Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14682C76406811F08F1C56A2DAE4EC9C.roa
File: 14682C76406811F08F1C56A2DAE4EC9C.roa (raw, json)
Hash identifier: tQAAYJsy7QSGvZKmRJ4v3BZV3XFf9yBXhsFTedM5dec=
Subject key identifier: E3:8A:B3:37:25:4C:5F:A2:57:54:B6:7E:19:D0:E5:D4:54:78:3A:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018461
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14682C76406811F08F1C56A2DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 10:47:02 +0000
ROA not before: Tue 03 Jun 2025 10:46:57 +0000
ROA not after: Wed 10 Sep 2025 10:46:57 +0000
asID: 203020
IP address blocks: 154.197.120.0/24 maxlen: 24
154.201.46.0/24 maxlen: 24
154.201.58.0/24 maxlen: 24
154.202.70.0/23 maxlen: 24
154.202.86.0/23 maxlen: 24
154.203.63.0/24 maxlen: 24
154.203.95.0/24 maxlen: 24
154.204.37.0/24 maxlen: 24
154.204.40.0/24 maxlen: 24
154.204.42.0/24 maxlen: 24
154.204.48.0/24 maxlen: 24
154.204.51.0/24 maxlen: 24
154.205.168.0/22 maxlen: 24
154.205.174.0/23 maxlen: 24
154.206.0.0/22 maxlen: 24
154.206.13.0/24 maxlen: 24
154.207.84.0/22 maxlen: 24
154.207.102.0/23 maxlen: 24
154.207.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99425 (0x18461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 10:46:57 2025 GMT
Not After : Sep 10 10:46:57 2025 GMT
Subject: CN=683ed2a5-580e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:e2:2e:b8:c7:e5:d5:33:e8:77:7a:48:b3:
da:aa:af:eb:b8:0e:59:fa:9a:43:c9:36:70:a9:81:
ae:15:0e:01:98:d7:8e:ee:c0:8e:43:33:44:44:4b:
83:2e:48:b6:01:fa:25:cf:29:b0:3d:ff:c9:c8:47:
72:c4:86:34:89:2d:87:d7:04:ec:75:ce:72:99:fe:
17:41:cf:79:6f:20:30:e5:30:13:32:4b:d3:02:71:
e7:5a:05:31:7a:72:12:3d:66:93:f8:45:b5:2d:b0:
4a:1d:fb:0a:4c:e0:05:94:84:8a:27:a5:ef:b6:f1:
f4:9d:44:31:e2:40:c5:b7:90:57:b9:77:90:5e:6a:
07:1a:2c:45:f8:31:a0:9f:c5:9f:41:b3:9c:91:27:
00:fd:8c:ed:e8:9d:c8:76:1c:82:5a:4b:18:50:14:
76:f5:0c:e7:29:01:6e:55:1a:0e:95:16:ef:8c:20:
6f:34:d9:6c:82:e3:37:76:52:00:24:ba:e3:1c:bd:
85:1c:c8:2a:54:d6:cf:e7:d2:ef:ad:b6:50:59:1d:
42:33:75:e9:8b:c0:37:70:4d:6d:c3:8e:8a:f6:4f:
f8:3f:68:2c:7b:7e:d6:b2:79:60:56:72:84:ec:28:
b0:a5:f4:b1:7b:9f:49:61:ea:5e:e6:dc:0c:e0:ca:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:B3:37:25:4C:5F:A2:57:54:B6:7E:19:D0:E5:D4:54:78:3A:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14682C76406811F08F1C56A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.120.0/24
154.201.46.0/24
154.201.58.0/24
154.202.70.0/23
154.202.86.0/23
154.203.63.0/24
154.203.95.0/24
154.204.37.0/24
154.204.40.0/24
154.204.42.0/24
154.204.48.0/24
154.204.51.0/24
154.205.168.0/22
154.205.174.0/23
154.206.0.0/22
154.206.13.0/24
154.207.84.0/22
154.207.102.0/23
154.207.114.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:2c:04:fb:48:04:b8:01:51:a1:31:4b:c9:14:a6:31:e4:93:
0e:fe:eb:09:d9:bd:fb:11:74:4a:52:b7:61:6c:3f:1d:8a:15:
1b:d1:af:ff:60:b6:34:bb:19:89:18:cf:73:04:15:33:86:ac:
ca:29:15:4e:c4:aa:ed:09:85:55:25:f9:46:9e:e8:a3:50:ec:
c7:43:70:7b:36:25:ce:2b:08:b9:ef:44:22:2c:47:f0:89:2b:
d8:9b:b7:67:d7:e1:af:8c:e4:26:a1:8a:d4:88:86:33:10:7b:
99:12:0d:65:bb:b3:66:7f:fa:04:2a:6f:31:ee:c7:dd:68:a9:
4a:97:9c:a1:51:33:d1:e9:db:f5:10:8f:ec:36:d8:ca:6c:51:
8b:c0:33:d8:83:67:4c:7b:d2:56:9b:ac:9c:69:4a:a9:55:03:
d5:be:b6:31:c7:72:2e:b2:4c:21:eb:7f:30:d3:fb:5d:03:e7:
8f:82:12:a6:ae:f4:69:e4:94:b6:93:97:ef:4f:4d:14:54:bc:
17:34:3a:03:e7:3d:ed:ba:9a:cb:d9:ef:88:b0:4d:25:43:cc:
b1:f8:00:a1:90:95:60:55:ec:31:f9:9a:fe:3c:a7:ad:e0:34:
c1:fe:6d:e4:4c:86:24:41:a4:ea:8d:e9:35:50:8e:96:69:4b:
8a:6a:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:33:45 2025 by rpki-client