Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E6F34623A3B11F0899A7CF5DAE4EC9C.roa
File: 2E6F34623A3B11F0899A7CF5DAE4EC9C.roa (raw, json)
Hash identifier: f7LyGg/FUwI6cKNdekeSucNj71AFWfEBz3t4kAIrPNs=
Subject key identifier: BD:3C:A9:B1:68:7B:B4:2B:49:F5:3C:25:32:B2:05:98:F0:BF:06:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0182D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E6F34623A3B11F0899A7CF5DAE4EC9C.roa
Signing time: Mon 26 May 2025 14:10:31 +0000
ROA not before: Mon 26 May 2025 14:08:26 +0000
ROA not after: Mon 25 May 2026 14:08:26 +0000
asID: 17561
IP address blocks: 154.193.6.0/24 maxlen: 24
154.193.38.0/24 maxlen: 24
154.193.40.0/24 maxlen: 24
154.193.90.0/24 maxlen: 24
154.197.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99025 (0x182d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 14:08:26 2025 GMT
Not After : May 25 14:08:26 2026 GMT
Subject: CN=68347657-5266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:59:39:62:97:a7:17:5f:d1:cd:18:bb:df:
c2:4b:1b:19:f9:5e:b7:36:db:05:c5:73:7c:b9:7c:
b1:d7:34:02:a8:96:60:0f:52:f5:4a:44:5d:50:dd:
12:ae:fd:d3:ff:4d:32:71:88:8e:fe:fb:6d:d0:01:
ae:f5:16:3e:3a:4e:85:7e:aa:78:01:1b:9a:22:54:
b2:9b:fc:6e:f7:91:3f:25:bc:07:aa:7b:11:d1:94:
5d:1a:27:eb:6a:0e:67:b2:e6:77:63:2a:ac:78:a2:
d0:96:e2:b3:84:fd:23:0a:a3:37:3d:72:24:2e:a1:
a9:09:a4:06:ea:9f:de:e8:ac:e5:71:f7:47:68:87:
4f:76:51:77:8b:77:6a:0b:81:0e:ac:09:8d:89:b3:
5b:a3:26:74:c6:0d:6e:56:9d:6b:a9:eb:b3:0a:d8:
64:92:8e:3d:bb:74:ea:29:c3:72:33:58:3c:5a:b6:
d1:c3:86:15:22:87:ef:d9:3c:b7:3d:33:02:ee:0f:
14:d5:98:25:e9:30:05:e5:75:5f:04:99:f6:87:f0:
31:ee:bb:52:9a:36:70:66:08:66:da:5c:ef:eb:de:
87:90:a9:ec:d9:7b:ad:93:56:30:91:bc:4f:50:1f:
9c:19:2c:40:92:4f:db:3d:89:ad:ad:15:31:6f:0c:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3C:A9:B1:68:7B:B4:2B:49:F5:3C:25:32:B2:05:98:F0:BF:06:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E6F34623A3B11F0899A7CF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.6.0/24
154.193.38.0/24
154.193.40.0/24
154.193.90.0/24
154.197.125.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ba:fd:cf:99:f5:ec:c7:ee:79:e4:59:26:a9:34:13:a8:7e:
f1:b0:e0:90:34:fa:6c:e3:dc:af:73:7b:34:a4:3d:22:9e:6d:
f3:c6:ed:39:d4:18:64:e2:73:8a:70:5f:5e:1b:6e:af:c2:57:
b9:e2:52:05:b5:f1:b7:ad:a1:5d:ff:17:54:6e:d2:e0:4f:ec:
f3:8b:a3:ff:f7:a6:2f:59:da:80:ea:77:18:28:a2:49:3e:21:
f4:bf:11:cc:d2:c0:7f:53:42:2d:2e:10:90:46:89:9d:59:f4:
45:55:58:62:24:27:44:e9:69:47:34:96:86:41:14:94:b9:7a:
97:37:c9:f1:6a:be:bc:80:ae:a8:4a:54:fc:60:46:81:c0:80:
7f:70:86:84:65:36:54:f5:a6:4a:52:8f:7a:04:b4:a6:e6:a7:
48:b9:b2:a1:2c:9e:57:62:d3:ba:07:e0:61:2b:37:76:3f:1d:
a6:c8:08:63:9b:d3:96:ad:b1:33:53:a5:eb:e8:c6:76:fc:dd:
9f:d2:6d:b3:76:47:50:fa:29:f0:c4:05:29:be:1f:b4:99:b6:
f6:0c:d3:0f:44:fe:d8:f2:44:51:d5:6d:98:aa:aa:7d:95:39:
0c:98:6b:56:e2:86:36:4a:6a:a5:ed:d0:96:b3:d2:c8:fc:6c:
83:20:4b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:34:08 2025 by rpki-client