Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B67B058250E511F0B2640B7FDAE4EC9C.roa
File: B67B058250E511F0B2640B7FDAE4EC9C.roa (raw, json)
Hash identifier: 9VM5XAalfl1OMXsZjLsIenpBzu44v3j6Irh2EO8NW+o=
Subject key identifier: 7D:15:25:E2:2C:0F:B9:17:92:52:84:A9:72:83:00:2A:70:3E:83:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01884C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B67B058250E511F0B2640B7FDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 10:26:39 +0000
ROA not before: Tue 24 Jun 2025 10:26:34 +0000
ROA not after: Fri 08 Aug 2025 10:26:34 +0000
asID: 44559
IP address blocks: 154.219.81.0/24 maxlen: 24
154.219.82.0/24 maxlen: 24
154.219.83.0/24 maxlen: 24
154.219.84.0/24 maxlen: 24
154.219.85.0/24 maxlen: 24
154.219.86.0/24 maxlen: 24
154.219.87.0/24 maxlen: 24
154.219.88.0/24 maxlen: 24
154.219.89.0/24 maxlen: 24
154.219.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100428 (0x1884c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 10:26:34 2025 GMT
Not After : Aug 8 10:26:34 2025 GMT
Subject: CN=685a7d5f-6889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:4b:4b:4a:37:57:0b:e1:60:d2:12:c2:7e:
57:a9:3e:3e:8f:a9:cb:50:73:ae:16:48:26:88:af:
7b:e6:21:d7:a9:b7:e0:31:4b:b1:8c:da:5b:31:5d:
a0:ae:fa:db:7c:b0:46:43:6e:e5:57:2b:cb:1b:3a:
17:b3:9a:b2:5d:9d:02:41:bd:b0:39:af:ad:b8:87:
85:48:1b:18:6f:e7:4b:e5:37:10:a3:28:ad:22:f4:
21:ad:db:2d:b6:09:cb:76:76:cc:8c:dc:7c:c9:5f:
86:89:52:16:d9:92:49:86:02:62:91:d7:52:6f:a0:
91:a2:d9:31:46:56:9a:2a:10:f4:ba:7f:7c:17:14:
44:10:0c:15:38:3c:76:73:4c:a7:a6:29:50:d2:16:
89:b8:64:6f:2f:a4:d7:11:ab:a3:38:97:d2:cb:6d:
15:9b:ee:5b:78:64:60:de:4c:e8:65:9d:88:47:35:
58:8b:f7:e7:c3:dc:e0:69:40:d4:f9:4e:8c:58:e0:
6e:5a:04:04:04:6e:e4:c9:38:27:1b:aa:8b:85:f3:
95:40:ba:dc:81:03:3c:b7:33:34:c6:79:1e:96:4c:
b5:4b:2b:42:7e:1e:b3:8e:39:92:7f:d5:5b:25:ae:
d1:05:da:94:97:5b:10:f6:a4:5f:6c:c0:53:14:e8:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:15:25:E2:2C:0F:B9:17:92:52:84:A9:72:83:00:2A:70:3E:83:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B67B058250E511F0B2640B7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.81.0-154.219.90.255
Signature Algorithm: sha256WithRSAEncryption
79:18:01:e1:2a:0b:57:bf:4f:6f:24:c4:a6:d8:a0:75:22:4b:
0e:91:20:de:5d:1e:f0:0a:9f:dc:46:ac:91:26:d1:a7:0f:b9:
e5:e2:43:e8:9e:78:11:65:97:f1:a3:08:1d:fe:46:c8:e5:a4:
ec:4d:e7:f9:fb:3d:53:b2:25:36:60:4c:84:52:f5:aa:74:68:
30:4a:85:6e:6e:43:3d:79:af:ac:59:6d:ec:26:85:d7:8c:fe:
c0:02:b8:4a:cf:0c:e1:69:26:50:af:c7:23:8e:ae:dc:46:36:
a9:3c:6f:bd:c4:7c:90:aa:ba:27:e8:df:3e:b3:cc:81:53:2e:
4a:b1:44:22:0a:43:3b:47:f9:8c:a6:77:12:97:34:17:72:00:
07:c5:23:ef:5c:18:3e:77:f9:f4:cd:5f:60:d3:fb:51:27:af:
f5:06:d6:b5:64:53:38:78:00:03:ed:a4:7a:e2:0e:7e:56:67:
b1:d4:89:19:2e:14:97:24:a0:dd:36:39:57:ff:10:89:5b:32:
45:02:f7:b0:22:81:3d:68:9a:29:68:8c:54:dd:77:64:89:3e:
6c:2e:ae:69:91:8a:68:6c:96:13:33:2b:1a:4a:e5:05:b4:9c:
64:99:e0:4a:ca:f9:17:17:92:1d:b9:14:95:3d:11:71:4d:07:
33:b2:8c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:40:45 2025 by rpki-client