Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED4AE9D6268A11F0943276D3DAE4EC9C.roa
File: ED4AE9D6268A11F0943276D3DAE4EC9C.roa (raw, json)
Hash identifier: dLrqIWFxdcQIjtZBam1Xy0Qw8VJq9Gm/H0pf6673mZk=
Subject key identifier: CC:81:BC:35:86:0F:63:1C:B0:3D:E1:67:A1:14:99:D1:FF:CA:DE:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED4AE9D6268A11F0943276D3DAE4EC9C.roa
Signing time: Thu 01 May 2025 12:50:58 +0000
ROA not before: Thu 01 May 2025 12:50:53 +0000
ROA not after: Fri 28 Apr 2028 12:50:53 +0000
asID: 17561
IP address blocks: 154.81.90.0/24 maxlen: 24
154.81.91.0/24 maxlen: 24
154.81.92.0/24 maxlen: 24
154.81.93.0/24 maxlen: 24
154.81.94.0/24 maxlen: 24
154.81.95.0/24 maxlen: 24
154.81.96.0/24 maxlen: 24
154.81.97.0/24 maxlen: 24
154.81.98.0/24 maxlen: 24
154.81.99.0/24 maxlen: 24
154.81.100.0/24 maxlen: 24
154.81.101.0/24 maxlen: 24
154.81.102.0/24 maxlen: 24
154.81.103.0/24 maxlen: 24
154.81.104.0/24 maxlen: 24
154.81.105.0/24 maxlen: 24
154.81.106.0/24 maxlen: 24
154.81.107.0/24 maxlen: 24
154.81.108.0/24 maxlen: 24
154.81.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97792 (0x17e00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 12:50:53 2025 GMT
Not After : Apr 28 12:50:53 2028 GMT
Subject: CN=68136e32-7df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:70:e0:e9:dc:94:8c:d5:0f:aa:91:66:b5:
0b:b3:e8:be:93:70:95:14:39:b4:eb:82:b5:b5:b6:
f1:8c:01:33:64:dd:f9:96:44:fa:20:0f:0d:26:5d:
80:82:54:cf:59:b1:86:cd:98:3c:3b:e8:89:77:97:
bb:4a:ef:bd:33:0c:de:8e:9a:50:cd:d2:90:9e:76:
4d:5d:c9:1a:68:ef:37:b1:57:8a:29:1d:8c:31:d3:
c5:c2:05:84:67:6d:aa:e8:8f:2d:42:a4:6b:00:5a:
a8:7b:2f:d5:68:58:f5:48:83:a1:2b:be:2d:a7:e8:
77:16:08:a8:2c:b1:1b:31:ff:44:e1:ae:41:88:f5:
05:34:a1:ff:f6:6b:92:2e:81:01:e8:3b:0a:2c:fa:
d3:b8:60:63:05:e9:0e:b5:bf:93:ee:b0:b5:31:f2:
0d:7a:b3:d8:0e:a9:a7:bf:03:71:2c:fd:a1:08:2c:
c8:91:4d:38:74:b8:1a:17:e7:d1:89:f6:9e:42:79:
7c:30:db:20:61:ac:b9:42:9e:cb:95:bc:45:59:cb:
e3:96:38:75:9f:6a:d6:d2:fa:53:89:29:69:9f:f7:
ee:f4:d1:64:8d:df:b6:60:a6:5d:88:3e:ca:24:f3:
a4:67:2b:03:fb:cc:25:82:0f:81:d1:c2:84:7d:a9:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:81:BC:35:86:0F:63:1C:B0:3D:E1:67:A1:14:99:D1:FF:CA:DE:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED4AE9D6268A11F0943276D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.90.0-154.81.109.255
Signature Algorithm: sha256WithRSAEncryption
c0:28:ad:9c:b3:0e:8f:70:98:94:6f:c6:29:d6:01:68:5d:d2:
4a:38:d6:29:59:8e:75:9b:8e:82:24:e5:e6:01:9d:3b:6c:35:
04:34:d0:a6:39:03:16:ef:da:44:5b:be:ce:59:b7:a6:d2:d8:
a8:fd:3a:16:d6:67:7d:bf:f0:53:63:2e:7b:33:e5:f8:3c:53:
f8:f4:ba:9e:00:7b:82:3b:66:0b:e8:02:ab:a0:4c:4c:ce:2e:
cb:21:80:a9:08:9b:0e:5e:8e:fc:da:7e:4c:e1:b4:6d:75:c3:
eb:dc:ac:1d:16:32:50:f7:f0:b1:f2:ce:be:a7:01:e2:e7:4b:
bc:a4:80:98:bd:13:80:1d:05:f0:b6:7f:b0:75:0f:21:aa:5f:
02:ee:81:61:9b:3a:ac:36:42:3b:10:12:b1:ef:c1:62:91:e0:
f1:c8:3f:6d:0d:6d:38:cd:19:ef:95:b9:13:95:a9:fb:b1:d1:
40:a4:d2:66:dd:35:22:ae:07:37:a1:08:3b:e3:36:c0:9a:cb:
1b:78:3d:c9:db:d8:e7:04:65:51:af:fb:c4:9e:b7:24:02:9c:
09:3c:f7:9b:c7:76:9c:56:fb:95:71:38:8e:52:2c:22:66:a7:
fe:f2:f6:62:8a:7a:0e:b1:3a:42:2a:ac:59:25:bd:0a:23:e0:
4b:f9:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:18:40 2025 by rpki-client