Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9515D236FA11F0AB974CCDDAE4EC9C.roa
File: FA9515D236FA11F0AB974CCDDAE4EC9C.roa (raw, json)
Hash identifier: YOZ7sQt33DqQyCfueRvaNjdY6Wr3+p0PxTqw91ck6JA=
Subject key identifier: A8:E5:E4:0E:A2:65:E3:26:57:F2:FC:6A:6F:67:DB:43:61:44:22:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9515D236FA11F0AB974CCDDAE4EC9C.roa
Signing time: Thu 22 May 2025 10:53:23 +0000
ROA not before: Thu 22 May 2025 10:53:18 +0000
ROA not after: Wed 09 Jul 2025 10:53:18 +0000
asID: 138915
IP address blocks: 154.95.69.0/24 maxlen: 24
154.95.76.0/24 maxlen: 24
154.95.77.0/24 maxlen: 24
154.95.78.0/24 maxlen: 24
154.95.79.0/24 maxlen: 24
154.95.80.0/24 maxlen: 24
154.95.81.0/24 maxlen: 24
154.95.82.0/24 maxlen: 24
154.95.83.0/24 maxlen: 24
154.95.84.0/24 maxlen: 24
154.95.85.0/24 maxlen: 24
154.95.86.0/23 maxlen: 24
154.95.88.0/24 maxlen: 24
154.95.89.0/24 maxlen: 24
154.95.90.0/24 maxlen: 24
154.95.91.0/24 maxlen: 24
154.95.92.0/24 maxlen: 24
154.95.93.0/24 maxlen: 24
154.95.94.0/24 maxlen: 24
154.95.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98781 (0x181dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 10:53:18 2025 GMT
Not After : Jul 9 10:53:18 2025 GMT
Subject: CN=682f0222-12e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:fb:fd:b0:15:ed:74:3d:9d:5c:7e:6f:10:
75:ab:3e:34:da:c3:46:bd:ff:dc:70:39:62:23:36:
e0:fe:f6:bd:c4:7b:f3:c3:d7:44:e8:90:b5:5d:6e:
f0:86:3c:f1:c7:77:09:04:25:df:9e:94:a2:7f:91:
a1:fd:6f:05:f2:02:b7:b2:57:89:d2:10:fa:45:ea:
34:9d:84:82:0d:64:00:bc:a2:5e:28:48:fa:20:67:
20:6a:68:96:60:55:5c:d3:80:a1:a7:9a:e5:87:b4:
c2:be:f9:5b:06:b3:c5:05:41:eb:61:1d:68:ff:91:
fa:40:bc:2d:99:bf:d1:3c:45:98:49:9a:ad:34:08:
f2:7f:77:60:e2:f3:2c:40:35:cb:80:2c:7c:06:cb:
ff:04:35:52:25:bb:2d:94:d6:fe:72:be:26:3d:aa:
2f:9e:01:40:3d:83:40:c0:f1:bb:55:c1:15:24:ee:
e6:dd:72:d6:6a:4e:be:12:47:e7:bc:e6:12:f0:01:
87:5f:03:48:77:d2:07:7c:7f:df:18:35:9f:3f:17:
1c:b2:ef:d5:b5:24:a8:85:24:a8:6f:9c:e9:de:86:
5f:47:af:12:11:ad:f1:ff:00:5c:04:cc:99:17:52:
bc:cd:e2:f3:a6:73:8f:0f:71:0a:90:38:72:71:76:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E5:E4:0E:A2:65:E3:26:57:F2:FC:6A:6F:67:DB:43:61:44:22:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9515D236FA11F0AB974CCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.69.0/24
154.95.76.0-154.95.95.255
Signature Algorithm: sha256WithRSAEncryption
ab:7b:7a:4a:33:57:7c:68:ab:66:8a:9f:b8:37:f8:5b:23:e0:
57:da:cc:08:ad:e0:78:c1:d2:84:73:24:3b:a3:61:08:2f:16:
6a:81:2c:67:69:eb:dd:90:3a:37:44:8f:30:0c:e2:32:ec:98:
1b:25:ac:50:0e:42:ca:f4:d4:09:04:a6:7d:d5:35:10:71:84:
40:2b:fc:1c:6d:ee:f8:62:ef:9a:5c:bf:e7:94:1a:fb:f7:93:
27:ca:17:f4:ff:0f:69:1c:9f:a1:ec:c4:64:27:cb:cd:65:b3:
42:ca:61:90:e6:82:39:79:83:e1:4a:1a:70:97:0d:5e:f1:88:
91:e0:45:d1:1f:29:33:87:9a:eb:f9:d6:de:e9:50:1e:a3:ea:
e4:07:d6:74:d8:9c:b4:4f:47:9d:0c:13:fb:39:2d:12:18:07:
4b:c8:de:6b:0a:2f:b5:48:16:f9:10:52:82:54:9f:cf:5b:83:
42:2f:c7:ec:f5:5f:9a:e0:89:b7:f8:43:b5:41:ac:6a:53:29:
f7:56:3f:25:5e:6b:55:9a:29:d8:e8:75:d6:cd:04:66:37:4f:
31:03:43:91:9f:53:18:4e:9d:eb:7b:56:1e:d6:6a:dc:2a:52:
06:35:2f:54:cd:54:02:6a:33:c4:e5:c1:e4:aa:46:f2:1c:6b:
f0:9e:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:33:06 2025 by rpki-client