Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2254CBA261E11F094A791F3DAE4EC9C.roa
File: A2254CBA261E11F094A791F3DAE4EC9C.roa (raw, json)
Hash identifier: 9/+wpK8RJJSoufzmQlFZDRLxs65nBg9Pkbpph6a/HKI=
Subject key identifier: FB:BB:A1:E5:5D:B2:A1:F9:F5:1C:B9:1F:FD:80:03:86:03:A8:3B:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2254CBA261E11F094A791F3DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 23:55:46 +0000
ROA not before: Wed 30 Apr 2025 23:55:42 +0000
ROA not after: Fri 14 Apr 2028 23:55:42 +0000
asID: 17561
IP address blocks: 154.85.195.0/24 maxlen: 24
154.85.196.0/24 maxlen: 24
154.85.197.0/24 maxlen: 24
154.85.198.0/24 maxlen: 24
154.85.199.0/24 maxlen: 24
154.85.200.0/24 maxlen: 24
154.85.201.0/24 maxlen: 24
154.85.202.0/24 maxlen: 24
154.85.203.0/24 maxlen: 24
154.85.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97701 (0x17da5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 23:55:42 2025 GMT
Not After : Apr 14 23:55:42 2028 GMT
Subject: CN=6812b882-0fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:8d:46:7a:f6:73:dd:08:6b:c1:4c:02:9b:
2b:3e:de:0d:65:1f:a1:34:5b:59:b7:2f:f0:e5:b8:
63:65:2f:f3:cc:4b:6a:86:33:92:fe:2b:e5:20:a8:
35:0d:bd:44:94:2a:0a:c8:b5:9a:60:b8:83:80:b3:
1e:60:5c:e1:82:ed:9e:63:0c:d9:54:8b:80:97:57:
62:55:b8:96:3b:a1:cb:19:ce:11:13:62:62:fb:c4:
c9:03:5b:d8:cf:86:1b:b8:f1:3b:a1:0d:63:95:21:
aa:5f:ce:6b:64:4f:b1:f0:4e:5f:67:12:0c:88:49:
7a:43:20:61:5e:8a:74:2c:4a:a7:30:41:92:cb:59:
8c:63:f8:08:1f:a0:d1:aa:97:2d:2e:0b:10:25:b9:
e7:eb:2c:66:f5:28:c7:14:08:f1:8e:56:66:29:39:
f9:cb:df:e6:c0:62:10:ef:4c:cf:0f:12:e6:ca:11:
f1:f5:58:3e:a6:f1:bb:f0:d1:0a:4e:ee:2a:4c:8e:
e6:af:87:39:b4:b2:db:12:42:2b:0b:a1:6d:c5:57:
b0:7c:27:55:6d:db:7d:4d:73:b6:31:d6:61:ca:8c:
b7:a2:86:02:40:54:18:b7:d1:e6:e6:ad:a8:63:b0:
64:95:d6:b6:51:3e:e3:89:e3:dc:4a:0c:09:95:10:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:A1:E5:5D:B2:A1:F9:F5:1C:B9:1F:FD:80:03:86:03:A8:3B:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2254CBA261E11F094A791F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.195.0-154.85.204.255
Signature Algorithm: sha256WithRSAEncryption
6d:87:62:83:b5:e0:41:7d:fa:e3:62:1f:e3:ef:9f:02:a3:48:
ef:04:03:eb:8b:29:7a:0d:a3:82:83:69:a4:0c:27:fa:88:ef:
cb:7c:92:6d:51:4f:53:ec:56:5b:69:da:7d:86:f3:43:9a:bc:
20:48:fb:83:89:a1:80:b1:a9:bc:41:24:d0:31:ce:73:57:6a:
84:b4:cb:c2:dd:89:7b:e7:32:87:0c:99:0b:3c:40:f3:9e:fd:
66:08:0a:1d:82:08:74:1d:f8:32:16:0f:85:85:ef:08:8f:95:
1f:22:5c:35:95:c4:6f:31:0a:90:40:75:39:36:cf:d6:3d:68:
af:97:a1:c3:a2:61:ec:63:20:88:74:01:fb:d4:57:1a:7f:f1:
1d:40:53:7f:f4:fc:84:e0:e5:3c:d6:68:69:03:1d:4f:8e:8d:
0f:37:6e:6a:14:d8:ae:ac:ec:84:07:88:f3:9b:66:39:b5:97:
c5:9c:39:97:f2:d6:23:60:bc:42:5b:3a:13:4b:08:db:0a:d2:
79:40:41:ab:81:94:9d:2d:61:20:2d:8c:ed:1f:fc:c9:cd:f4:
8b:bb:d2:dc:1d:eb:b1:e3:51:bb:84:1a:10:93:cf:b9:10:9e:
02:0c:3a:8e:bc:82:b9:53:9d:6c:d1:64:14:f2:78:e9:40:1d:
70:e8:ab:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:39:17 2025 by rpki-client