Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3008B424EA411F098DE0DD9DAE4EC9C.roa
File: E3008B424EA411F098DE0DD9DAE4EC9C.roa (raw, json)
Hash identifier: 90OioQxhAby+OTbpo4Zqvpl4X3ylwbzzyt9csya7/KU=
Subject key identifier: 5E:85:E4:DF:C2:1B:6E:F8:E1:FD:E9:29:B3:4D:FB:33:5C:DA:A5:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3008B424EA411F098DE0DD9DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 13:37:34 +0000
ROA not before: Sat 21 Jun 2025 13:37:30 +0000
ROA not after: Wed 30 Jul 2025 13:37:30 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
154.194.73.0/24 maxlen: 24
154.194.74.0/24 maxlen: 24
154.194.89.0/24 maxlen: 24
154.194.92.0/24 maxlen: 24
154.194.93.0/24 maxlen: 24
154.194.98.0/24 maxlen: 24
154.196.18.0/24 maxlen: 24
154.196.22.0/24 maxlen: 24
154.196.50.0/24 maxlen: 24
154.196.54.0/24 maxlen: 24
154.196.55.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
154.196.62.0/24 maxlen: 24
154.196.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100308 (0x187d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 13:37:30 2025 GMT
Not After : Jul 30 13:37:30 2025 GMT
Subject: CN=6856b59e-e403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:cc:27:a9:3c:78:94:b3:ac:b0:e6:70:ca:
d7:7a:1a:ad:52:c6:65:89:8a:46:ba:3e:43:8a:f7:
1a:bb:8a:5b:d7:46:17:ed:65:00:5e:cf:5c:d5:e4:
59:35:66:a4:1c:34:87:37:dd:dd:41:20:29:0e:6d:
8f:71:b3:5c:3d:38:87:6e:85:4e:63:60:ce:81:9a:
ed:dd:89:35:82:81:3f:f3:94:d4:d1:d5:8f:84:41:
c6:d8:1d:20:ff:b7:2e:ed:39:6f:95:ba:6f:50:5d:
71:6c:35:84:ad:59:54:b0:ae:52:5f:4e:f9:10:54:
af:12:65:ee:8b:2f:67:c3:a2:6a:4e:f1:5c:ab:a3:
90:68:0e:71:ff:66:dd:85:82:ab:0d:3c:57:3e:7c:
d6:43:68:99:2d:2b:16:e4:4e:e7:1d:c4:05:13:89:
0c:63:09:bd:ac:37:a9:eb:fc:56:55:a6:c8:fc:45:
32:a9:56:78:f0:dd:b9:c4:53:5d:8a:17:46:46:f4:
86:58:de:18:15:ad:12:12:a5:64:7d:97:4b:07:ea:
5f:fe:57:6c:7d:bb:45:ca:4c:0c:df:aa:e0:47:7c:
73:8e:b4:5c:ce:a4:1b:dc:f3:4e:4f:b1:bb:c6:5e:
61:7b:17:e0:53:08:4b:ef:e4:a6:e0:27:a7:bd:56:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:E4:DF:C2:1B:6E:F8:E1:FD:E9:29:B3:4D:FB:33:5C:DA:A5:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3008B424EA411F098DE0DD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0-154.194.74.255
154.194.89.0/24
154.194.92.0/23
154.194.98.0/24
154.196.18.0/24
154.196.22.0/24
154.196.50.0/24
154.196.54.0-154.196.62.255
154.196.64.0/24
Signature Algorithm: sha256WithRSAEncryption
11:57:72:80:3e:6d:54:80:a6:50:22:88:f3:1c:2e:3a:c2:3b:
83:1e:75:40:6d:b3:be:90:49:44:c7:13:7f:7a:de:7c:ce:4c:
61:a4:8b:7e:7e:b1:e2:1c:c9:00:0c:bd:51:63:00:a5:ab:64:
b7:7a:9f:f5:e5:d0:8e:11:45:1b:8b:b3:67:a7:bd:73:3e:f3:
13:d7:fc:3d:93:79:2a:7e:a4:a3:28:8c:db:86:e4:b3:9e:57:
7f:06:e5:66:c1:de:67:64:af:2a:39:1c:db:b2:b0:05:44:b0:
cb:50:93:3b:64:02:a4:44:54:26:ab:55:2f:59:9d:53:d3:43:
d6:aa:49:07:d5:7b:a8:6d:b1:76:01:54:c0:bc:98:d5:33:72:
95:c9:b3:3a:ba:72:ba:06:7a:8d:97:26:16:d1:1c:05:56:ca:
2c:26:5a:d4:78:14:45:d4:c9:a7:ca:0e:b9:8f:ff:c0:53:89:
c3:81:3e:77:be:ec:fd:9f:5c:db:07:1b:49:1f:ee:aa:36:eb:
ec:0b:79:c7:1d:a8:f9:e8:3d:48:87:59:fd:fc:ad:94:71:e3:
66:aa:cc:5e:7d:9b:d2:66:e1:d8:ac:17:18:2d:04:8f:cc:32:
7f:92:b4:7a:1e:34:01:7e:ca:26:3a:07:b3:f4:ba:21:84:6f:
8a:da:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:08:34 2025 by rpki-client