:98:90:3e:44:4f:ea:5a:13:14:03:
4b:d1:d9:b5:7c:96:d3:34:b4:c7:b8:12:e9:96:45:
65:cd:c5:34:56:6e:a5:7e:88:7c:d0:1c:cb:7d:79:
a5:e6:65:a2:8d:c5:19:2a:b3:72:60:d5:ad:43:a0:
3b:e7:19:53:0d:af:5d:5c:d7:06:67:d3:d8:4c:df:
f7:f1:9f:3d:78:e1:11:37:68:e0:eb:ec:55:bc:ca:
ac:bc:74:12:29:53:ea:38:ed:91:45:0c:2c:f7:96:
14:77:bd:11:87:e5:1d:c9:dd:9f:ed:69:74:a1:4b:
dc:30:b9:25:c5:6f:33:7b:5d:36:24:f4:0e:36:7e:
db:69:f6:2e:7a:83:be:8d:21:aa:89:91:e7:df:6a:
df:70:76:34:af:99:fe:6d:e4:ce:6d:17:35:9f:c5:
9d:d3:80:98:a5:a7:18:af:a5:d8:ed:b2:de:a6:72:
03:7e:a5:ee:10:4c:32:ad:26:9d:be:e3:43:01:93:
07:d3:ab:6d:d0:88:3b:18:11:40:bd:0e:4f:ec:21:
c2:2b:e4:f7:04:2a:7b:fc:a6:c5:0c:84:d1:50:d7:
d2:7b:2d:d8:28:40:41:dd:58:f2:f5:14:19:58:83:
59:3c:01:7a:14:c0:a8:33:a2:56:b3:93:fe:7a:06:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:57:5A:9A:C8:39:BF:71:AD:8C:1C:2E:63:2F:E4:CD:F5:0D:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B46DB48C357511F0BB9D29A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.112.0-154.194.116.255
154.195.24.0/21
154.195.96.0/24
154.195.188.0/22
154.196.82.0/24
154.196.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:0b:fe:d3:19:0d:af:97:69:e7:83:43:6c:ea:0c:4c:5a:2d:
3e:e4:b2:62:8a:28:1f:98:b0:f9:dc:53:33:19:a0:ef:12:e3:
1c:5f:d0:53:55:ab:1f:22:25:ea:33:76:ea:53:e8:b8:d8:31:
6f:40:1b:f7:18:79:d9:d2:8d:6d:cd:02:18:3b:b5:26:07:2f:
ca:bc:af:1c:54:a2:c1:5b:a7:02:b5:3a:86:ec:4a:47:34:fa:
3b:92:35:e1:64:2c:0f:02:d2:a0:e6:f3:96:38:cd:5d:05:ee:
55:16:25:bf:67:4e:3d:c3:ef:4b:8b:db:ff:aa:41:27:3b:0a:
2a:ad:29:00:e6:15:d4:cf:7b:c5:7b:77:29:bd:15:77:b7:f8:
0f:4d:33:98:f0:ef:84:a6:3c:58:d7:4b:b5:f6:77:69:37:14:
32:15:2f:12:12:30:62:79:26:58:61:7a:19:8a:93:0b:d3:a2:
04:a8:a8:6f:40:e6:29:ed:cf:16:b3:a5:1d:4a:2a:06:2c:e0:
19:fd:87:d8:3e:ed:d4:15:8c:e7:ad:80:10:b7:21:9b:65:42:
d3:6e:4b:52:94:1c:6e:1c:d2:5e:bf:f7:35:87:52:a7:29:06:
32:08:17:9e:e7:c6:45:36:42:ba:ab:e6:22:80:5c:21:6a:c1:
63:6f:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:03 2025 by rpki-client