Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E39DBCD8439011F0956CCEA9DAE4EC9C.roa
File: E39DBCD8439011F0956CCEA9DAE4EC9C.roa (raw, json)
Hash identifier: 2yJ7jeHxonMTgbv/t8O41+C94j6TiYTDZvfAD6OWbww=
Subject key identifier: A5:9A:F9:A7:DE:6B:52:8A:FA:B0:61:55:56:6E:4A:84:7F:D6:93:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018552
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E39DBCD8439011F0956CCEA9DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 11:16:42 +0000
ROA not before: Sat 07 Jun 2025 11:16:38 +0000
ROA not after: Sun 31 Aug 2025 11:16:38 +0000
asID: 399077
IP address blocks: 154.91.97.0/24 maxlen: 24
154.91.98.0/24 maxlen: 24
154.91.99.0/24 maxlen: 24
154.91.100.0/24 maxlen: 24
154.91.101.0/24 maxlen: 24
154.91.102.0/24 maxlen: 24
154.91.103.0/24 maxlen: 24
154.91.104.0/24 maxlen: 24
154.91.105.0/24 maxlen: 24
154.91.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99666 (0x18552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 11:16:38 2025 GMT
Not After : Aug 31 11:16:38 2025 GMT
Subject: CN=68441f9a-b875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:8d:38:7e:43:3e:15:34:bd:aa:d6:36:44:
e9:0f:ee:10:f4:29:23:e4:50:10:82:21:d0:fc:f5:
58:49:7b:61:d4:84:9d:04:ad:3a:79:1f:28:96:1a:
27:0a:d8:d6:c2:09:1b:f3:11:ce:ec:30:9b:67:ca:
ae:07:1e:1d:39:e3:22:50:70:f4:9f:2a:67:58:dd:
88:81:09:7d:00:25:3b:3e:9b:3f:7d:58:53:5d:25:
eb:df:d0:4b:88:fa:27:78:68:0c:a4:37:07:6f:45:
f3:5c:86:21:54:31:f6:d7:60:33:b6:cf:15:e2:43:
c0:bd:2b:59:a4:14:58:ee:9a:c8:77:f7:c1:8e:57:
1c:b4:63:4e:6d:a6:67:01:16:57:d9:3b:78:f8:04:
e7:a3:f2:e6:da:ce:60:20:33:5b:2a:90:20:f7:b2:
45:f0:fb:de:ec:a7:78:ec:21:43:cc:81:d0:5a:fe:
8f:99:41:42:9c:6e:03:74:f1:0e:ee:55:c9:98:f9:
f4:b5:9a:c3:a5:d7:9e:ff:99:44:54:ed:17:9c:1b:
ed:fd:08:12:e7:e0:2f:06:8d:d4:56:be:1b:20:9c:
fb:88:b3:8b:d2:66:5c:55:15:85:39:be:a0:ce:15:
70:a2:b1:42:6a:f9:36:54:48:1b:a0:06:7e:99:99:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9A:F9:A7:DE:6B:52:8A:FA:B0:61:55:56:6E:4A:84:7F:D6:93:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E39DBCD8439011F0956CCEA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.97.0-154.91.106.255
Signature Algorithm: sha256WithRSAEncryption
b0:c4:05:cd:19:1f:f2:81:3f:53:8c:9e:02:42:aa:94:37:59:
d6:93:c9:60:78:92:3f:65:b8:af:c0:0a:7f:70:bc:b5:f0:04:
b1:1c:7c:27:44:6e:e5:8e:a8:d4:54:a3:ad:dc:d7:8a:0f:3d:
d5:e5:6e:3a:4f:54:0b:62:37:ec:a2:05:0a:ef:bd:77:61:3c:
68:ef:9c:83:52:c0:64:2f:bf:9a:3e:32:3b:e9:b9:36:59:05:
49:ce:dc:94:70:57:25:91:ff:98:95:63:01:eb:aa:e7:81:5c:
5d:73:ed:58:63:b9:df:82:7e:b2:60:f2:c7:ed:57:a9:34:02:
7c:7b:d6:bd:a6:d1:e2:ec:26:c8:96:1f:22:02:67:e6:0f:b5:
0d:19:1e:78:25:00:82:dd:51:00:40:94:84:3d:68:8b:c9:99:
ab:95:a6:b3:d1:c9:8e:18:bc:53:e6:81:98:97:c9:d2:e7:5e:
fc:22:1f:fe:e8:5b:4b:15:ca:4d:60:7b:04:bb:28:84:3e:ba:
f6:1e:7c:53:90:d1:7e:1c:0c:e7:2b:d4:44:e9:69:5a:7c:a9:
99:69:98:5c:56:f7:5a:f7:4b:14:13:3f:f1:be:7b:aa:17:1d:
8f:f1:74:c3:74:01:af:6f:e9:8d:ff:83:f7:ab:96:46:b7:2d:
97:c2:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:00 2025 by rpki-client