Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9E157BA4E9A11F0AF34A598DAE4EC9C.roa
File: A9E157BA4E9A11F0AF34A598DAE4EC9C.roa (raw, json)
Hash identifier: xEgVj3t8dvNAvwhghLrnzOObVQoTjzbLV5Q26qeQ9Cc=
Subject key identifier: 16:E8:33:19:B4:34:D2:45:FE:4A:A7:6A:B6:69:3E:C8:A6:D3:0E:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9E157BA4E9A11F0AF34A598DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 12:24:23 +0000
ROA not before: Sat 21 Jun 2025 12:24:19 +0000
ROA not after: Wed 30 Jul 2025 12:24:19 +0000
asID: 62240
IP address blocks: 154.195.139.0/24 maxlen: 24
154.195.143.0/24 maxlen: 24
154.195.144.0/24 maxlen: 24
154.195.145.0/24 maxlen: 24
154.195.146.0/24 maxlen: 24
154.195.147.0/24 maxlen: 24
154.195.148.0/24 maxlen: 24
154.195.149.0/24 maxlen: 24
154.195.150.0/24 maxlen: 24
154.195.151.0/24 maxlen: 24
154.195.168.0/24 maxlen: 24
154.195.169.0/24 maxlen: 24
154.195.170.0/24 maxlen: 24
154.195.171.0/24 maxlen: 24
154.195.172.0/24 maxlen: 24
154.195.173.0/24 maxlen: 24
154.195.174.0/24 maxlen: 24
154.195.175.0/24 maxlen: 24
154.195.176.0/24 maxlen: 24
154.195.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100290 (0x187c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 12:24:19 2025 GMT
Not After : Jul 30 12:24:19 2025 GMT
Subject: CN=6856a477-b6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:90:b7:62:fc:fc:0d:08:4a:08:a8:16:88:
5a:6a:f4:15:b6:46:ba:26:68:42:81:98:37:b4:6d:
24:c9:b3:6e:cd:be:83:58:2b:b2:60:b1:1b:36:2a:
20:1a:b2:1d:d3:1d:da:f6:44:35:59:32:71:fe:2c:
61:dd:44:df:38:9a:23:40:2d:13:a4:c1:d1:26:d9:
d1:12:4a:5f:8f:45:e1:50:03:71:a1:ba:e6:db:e9:
2e:54:95:68:0f:c8:d3:79:0c:1f:ba:b3:e2:8e:af:
a9:1a:45:d3:fb:62:7f:79:0d:eb:db:e8:ec:57:c3:
6b:88:26:af:25:35:80:91:7f:f5:73:ba:3c:30:a0:
03:c6:09:17:19:bf:02:2c:eb:d2:b7:2b:db:63:97:
10:73:af:67:d1:3a:08:f8:0e:d0:be:57:4f:92:d9:
4a:a2:38:d2:49:77:e7:bf:bb:89:59:fb:8d:26:2c:
38:17:5c:66:72:b9:60:7c:c9:26:62:ad:8d:eb:ee:
8c:7d:32:62:d1:00:87:6b:4f:2f:5c:23:66:41:bd:
9a:1c:a0:00:18:d3:70:5b:96:8d:00:37:0d:c9:65:
26:80:cb:0a:b1:1c:d2:a8:2d:c6:24:93:42:c1:cf:
43:13:4c:f9:6f:f9:88:cd:cd:67:33:42:4a:76:18:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:33:19:B4:34:D2:45:FE:4A:A7:6A:B6:69:3E:C8:A6:D3:0E:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9E157BA4E9A11F0AF34A598DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.139.0/24
154.195.143.0-154.195.151.255
154.195.168.0-154.195.177.255
Signature Algorithm: sha256WithRSAEncryption
76:1e:d9:6f:17:eb:5f:07:e8:ca:0a:41:09:f6:50:22:d3:51:
a2:21:f6:e0:13:51:ca:7c:57:ab:27:4c:44:08:f3:37:4f:19:
84:0b:f4:5a:0d:f9:92:0d:92:65:86:cc:63:fc:d2:16:5f:4d:
2e:8a:f3:36:c2:80:44:36:c4:40:48:4d:b6:43:7e:1f:9f:49:
25:58:b5:43:5e:0b:8d:ad:47:27:7f:5c:b2:e8:41:fc:23:7c:
4e:46:5e:93:b0:65:f7:79:b0:66:0a:0f:c5:20:bb:06:85:b1:
f9:5e:21:d0:6f:8c:19:9e:38:23:63:d8:22:8f:08:a9:40:bc:
f1:a6:82:46:d5:2d:6d:33:ad:da:7d:7b:0e:00:f7:63:2d:d1:
96:28:5e:fa:94:d1:77:b0:8f:e6:32:bb:50:3a:0c:90:df:5c:
48:17:f4:cb:32:79:0e:35:59:3c:cb:70:b3:2b:79:38:d2:67:
80:ef:db:93:4a:41:3b:96:72:47:67:b8:f9:d8:d9:c6:1e:99:
3d:54:01:57:fd:a0:3c:0e:6c:ec:f0:fa:6d:9f:bc:bc:84:e9:
e1:9b:d2:99:a0:93:79:bf:04:04:a7:e0:07:c8:f8:b7:22:fc:
f5:8e:08:c1:c3:a6:fc:28:83:3d:f1:c3:30:26:b7:04:c3:00:
96:6d:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:48:52 2025 by rpki-client