Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A78F9C23BC411F0BB4E18F3DAE4EC9C.roa
File: 1A78F9C23BC411F0BB4E18F3DAE4EC9C.roa (raw, json)
Hash identifier: /tz24317xL8dtTPUtID6g0iVHjQhp/np45LsxFwaMyA=
Subject key identifier: C9:DA:CF:33:8B:DA:F3:EE:43:74:E5:12:48:62:63:2C:64:B6:3B:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018372
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A78F9C23BC411F0BB4E18F3DAE4EC9C.roa
Signing time: Wed 28 May 2025 13:03:10 +0000
ROA not before: Wed 28 May 2025 13:03:05 +0000
ROA not after: Sun 06 Jul 2025 13:03:05 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
154.215.13.0/24 maxlen: 24
154.216.1.0/24 maxlen: 24
154.218.1.0/24 maxlen: 24
154.218.16.0/24 maxlen: 24
154.218.17.0/24 maxlen: 24
154.218.18.0/24 maxlen: 24
154.218.19.0/24 maxlen: 24
154.218.22.0/24 maxlen: 24
154.222.215.0/24 maxlen: 24
154.222.216.0/24 maxlen: 24
154.222.217.0/24 maxlen: 24
154.222.218.0/24 maxlen: 24
154.222.219.0/24 maxlen: 24
154.222.220.0/24 maxlen: 24
154.222.221.0/24 maxlen: 24
154.222.222.0/24 maxlen: 24
154.222.242.0/24 maxlen: 24
154.222.252.0/24 maxlen: 24
154.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99186 (0x18372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 13:03:05 2025 GMT
Not After : Jul 6 13:03:05 2025 GMT
Subject: CN=6837098d-40ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:90:cd:03:af:e4:69:77:08:3d:f9:87:eb:
4c:75:6e:7d:74:3c:9e:30:f4:05:a3:82:5e:33:c0:
9d:b9:07:0c:82:64:15:ba:50:f5:f4:6e:ad:92:64:
13:2d:70:f4:20:5e:f3:f7:3a:34:f1:73:d5:93:60:
0d:e6:7d:a1:7f:e3:fa:1f:96:36:1b:06:7e:ed:2c:
0d:8f:f4:b5:e4:21:b5:45:b5:de:9b:85:d6:27:df:
f0:28:32:19:9e:f8:80:39:68:72:57:2a:7f:53:39:
3a:9e:9e:95:09:6a:94:03:f5:ba:8c:54:10:10:8d:
1a:20:b7:ba:b0:3c:75:a4:52:4d:fc:81:01:62:cd:
bf:8d:0d:04:79:ff:b9:3c:f4:28:95:4e:bd:70:99:
01:67:e9:0e:aa:28:d0:70:cb:30:65:0c:b2:50:69:
c6:b7:ee:94:ed:56:ba:85:fb:c3:b6:c1:f7:4e:63:
21:12:d3:15:2f:f3:29:1a:fb:52:91:4c:8f:cd:5a:
09:33:fc:34:0d:84:14:90:e1:d6:b7:0a:89:98:cc:
19:ba:f7:f3:0d:6e:fe:b4:c9:3c:58:51:98:97:56:
b6:11:ad:e7:c9:12:29:c3:be:c4:db:ab:08:6f:08:
0e:20:68:16:57:99:4c:c6:b2:88:33:99:1d:88:56:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DA:CF:33:8B:DA:F3:EE:43:74:E5:12:48:62:63:2C:64:B6:3B:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A78F9C23BC411F0BB4E18F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/23
154.216.1.0/24
154.218.1.0/24
154.218.16.0/22
154.218.22.0/24
154.222.215.0-154.222.222.255
154.222.242.0/24
154.222.252.0/24
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
59:33:9d:4e:82:b1:64:cb:09:b1:0f:cc:87:6e:b5:ec:b9:ba:
64:b3:54:94:c9:75:ae:b3:7c:af:aa:64:4a:eb:1a:88:27:2b:
93:bd:90:c1:9d:90:e5:57:a5:7e:1f:28:fa:9f:40:68:61:ed:
15:18:72:41:f4:c2:73:3a:26:e9:1f:33:06:52:7b:4a:0d:e0:
a4:55:c8:a2:29:14:91:73:59:32:f4:d1:1f:b3:11:e4:65:7f:
38:fb:5f:a2:81:55:92:b2:d3:43:68:75:f1:3a:d1:dc:4b:c8:
dd:49:be:4f:52:79:fc:4e:88:04:ee:24:8f:85:ea:4e:ef:ad:
7f:dc:2f:6e:40:44:81:17:61:ad:5f:ac:6c:c7:5e:2d:37:a0:
25:37:22:52:b4:bc:75:ac:84:83:05:03:0b:5c:59:44:05:4f:
49:29:85:63:4b:2e:88:f5:05:07:25:96:ab:b6:bf:2e:95:87:
10:81:59:63:13:bf:fc:5f:23:c0:23:38:5a:b4:d3:a2:42:be:
5d:62:86:5b:c9:28:e8:99:26:57:f9:5e:6f:58:3a:be:b0:ec:
99:ad:75:4d:9f:96:02:ab:95:7d:38:9a:3c:83:77:aa:4e:77:
d8:54:5b:04:0a:62:a8:8b:03:5b:bf:cf:80:cf:e7:fe:b1:67:
72:f8:06:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:54:20 2025 by rpki-client