Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE44B01A2B2D11F0B5A9A7DBDAE4EC9C.roa
File: CE44B01A2B2D11F0B5A9A7DBDAE4EC9C.roa (raw, json)
Hash identifier: pM/sQw2KobPXsCjgREzSehq3z1EMrOdRslfnLYAnwTw=
Subject key identifier: 95:27:8C:80:8A:46:2D:42:DF:C4:95:D7:71:CF:1A:24:05:56:4B:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F5B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE44B01A2B2D11F0B5A9A7DBDAE4EC9C.roa
Signing time: Wed 07 May 2025 10:26:59 +0000
ROA not before: Wed 07 May 2025 10:26:54 +0000
ROA not after: Mon 16 Jun 2025 10:26:54 +0000
asID: 203020
IP address blocks: 154.201.37.0/24 maxlen: 24
154.201.38.0/24 maxlen: 24
154.202.91.0/24 maxlen: 24
154.202.101.0/24 maxlen: 24
154.202.103.0/24 maxlen: 24
154.202.104.0/24 maxlen: 24
154.202.106.0/24 maxlen: 24
154.203.44.0/22 maxlen: 24
154.203.48.0/23 maxlen: 24
154.207.32.0/20 maxlen: 24
154.207.48.0/22 maxlen: 24
154.207.52.0/23 maxlen: 24
154.207.54.0/24 maxlen: 24
154.207.56.0/23 maxlen: 24
154.207.59.0/24 maxlen: 24
154.207.60.0/22 maxlen: 24
154.209.224.0/20 maxlen: 24
154.209.240.0/21 maxlen: 24
154.209.248.0/23 maxlen: 24
154.209.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98139 (0x17f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 10:26:54 2025 GMT
Not After : Jun 16 10:26:54 2025 GMT
Subject: CN=681b3573-59a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:24:8a:12:9a:14:4d:15:0a:e6:ac:38:17:
ef:eb:9b:33:e8:44:af:91:cd:ea:fa:57:2a:a0:89:
97:fb:80:16:68:0f:9d:d4:14:ff:e4:6a:88:3f:ba:
01:10:1a:71:67:1b:f6:f1:af:3a:d0:ba:c4:bc:cb:
e6:a3:77:30:93:5a:46:6f:73:6b:05:a9:a5:3f:ec:
fb:e2:a7:4b:fe:8f:6a:c6:50:4c:eb:d3:d8:9c:51:
ad:dc:f1:80:50:2c:72:31:ed:16:e4:c6:0c:30:7b:
95:72:26:a9:8e:c0:50:9a:03:99:f5:95:fa:2a:73:
7c:d0:b7:8d:1e:80:fa:c5:cc:5b:1c:96:8c:43:37:
2c:a3:9b:7d:d9:4c:0a:77:42:86:2f:50:3b:72:d8:
4d:b8:c2:bc:41:d6:8e:fd:90:28:41:00:2a:9f:37:
31:e0:f4:48:f7:01:60:fd:d1:0a:e4:6e:06:47:9d:
95:c6:69:f5:60:84:82:f4:0d:59:6a:53:50:14:55:
53:00:fa:27:f3:0f:6a:ce:d0:e8:fd:51:57:e0:40:
27:5f:6b:dd:a2:7b:c4:f9:14:cd:7a:8d:30:6e:60:
6c:ed:3f:09:e5:1e:40:7b:a9:6c:a3:ed:9d:3b:6b:
25:56:fc:3c:51:80:f4:1d:78:bf:60:fb:7a:bc:1e:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:27:8C:80:8A:46:2D:42:DF:C4:95:D7:71:CF:1A:24:05:56:4B:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE44B01A2B2D11F0B5A9A7DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.37.0-154.201.38.255
154.202.91.0/24
154.202.101.0/24
154.202.103.0-154.202.104.255
154.202.106.0/24
154.203.44.0-154.203.49.255
154.207.32.0-154.207.54.255
154.207.56.0/23
154.207.59.0-154.207.63.255
154.209.224.0-154.209.250.255
Signature Algorithm: sha256WithRSAEncryption
08:82:ca:65:0a:f0:61:51:4b:32:97:bd:84:98:01:2b:ca:34:
24:63:34:bb:91:c7:16:4b:cc:2b:b0:e7:9e:ec:82:ea:e1:88:
e7:ca:23:0f:f2:90:3f:e4:0b:b0:e4:a7:c8:bc:ed:ec:ed:b8:
64:4a:4b:46:49:c9:fa:24:5a:8f:6c:ea:6f:1b:7e:11:b3:42:
4a:05:b5:d7:15:46:7f:b5:ee:5c:3f:b8:d7:15:e5:5c:82:fc:
6d:f8:54:26:03:07:ce:33:78:9a:65:ec:e6:56:c4:81:cf:e6:
8f:51:06:6a:97:cf:d5:cb:3c:5e:94:67:b1:a6:66:ed:5f:b1:
2d:45:4d:db:86:78:b0:09:9e:51:c0:86:c4:88:4a:69:56:95:
7a:58:6c:56:30:e5:9f:3e:2d:3a:dc:5b:bc:75:d0:f9:78:ac:
81:ce:f0:a5:57:5f:11:ab:71:6f:90:46:0a:05:09:87:58:64:
df:9d:50:ab:ee:15:35:3e:af:3f:a9:9c:22:85:34:2f:43:b2:
df:54:42:8c:2f:31:56:7d:a8:9b:a0:b9:75:e5:30:bb:3f:28:
d4:cc:0e:e3:bc:0b:89:45:35:71:8d:e9:a3:93:b9:42:27:e7:
28:82:fe:37:be:19:ae:f1:53:a9:f0:10:8b:bf:7a:c7:79:60:
d6:99:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:09 2025 by rpki-client