Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCE3DC44357711F0A8A4A3B2DAE4EC9C.roa
File: FCE3DC44357711F0A8A4A3B2DAE4EC9C.roa (raw, json)
Hash identifier: 5uRL0nmIaRTA6pU3Prckr62WvIgOjDXnd5YNS40TSOo=
Subject key identifier: F5:25:D2:6C:9C:E8:66:F6:C5:2C:9D:30:54:2A:31:E8:14:37:75:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCE3DC44357711F0A8A4A3B2DAE4EC9C.roa
Signing time: Tue 20 May 2025 12:43:11 +0000
ROA not before: Tue 20 May 2025 12:43:06 +0000
ROA not after: Mon 30 Jun 2025 12:43:06 +0000
asID: 62240
IP address blocks: 154.194.80.0/24 maxlen: 24
154.194.81.0/24 maxlen: 24
154.194.83.0/24 maxlen: 24
154.194.84.0/24 maxlen: 24
154.194.85.0/24 maxlen: 24
154.194.118.0/24 maxlen: 24
154.195.121.0/24 maxlen: 24
154.195.122.0/24 maxlen: 24
154.195.123.0/24 maxlen: 24
154.195.125.0/24 maxlen: 24
154.195.127.0/24 maxlen: 24
154.195.128.0/24 maxlen: 24
154.195.129.0/24 maxlen: 24
154.195.130.0/24 maxlen: 24
154.195.131.0/24 maxlen: 24
154.195.132.0/24 maxlen: 24
154.195.133.0/24 maxlen: 24
154.195.134.0/24 maxlen: 24
154.195.135.0/24 maxlen: 24
154.196.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98733 (0x181ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 12:43:06 2025 GMT
Not After : Jun 30 12:43:06 2025 GMT
Subject: CN=682c78df-969a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:6b:17:da:1a:e6:7a:2b:99:89:54:60:01:
de:f0:5f:2c:71:47:5f:e6:53:96:2e:69:e3:5a:c0:
39:2a:9e:d9:07:db:6a:22:66:c3:94:09:db:a7:67:
e3:80:bb:cf:de:49:91:19:54:d6:62:cf:02:79:52:
d8:2e:bd:0f:9f:52:e8:63:c1:4e:78:81:15:26:f6:
57:93:60:8c:eb:38:26:c7:a6:67:94:ed:9d:ae:71:
4d:c2:17:9b:59:4f:6a:15:56:ff:41:0e:08:04:0a:
52:a0:09:5c:30:5d:65:4a:a4:45:cf:5f:07:41:4d:
c9:80:c1:4c:aa:92:b1:3c:77:e1:18:be:e0:2c:46:
3e:94:b2:c6:eb:aa:5b:4b:bc:2c:15:d4:74:c3:f6:
59:77:dd:80:70:a2:9d:15:c7:50:bc:21:ae:4a:20:
bd:17:70:01:a4:a1:e8:37:ae:35:64:45:bc:34:27:
82:1d:19:7d:d4:f7:0b:c2:8c:80:17:a9:ea:b7:6e:
b2:45:f7:de:c5:8f:1f:04:23:63:f8:42:94:ea:61:
e0:8d:67:4b:98:3c:28:a2:82:3b:9a:95:91:e5:45:
11:61:53:28:09:d4:e1:16:02:b5:0d:ec:c1:94:f9:
e7:63:2f:a0:54:9e:7b:9e:f5:6c:73:7f:99:7f:27:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:25:D2:6C:9C:E8:66:F6:C5:2C:9D:30:54:2A:31:E8:14:37:75:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCE3DC44357711F0A8A4A3B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.80.0/23
154.194.83.0-154.194.85.255
154.194.118.0/24
154.195.121.0-154.195.123.255
154.195.125.0/24
154.195.127.0-154.195.135.255
154.196.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a6:b6:39:20:79:94:b9:e9:f1:d0:51:21:5b:00:3c:c9:03:
5b:95:ab:3f:29:35:41:f9:75:ff:cc:af:63:12:cc:4a:b7:60:
8f:99:c6:f5:df:86:1e:6f:02:eb:43:fd:36:80:59:4d:d4:43:
3f:9c:7c:ac:6d:f3:fc:dc:07:a2:83:5b:e3:2e:fe:92:55:0e:
69:44:ae:b9:42:ba:cd:93:ff:0e:d0:55:b6:a3:45:92:5a:8c:
9a:7b:e1:83:94:d5:9c:8c:46:1e:69:63:22:91:26:a3:7a:86:
71:57:84:01:d1:65:43:46:07:14:09:af:25:9e:a7:43:72:86:
e7:ef:01:5b:40:5d:35:a5:97:8a:06:24:a5:ed:dc:3b:2b:2c:
0d:1e:ff:dc:a3:d0:6e:27:95:37:e7:af:1d:1c:aa:66:3e:52:
25:6d:50:8e:a3:8c:2c:01:77:b1:ec:43:fe:05:c6:9c:e2:2d:
80:56:de:64:ab:d3:70:bf:89:18:a6:a1:16:89:d1:cb:f5:24:
e9:19:e3:b8:ae:e6:e5:60:1e:a8:00:32:5f:14:47:38:9c:b9:
12:71:71:c7:62:41:13:df:94:05:a9:d4:93:1f:57:b1:ed:e2:
60:c2:1a:9a:4c:a5:6c:e7:ca:87:a6:98:13:7a:5c:d2:52:cc:
90:81:48:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:13:42 2025 by rpki-client