Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0026E623BB511F0B8F9B499DAE4EC9C.roa
File: E0026E623BB511F0B8F9B499DAE4EC9C.roa (raw, json)
Hash identifier: ugF5FB/khDKhqvihGzjITPuehNkXFHxL1eUMZEm/64I=
Subject key identifier: 87:1D:5E:09:18:8E:A2:16:E6:A6:4F:E5:F0:9E:91:BB:CF:B9:F3:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018350
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0026E623BB511F0B8F9B499DAE4EC9C.roa
Signing time: Wed 28 May 2025 11:21:18 +0000
ROA not before: Wed 28 May 2025 11:21:14 +0000
ROA not after: Sun 06 Jul 2025 11:21:14 +0000
asID: 44559
IP address blocks: 154.209.136.0/24 maxlen: 24
154.209.137.0/24 maxlen: 24
154.209.138.0/24 maxlen: 24
154.209.139.0/24 maxlen: 24
154.209.140.0/24 maxlen: 24
154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.143.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.201.0/24 maxlen: 24
154.209.202.0/24 maxlen: 24
154.209.203.0/24 maxlen: 24
154.209.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99152 (0x18350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 11:21:14 2025 GMT
Not After : Jul 6 11:21:14 2025 GMT
Subject: CN=6836f1ae-5c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:4b:b0:77:73:28:d6:b2:f4:2e:78:97:39:
6a:ac:bd:27:61:b3:30:d8:47:4d:86:3c:6c:d0:35:
6d:c1:9b:b8:48:43:3c:d7:cd:40:a2:d3:8e:41:e6:
55:90:9a:f7:4d:c9:04:9e:6c:3d:fb:b1:19:ce:dc:
f7:fc:7e:08:b6:64:1c:cf:af:85:e9:bd:d5:b7:fc:
1a:fb:46:f8:30:b7:f8:46:70:51:96:fc:7d:df:91:
21:00:81:5d:fe:73:a2:c9:31:5b:7d:92:70:6e:5b:
ff:31:b3:a4:d7:5d:db:20:b0:84:6b:b2:a5:45:92:
87:8f:ab:67:d3:3a:c8:5e:0e:53:99:2a:4c:25:3a:
54:52:76:84:bf:4c:c8:b1:6f:50:b3:37:1b:14:03:
b4:05:1b:b9:9c:4b:10:b2:82:32:6e:36:34:c3:1e:
e4:a3:e6:ce:c2:70:ac:cc:70:78:39:26:ef:4b:ae:
96:19:ab:23:9e:31:cd:79:12:7b:2a:39:d5:46:4f:
07:99:87:a5:38:0b:fc:96:4f:fc:da:6b:4f:20:c9:
56:ab:87:80:a6:c0:e5:0b:87:54:c7:8b:d9:28:4f:
55:04:6e:d2:1c:90:08:4a:c2:9b:96:8a:c1:98:ba:
77:4a:f8:bb:d6:d2:73:d7:06:83:83:88:51:ed:69:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:5E:09:18:8E:A2:16:E6:A6:4F:E5:F0:9E:91:BB:CF:B9:F3:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0026E623BB511F0B8F9B499DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.136.0/21
154.209.150.0-154.209.155.255
154.209.157.0-154.209.158.255
154.209.201.0-154.209.203.255
154.209.205.0/24
Signature Algorithm: sha256WithRSAEncryption
08:93:af:f6:15:d3:08:0e:84:c1:49:b4:95:3b:e6:ba:10:77:
50:94:f2:01:67:f6:85:1b:19:ed:7f:d7:bb:55:77:a7:b2:ef:
91:0a:8b:64:4a:f9:74:97:55:25:e6:c1:75:c2:9e:b9:c5:75:
7e:29:58:98:01:59:09:71:62:26:ae:03:50:cc:46:7c:9f:65:
53:b1:ab:23:bb:f3:4c:99:49:2b:64:70:3c:30:78:a5:be:82:
c7:56:7b:65:62:21:b2:bf:37:4d:14:96:b8:cb:51:4c:d5:cf:
f6:ff:40:65:6d:4e:17:4d:02:ca:06:62:75:f4:6d:18:e1:52:
35:26:db:cc:a5:91:c7:59:ea:1c:f2:c4:f3:15:d3:72:21:45:
e7:f7:59:5e:37:0b:44:56:d9:41:64:f6:00:64:d2:f1:0d:23:
35:c4:8b:d7:e7:ef:83:9b:62:27:f8:f0:48:5e:cd:16:40:21:
f1:2d:92:26:eb:7e:b2:9c:fb:23:02:5d:3e:96:12:56:08:fe:
b1:49:d0:50:c1:83:f8:13:98:7b:6a:17:70:4a:74:ce:2f:c0:
ce:b8:ba:9f:31:e4:bc:8f:26:a7:e2:d2:76:6a:a1:50:fe:ac:
fb:0a:dc:99:3e:ee:72:aa:30:58:d8:d5:71:02:b2:07:2b:58:
d1:92:15:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:27:52 2025 by rpki-client