Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115BE4923D6511F08C791D8BDAE4EC9C.roa
File: 115BE4923D6511F08C791D8BDAE4EC9C.roa (raw, json)
Hash identifier: lVp8babH7vtRlZRK8+YaSFfDZiPEC4SIUSNim5Bi4JM=
Subject key identifier: 27:58:0A:D8:CD:D1:80:97:E6:E2:A8:DC:FA:C8:FA:BD:F7:86:14:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115BE4923D6511F08C791D8BDAE4EC9C.roa
Signing time: Fri 30 May 2025 14:47:54 +0000
ROA not before: Fri 30 May 2025 14:47:49 +0000
ROA not after: Mon 09 Jun 2025 14:47:49 +0000
asID: 152849
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99311 (0x183ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 14:47:49 2025 GMT
Not After : Jun 9 14:47:49 2025 GMT
Subject: CN=6839c51a-e434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:f9:f8:cc:28:72:13:ae:94:d9:b7:67:f0:
ca:b7:1d:49:f7:ac:42:3e:ab:7e:a9:41:2f:56:5d:
a5:53:2a:d1:c8:86:a9:6d:f8:41:54:c1:84:a7:f7:
8e:1d:ac:f1:10:76:57:2c:cc:43:00:66:09:1b:1f:
9e:cc:a0:ae:3b:41:4f:14:e5:f9:05:ce:cb:cd:20:
d9:8a:22:d0:e4:c1:ce:82:96:a4:69:f6:b4:3e:1c:
b0:f9:4e:c2:2b:3a:f5:0e:e8:00:6d:a3:37:03:f7:
c0:27:39:ba:7e:94:ad:95:0a:7c:05:7f:0a:32:b6:
60:c3:95:20:23:af:12:dc:2e:4b:71:56:d1:61:4b:
25:5f:4b:c9:60:f0:fe:68:b9:36:b2:8c:95:24:84:
5d:fd:e4:47:45:ef:41:6b:4d:c3:e2:a6:de:c1:c4:
44:e5:d6:9b:33:aa:e4:7d:9a:96:93:41:09:51:b3:
6f:19:f6:54:ea:66:8d:48:4b:84:39:a0:95:2f:7b:
18:f1:92:63:c1:87:57:d2:78:cd:24:b7:91:73:ba:
fe:ae:93:dc:a5:c8:57:7e:09:a8:3c:e3:40:f8:c0:
a6:26:33:18:55:b6:72:a8:02:00:4f:0e:8e:c1:c1:
1d:20:fa:e8:83:99:53:c9:b9:8d:c4:ff:54:93:1b:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:58:0A:D8:CD:D1:80:97:E6:E2:A8:DC:FA:C8:FA:BD:F7:86:14:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115BE4923D6511F08C791D8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:1f:18:48:4a:d5:1d:e8:d5:87:d5:a5:ef:13:c9:d9:41:51:
8a:f1:f1:36:49:de:49:2e:aa:64:56:70:60:f7:11:00:38:ad:
5b:ca:3a:fa:0f:8b:5d:fd:29:01:e0:e7:dd:6c:a3:49:cf:25:
ca:c0:88:d8:75:b3:dd:e8:40:36:5b:36:b7:5d:73:c7:84:0b:
fb:3b:d9:32:c8:b1:71:01:76:99:87:ca:d4:4e:1e:a7:f9:42:
43:46:46:d5:d3:bd:c9:62:2b:79:8f:0f:1c:29:65:d5:27:c4:
91:d4:e6:e3:61:99:82:3e:29:79:b2:38:83:5e:03:95:75:59:
02:18:af:df:92:08:36:3b:df:99:83:0b:6b:d4:a8:4b:56:6c:
c4:71:df:3d:ac:ce:0f:1b:9b:9e:d0:1e:4e:51:dd:65:1c:13:
73:d3:98:03:85:22:21:c8:f1:cd:f7:5c:6a:5d:91:d5:26:28:
ac:6d:04:46:7c:b8:53:64:8e:1c:9b:25:e7:4a:9b:8b:a2:d3:
0c:46:87:52:04:e5:02:f3:26:7e:cb:45:c0:10:ab:f3:3c:cf:
ae:eb:d0:21:59:9f:1c:06:05:e7:73:96:01:03:b8:1a:e3:4e:
40:75:51:da:6a:7a:60:97:8a:b9:47:44:74:20:13:5a:2c:2b:
42:15:77:af
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYPvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTMwMTQ0NzQ5WhcNMjUwNjA5MTQ0NzQ5WjAYMRYw
FAYDVQQDEw02ODM5YzUxYS1lNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsnX5+MwochOulNm3Z/DKtx1J96xCPqt+qUEvVl2lUyrRyIapbfhBVMGE
p/eOHazxEHZXLMxDAGYJGx+ezKCuO0FPFOX5Bc7LzSDZiiLQ5MHOgpakafa0Phyw
+U7CKzr1DugAbaM3A/fAJzm6fpStlQp8BX8KMrZgw5UgI68S3C5LcVbRYUslX0vJ
YPD+aLk2soyVJIRd/eRHRe9Ba03D4qbewcRE5dabM6rkfZqWk0EJUbNvGfZU6maN
SEuEOaCVL3sY8ZJjwYdX0njNJLeRc7r+rpPcpchXfgmoPONA+MCmJjMYVbZyqAIA
Tw6OwcEdIProg5lTybmNxP9UkxtLHQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCdY
CtjN0YCX5uKo3PrI+r33hhToMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMTVCRTQ5MjNENjUxMUYwOEM3OTFEOEJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEmtIQAwQEmtVAMA0GCSqG
SIb3DQEBCwUAA4IBAQBuHxhIStUd6NWH1aXvE8nZQVGK8fE2Sd5JLqpkVnBg9xEA
OK1byjr6D4td/SkB4OfdbKNJzyXKwIjYdbPd6EA2Wza3XXPHhAv7O9kyyLFxAXaZ
h8rUTh6n+UJDRkbV073JYit5jw8cKWXVJ8SR1ObjYZmCPil5sjiDXgOVdVkCGK/f
kgg2O9+Zgwtr1KhLVmzEcd89rM4PG5ue0B5OUd1lHBNz05gDhSIhyPHN91xqXZHV
JiisbQRGfLhTZI4cmyXnSpuLotMMRodSBOUC8yZ+y0XAEKvzPM+u69AhWZ8cBgXn
c5YBA7ga405AdVHaanpgl4q5R0R0IBNaLCtCFXev
-----END CERTIFICATE-----
Generated at Fri Jun 6 12:31:46 2025 by rpki-client