Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02884920617211F0B2CABE85DAE4EC9C.roa
File: 02884920617211F0B2CABE85DAE4EC9C.roa (raw, json)
Hash identifier: ED9JP+cHbjX7PmKZtcU9L9p7CiEC0eLKYWfEgMjMA38=
Subject key identifier: E9:3C:2D:34:16:D9:F5:E3:E2:98:E9:35:EE:1A:A2:84:EC:1F:4C:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02884920617211F0B2CABE85DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 11:51:15 +0000
ROA not before: Tue 15 Jul 2025 11:51:10 +0000
ROA not after: Tue 19 Aug 2025 11:51:10 +0000
asID: 9304
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.200.0/24 maxlen: 24
154.92.201.0/24 maxlen: 24
154.92.202.0/24 maxlen: 24
154.92.203.0/24 maxlen: 24
154.92.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101840 (0x18dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 11:51:10 2025 GMT
Not After : Aug 19 11:51:10 2025 GMT
Subject: CN=687640b3-6caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:97:b1:75:52:45:48:24:8c:a6:01:56:2a:
29:02:69:0b:d1:70:48:b8:67:f4:4d:28:22:b1:86:
ad:c6:d5:f5:a9:b0:cb:ea:95:06:1d:0c:c1:e6:4d:
d6:73:cb:b2:49:52:a0:45:63:a0:e3:fb:1d:21:98:
82:10:5e:5f:86:a8:9a:11:4e:7a:81:98:15:fc:fd:
9d:07:b7:0d:be:07:aa:47:62:e3:87:56:20:b7:eb:
5d:3e:54:e9:eb:70:73:62:71:62:92:b4:8c:e2:28:
36:55:88:f4:3d:89:8d:4a:d3:48:02:ac:72:5b:d4:
7f:0b:37:c7:ef:3d:94:af:02:1e:5a:b6:69:08:bc:
41:72:3b:48:ad:01:10:bb:7a:9d:76:55:f2:1f:74:
30:ba:4e:8f:bc:f6:39:2c:90:61:25:47:71:f6:b2:
e4:82:74:da:69:62:38:42:c8:7a:f4:a3:a1:97:cc:
c3:37:dc:2a:c7:20:26:93:ef:61:8e:2c:97:60:6d:
d4:f3:8a:36:e3:d0:6b:97:c0:ab:1e:fe:60:93:f5:
2f:14:01:15:ea:c5:80:a9:1b:d8:de:1f:84:5d:e8:
9e:a5:2c:a5:21:65:7c:3c:7f:95:66:8e:bc:c7:ed:
70:ee:76:f5:f7:cd:78:95:9c:89:d8:ae:02:b1:cf:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3C:2D:34:16:D9:F5:E3:E2:98:E9:35:EE:1A:A2:84:EC:1F:4C:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02884920617211F0B2CABE85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.196.255
154.92.200.0-154.92.204.255
Signature Algorithm: sha256WithRSAEncryption
14:5b:c1:f9:85:80:6b:f4:73:a9:ad:83:f3:4c:18:34:a7:06:
0b:a0:2b:33:8b:14:1a:70:82:2b:45:c8:40:97:47:89:63:62:
35:f8:1a:b6:5a:c9:d0:ee:24:77:2c:99:2f:18:3d:bb:39:d9:
de:71:d9:cf:cd:d1:50:38:ba:bb:ea:08:9f:82:f8:ab:fd:b5:
3f:23:43:57:b4:e6:b3:96:fb:02:d7:26:47:91:1d:2c:c6:29:
d3:a3:5f:2b:87:09:74:e7:1a:46:ef:75:19:85:fc:80:e9:81:
6f:9e:65:af:22:84:07:fb:79:7b:70:7c:0b:da:8a:07:32:29:
37:8e:68:9b:7c:10:6b:f1:e5:4b:55:77:1e:bd:83:30:fb:7d:
29:32:03:96:1f:93:c4:ef:4d:2d:1c:37:1b:06:66:e0:c3:d9:
09:27:c3:b2:b4:58:0b:e6:e2:f1:c5:5b:42:1f:4e:ce:a2:9f:
36:8b:08:86:0e:86:2e:03:6b:a3:ac:d1:b6:26:80:e7:b0:ca:
5d:43:7e:25:18:62:82:dd:39:4f:0b:c3:74:9a:b9:15:73:d7:
da:a3:21:0f:b6:fe:3b:da:60:4d:3d:9f:11:7c:57:a4:a7:13:
92:6f:da:58:51:f2:18:22:70:b0:a3:68:f6:e3:1b:7e:c6:77:
21:9a:31:01
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAY3QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzE1MTE1MTEwWhcNMjUwODE5MTE1MTEwWjAYMRYw
FAYDVQQDEw02ODc2NDBiMy02Y2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwDWXsXVSRUgkjKYBViopAmkL0XBIuGf0TSgisYatxtX1qbDL6pUGHQzB
5k3Wc8uySVKgRWOg4/sdIZiCEF5fhqiaEU56gZgV/P2dB7cNvgeqR2Ljh1Ygt+td
PlTp63BzYnFikrSM4ig2VYj0PYmNStNIAqxyW9R/CzfH7z2UrwIeWrZpCLxBcjtI
rQEQu3qddlXyH3Qwuk6PvPY5LJBhJUdx9rLkgnTaaWI4Qsh69KOhl8zDN9wqxyAm
k+9hjiyXYG3U84o249Brl8CrHv5gk/UvFAEV6sWAqRvY3h+EXeiepSylIWV8PH+V
Zo68x+1w7nb19814lZyJ2K4Csc+dyQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFOk8
LTQW2fXj4pjpNe4aooTsH0zGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMjg4NDkyMDYxNzIxMUYwQjJDQUJFODVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAaaXMADBACaXMQwDAME
A5pcyAMEAJpczDANBgkqhkiG9w0BAQsFAAOCAQEAFFvB+YWAa/Rzqa2D80wYNKcG
C6ArM4sUGnCCK0XIQJdHiWNiNfgatlrJ0O4kdyyZLxg9uznZ3nHZz83RUDi6u+oI
n4L4q/21PyNDV7Tms5b7AtcmR5EdLMYp06NfK4cJdOcaRu91GYX8gOmBb55lryKE
B/t5e3B8C9qKBzIpN45om3wQa/HlS1V3Hr2DMPt9KTIDlh+TxO9NLRw3GwZm4MPZ
CSfDsrRYC+bi8cVbQh9OzqKfNosIhg6GLgNro6zRtiaA57DKXUN+JRhigt05TwvD
dJq5FXPX2qMhD7b+O9pgTT2fEXxXpKcTkm/aWFHyGCJwsKNo9uMbfsZ3IZoxAQ==
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:38:22 2025 by rpki-client