Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27018CAC406711F0BD91EA9BDAE4EC9C.roa
File: 27018CAC406711F0BD91EA9BDAE4EC9C.roa (raw, json)
Hash identifier: 5CDl26kyDHZKB7v+mA7aDjkS7QzFPudFrYm5Vw/H6xo=
Subject key identifier: 9F:96:28:2C:DD:35:BE:A3:0F:C4:14:B8:06:65:4C:D1:2A:76:52:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01845D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27018CAC406711F0BD91EA9BDAE4EC9C.roa
Signing time: Tue 03 Jun 2025 10:40:23 +0000
ROA not before: Tue 03 Jun 2025 10:40:18 +0000
ROA not after: Wed 10 Sep 2025 10:40:18 +0000
asID: 203020
IP address blocks: 154.207.116.0/22 maxlen: 24
154.207.120.0/22 maxlen: 24
154.207.124.0/23 maxlen: 24
154.207.136.0/22 maxlen: 24
154.207.140.0/23 maxlen: 24
154.207.184.0/22 maxlen: 24
154.207.192.0/20 maxlen: 24
154.207.216.0/22 maxlen: 24
154.207.224.0/23 maxlen: 24
154.207.228.0/22 maxlen: 24
154.207.240.0/21 maxlen: 24
154.207.248.0/22 maxlen: 24
154.207.254.0/23 maxlen: 24
154.208.1.0/24 maxlen: 24
154.208.128.0/23 maxlen: 24
154.208.132.0/22 maxlen: 24
154.208.136.0/22 maxlen: 24
154.208.175.0/24 maxlen: 24
154.209.8.0/21 maxlen: 24
154.209.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99421 (0x1845d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 10:40:18 2025 GMT
Not After : Sep 10 10:40:18 2025 GMT
Subject: CN=683ed117-3a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3a:f6:94:34:5f:c6:3f:7e:e1:cc:49:be:8f:
05:5e:51:95:45:3c:2d:51:14:6d:ff:28:5a:72:53:
3a:72:47:6f:84:3a:5a:ec:be:67:eb:5f:69:4f:42:
ce:e6:69:63:4e:e5:92:de:87:a5:63:85:76:c6:f5:
50:9b:ab:fd:73:90:61:cb:22:8c:dd:4d:fc:7f:65:
c4:0a:cc:0d:c7:1b:c4:b7:ca:c7:94:56:a0:13:f0:
72:82:f5:fa:2f:cb:d5:ca:00:54:75:f5:03:80:1f:
fa:20:16:1b:c0:72:19:93:5c:b3:6f:2b:0e:bd:74:
6f:7a:5f:d9:7f:91:e4:62:32:19:c9:9e:ed:1c:8b:
2c:06:ce:86:c3:26:af:5a:a0:7f:df:73:02:6c:80:
09:58:cd:86:f5:a9:1b:6e:4a:fc:ad:df:08:84:ac:
fc:75:ff:89:5d:cc:90:97:82:b2:4c:25:af:93:e0:
95:3f:1d:d0:d6:14:4c:c5:07:5e:99:6b:22:72:a9:
ad:13:3c:85:8f:b0:6e:6f:a0:9d:01:58:8e:9a:c5:
82:25:36:30:b0:0b:15:4e:22:1f:c9:8e:1c:2d:79:
9f:16:b9:ca:b9:21:66:44:39:ae:f4:b9:e3:c9:78:
58:e9:3e:b2:1c:20:e2:bd:a6:99:25:da:48:ff:9a:
8e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:96:28:2C:DD:35:BE:A3:0F:C4:14:B8:06:65:4C:D1:2A:76:52:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27018CAC406711F0BD91EA9BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.116.0-154.207.125.255
154.207.136.0-154.207.141.255
154.207.184.0/22
154.207.192.0/20
154.207.216.0/22
154.207.224.0/23
154.207.228.0/22
154.207.240.0-154.207.251.255
154.207.254.0/23
154.208.1.0/24
154.208.128.0/23
154.208.132.0-154.208.139.255
154.208.175.0/24
154.209.8.0-154.209.17.255
Signature Algorithm: sha256WithRSAEncryption
61:4b:f1:a4:2b:48:b9:21:fd:9e:de:65:ac:44:ae:95:1a:0c:
34:31:e1:6a:49:d8:2a:fa:72:f4:4e:bb:51:87:04:ee:aa:cf:
ad:99:b1:14:fc:09:db:b2:2c:32:d7:8e:d0:bd:f3:e7:a1:92:
10:60:f7:80:21:23:b1:7c:e5:86:10:60:35:e0:5e:81:1e:50:
e7:d0:ba:6c:ba:41:ca:33:67:23:c1:1b:e8:fe:5b:e0:32:8a:
72:08:4d:26:51:8a:b4:6d:a0:5b:13:0d:fc:7b:8d:ab:9c:45:
73:f2:b5:08:03:c2:32:50:46:28:ae:d7:3b:45:90:dc:10:66:
af:50:bb:27:aa:37:73:c4:66:57:07:33:ab:6d:3f:63:b0:2a:
3f:3a:ad:eb:ed:08:6b:e4:d1:bb:ad:57:50:5f:30:31:e7:6c:
0e:4c:a2:74:9c:6e:e1:04:86:83:06:60:b1:eb:fe:49:97:c3:
11:7d:41:a1:d4:b9:87:06:a0:5c:36:46:5c:90:1e:fd:68:3d:
97:dd:e6:10:a4:0b:ac:9f:b2:ca:36:80:71:59:36:87:8b:e3:
06:d8:7f:ab:99:26:fe:43:f0:a9:02:3c:e8:ff:77:9e:16:24:
6b:50:6f:f2:c5:04:c2:7b:89:be:94:29:d6:aa:0e:8d:e4:91:
55:ac:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:50:09 2025 by rpki-client