Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9E87AA269511F0B9FEB998DAE4EC9C.roa
File: 6D9E87AA269511F0B9FEB998DAE4EC9C.roa (raw, json)
Hash identifier: I+sGN0lA6n9j7NZw2CZ9Ic49eGQqtYqHz+Q/TzRTlfs=
Subject key identifier: 07:A5:9A:41:48:88:67:40:38:BE:A6:CB:5A:AD:05:B1:BA:C2:07:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9E87AA269511F0B9FEB998DAE4EC9C.roa
Signing time: Thu 01 May 2025 14:06:09 +0000
ROA not before: Thu 01 May 2025 14:06:03 +0000
ROA not after: Fri 28 Apr 2028 14:06:03 +0000
asID: 17561
IP address blocks: 154.93.145.0/24 maxlen: 24
154.93.146.0/24 maxlen: 24
154.93.147.0/24 maxlen: 24
154.93.149.0/24 maxlen: 24
154.93.151.0/24 maxlen: 24
154.93.152.0/24 maxlen: 24
154.93.153.0/24 maxlen: 24
154.93.154.0/24 maxlen: 24
154.93.155.0/24 maxlen: 24
154.93.156.0/24 maxlen: 24
154.93.157.0/24 maxlen: 24
154.93.158.0/24 maxlen: 24
154.93.159.0/24 maxlen: 24
154.93.160.0/24 maxlen: 24
154.93.161.0/24 maxlen: 24
154.93.164.0/24 maxlen: 24
154.93.165.0/24 maxlen: 24
154.93.166.0/24 maxlen: 24
154.93.167.0/24 maxlen: 24
154.93.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97814 (0x17e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 14:06:03 2025 GMT
Not After : Apr 28 14:06:03 2028 GMT
Subject: CN=68137fd0-45b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:02:54:53:d9:89:a5:77:81:90:c6:8f:a6:
12:c1:10:34:80:c9:6e:e2:37:c7:ad:68:3f:69:c5:
22:a6:5c:28:df:e7:c9:a9:6c:22:27:3b:3f:40:81:
c2:a1:46:84:69:64:52:42:c6:54:57:92:d8:6e:45:
76:43:27:c8:c4:80:3d:1c:72:95:03:c5:9b:ec:87:
fd:3b:92:fb:2b:07:77:02:79:d0:69:dd:a0:c7:1c:
c6:28:77:0e:f6:72:c8:35:dc:72:97:0d:be:a9:0a:
d3:ae:8c:7f:0b:d9:03:19:6a:9d:a6:db:2f:f6:7a:
9f:0f:87:35:47:85:58:08:67:dd:fb:6b:94:f2:2c:
2d:10:4a:08:ee:ee:a6:6a:e7:75:20:10:cf:ce:6e:
b6:54:57:cd:86:55:37:8e:ce:81:ea:a1:cd:e7:38:
ea:32:70:e2:e3:88:82:39:a9:7c:f6:f8:51:bb:fd:
b8:4c:b0:4a:45:ae:11:61:18:01:d4:7c:03:f1:74:
67:93:8e:72:7c:ca:85:44:ca:57:e9:ea:f5:be:d8:
bd:c0:2d:c2:0a:c6:a5:89:81:57:19:e7:60:e0:be:
9f:ed:d4:91:c7:9b:d1:dc:c4:2e:d7:94:f9:b5:d1:
e8:32:ad:2e:ae:3d:8b:7f:0a:bf:6b:a5:fc:4c:63:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A5:9A:41:48:88:67:40:38:BE:A6:CB:5A:AD:05:B1:BA:C2:07:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9E87AA269511F0B9FEB998DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.145.0-154.93.147.255
154.93.149.0/24
154.93.151.0-154.93.161.255
154.93.164.0-154.93.168.255
Signature Algorithm: sha256WithRSAEncryption
77:22:17:15:c9:ac:12:35:03:ba:1d:8f:59:a7:8b:1e:1a:9a:
35:bb:cf:22:ee:4a:4e:6f:00:8e:8e:f9:a7:5f:36:0b:83:8a:
de:97:6b:26:8f:2b:45:51:aa:ab:b5:02:d1:8d:d0:ec:d1:77:
8e:37:d9:57:2d:bd:46:b5:7b:dd:18:77:ef:0c:b2:17:5a:a7:
15:d1:24:cd:7e:c6:4a:cf:52:92:f2:32:a3:77:7e:e0:7c:2b:
2e:32:0b:e5:b1:f3:17:48:b8:34:b6:d7:2b:d9:84:f8:1f:d2:
a9:e3:c2:09:b8:44:08:1e:b3:c8:87:d4:fd:44:1f:66:90:44:
9d:fc:21:33:eb:52:58:dc:a0:a5:6d:21:6d:42:f8:75:a5:32:
5a:57:1e:9a:c6:15:b7:e8:0c:0d:30:3b:6f:7c:4f:fb:c4:b9:
2f:f7:6e:e5:f4:3c:ad:d3:28:f0:d4:bb:5b:0e:18:87:19:b8:
70:da:45:b2:db:4b:1a:6c:41:63:48:3f:1e:80:38:25:a3:70:
2f:b9:5e:fb:5c:29:b0:41:a8:36:67:cf:78:58:c8:d6:45:7a:
d5:df:c9:49:be:6d:8a:92:5a:39:4d:5f:c2:be:c5:bf:19:5e:
03:d0:61:96:ec:0a:ef:7e:29:4b:4e:98:62:84:dd:10:67:0c:
31:6b:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:12:00 2025 by rpki-client