Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF4D73FC3BB411F08FEFE792DAE4EC9C.roa
File: BF4D73FC3BB411F08FEFE792DAE4EC9C.roa (raw, json)
Hash identifier: 18uEdWfQ9wlUoAh0rH5bR7JKnsnuUyOmKUVwHW7s6i4=
Subject key identifier: 6B:3B:5B:1A:42:0F:C2:7D:F6:77:C3:8A:19:8D:EF:1F:6D:BA:A7:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01834E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF4D73FC3BB411F08FEFE792DAE4EC9C.roa
Signing time: Wed 28 May 2025 11:13:14 +0000
ROA not before: Wed 28 May 2025 11:13:09 +0000
ROA not after: Sun 06 Jul 2025 11:13:09 +0000
asID: 44559
IP address blocks: 154.209.19.0/24 maxlen: 24
154.209.95.0/24 maxlen: 24
154.209.132.0/24 maxlen: 24
154.209.133.0/24 maxlen: 24
154.209.135.0/24 maxlen: 24
154.209.147.0/24 maxlen: 24
154.209.149.0/24 maxlen: 24
154.209.156.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
154.209.192.0/24 maxlen: 24
154.209.193.0/24 maxlen: 24
154.209.194.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
154.209.197.0/24 maxlen: 24
154.209.198.0/24 maxlen: 24
154.209.199.0/24 maxlen: 24
154.209.200.0/24 maxlen: 24
154.209.204.0/24 maxlen: 24
154.209.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99150 (0x1834e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 11:13:09 2025 GMT
Not After : Jul 6 11:13:09 2025 GMT
Subject: CN=6836efca-f4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:2c:91:79:c4:80:33:10:78:6b:d7:ed:6f:
c0:0e:5b:dc:6b:d0:3a:8b:44:d0:f8:44:53:92:5f:
dc:ed:97:96:07:d4:b2:0b:dc:e3:fa:6e:df:af:6b:
03:a4:a2:3e:a9:c3:9b:4e:84:8c:c1:d1:30:54:df:
45:29:bc:c9:19:c1:c4:df:fe:6b:cf:e1:ef:48:de:
cd:a1:12:ee:66:b4:23:ac:3e:97:85:eb:37:e0:c1:
11:52:7c:6b:c2:b2:dc:b5:b4:51:19:cf:53:a8:aa:
8d:07:51:63:5a:4a:93:6f:ff:31:4b:69:1a:54:77:
e5:14:49:24:1a:7b:dc:ae:5e:db:16:9b:ff:e0:b4:
b8:cd:ca:16:1d:ad:eb:33:7d:83:3d:39:7c:23:53:
16:a7:b4:bb:ee:7a:88:34:1a:e5:de:2d:e2:5d:ea:
f7:b9:1e:e0:3f:93:ad:80:37:2c:02:44:33:8d:51:
55:b2:94:80:c7:5c:84:8c:26:f6:d8:2d:d3:41:00:
86:65:ba:88:71:1e:46:11:c9:a0:c9:29:b2:88:5b:
ec:a0:53:98:bc:2d:4b:64:c9:1a:ea:9d:b9:64:69:
54:bc:6a:46:f2:67:2e:fb:8c:39:7d:43:e3:ee:d4:
32:a4:82:3d:74:22:10:e6:39:aa:03:41:b9:4c:15:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3B:5B:1A:42:0F:C2:7D:F6:77:C3:8A:19:8D:EF:1F:6D:BA:A7:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF4D73FC3BB411F08FEFE792DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.19.0/24
154.209.95.0/24
154.209.132.0/23
154.209.135.0/24
154.209.147.0/24
154.209.149.0/24
154.209.156.0/24
154.209.159.0/24
154.209.192.0-154.209.200.255
154.209.204.0/24
154.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
16:01:47:51:a0:08:74:50:0e:86:b6:e7:f0:fd:31:6e:4c:03:
21:c3:7e:13:43:4b:40:e4:f1:60:a3:8a:c1:e7:99:bc:13:41:
2d:3a:3f:98:98:38:2d:c5:5b:2e:8f:0f:0e:e4:40:ce:bb:ec:
e6:d7:00:fe:b8:f2:b0:7f:19:ae:f7:a7:dd:33:e5:23:55:cd:
7c:ae:c7:6b:6c:1d:2d:5e:d8:58:2b:fc:93:98:c8:5c:39:49:
62:53:11:db:22:30:97:43:09:f0:eb:4c:90:f0:e1:1d:82:98:
ca:7c:df:6a:8d:b0:7a:cd:1a:f6:ef:11:cc:c3:e3:2e:bd:b7:
38:af:67:df:28:e7:c6:49:f9:05:94:ff:8d:5a:ff:78:3d:9f:
eb:ad:f8:c2:7d:ad:17:ed:36:85:60:3f:c3:08:27:f3:33:b8:
99:84:f6:cc:98:b5:a4:cd:27:56:87:3c:09:2e:b8:97:25:72:
6c:e6:6d:86:aa:6d:41:8a:8b:cd:54:fb:c0:ac:a2:f3:b8:54:
83:60:7e:3b:8d:4f:e9:db:4b:b1:8b:ea:fb:89:b6:42:4f:ef:
94:83:a3:1c:68:22:29:1f:66:99:06:78:c1:85:91:cc:89:15:
8b:a5:9b:ce:c1:82:75:88:1b:50:d5:4b:97:c7:fc:01:b1:3e:
44:5b:1a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:41:34 2025 by rpki-client