Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27B8F7DE3E2D11F08B0CD79FDAE4EC9C.roa
File: 27B8F7DE3E2D11F08B0CD79FDAE4EC9C.roa (raw, json)
Hash identifier: sY0KHV5+SzxsLUmVrh6gWdxPth8BhJbDKvFtoVC7Hrs=
Subject key identifier: 2F:8D:E7:19:85:E5:98:9D:4A:79:02:5C:55:35:C1:9F:EC:5B:EF:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01841A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27B8F7DE3E2D11F08B0CD79FDAE4EC9C.roa
Signing time: Sat 31 May 2025 14:40:11 +0000
ROA not before: Sat 31 May 2025 14:40:06 +0000
ROA not after: Mon 07 Jul 2025 14:40:06 +0000
asID: 54801
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99354 (0x1841a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 14:40:06 2025 GMT
Not After : Jul 7 14:40:06 2025 GMT
Subject: CN=683b14cb-4ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:d5:27:aa:fe:35:b9:00:5d:bd:83:a1:df:
ad:6b:30:42:1c:7f:55:76:d3:ac:3b:b3:6a:cc:98:
4b:ec:ff:13:b3:1a:8c:4d:14:60:31:74:40:d4:cf:
ae:fd:bd:06:51:03:30:1d:fe:08:d5:6f:28:c0:9b:
f2:0d:36:dd:e7:2b:e5:fc:d6:fc:7a:ab:af:52:72:
af:dd:9c:ae:2e:08:f7:87:27:da:6c:2c:a7:30:dc:
ff:1a:68:d4:66:eb:9f:6a:0f:22:f6:04:b4:ef:20:
95:ea:57:d7:92:ac:8e:6d:b2:39:ee:08:64:a2:37:
b8:37:8e:dc:00:cb:97:7e:e8:a5:cb:9f:9e:c6:e4:
62:58:a6:64:13:ce:c2:2f:a7:96:f3:81:6f:ae:e1:
18:78:97:4a:8b:52:ea:bf:c1:53:cb:28:93:5d:ab:
1b:43:84:3b:66:00:d2:44:aa:66:1f:87:1a:80:0f:
1d:c2:69:c9:7f:6b:81:bc:7c:41:80:be:98:db:3d:
b6:4f:9d:71:c5:fe:8e:02:26:a7:ce:36:d6:ac:66:
16:ca:7b:65:bd:22:c5:39:88:16:24:bb:20:5f:86:
49:1b:fd:72:6d:82:ae:9c:a4:9f:6e:11:51:89:b5:
4d:89:5a:88:7c:0e:a3:f2:58:80:19:55:40:54:6d:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8D:E7:19:85:E5:98:9D:4A:79:02:5C:55:35:C1:9F:EC:5B:EF:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27B8F7DE3E2D11F08B0CD79FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
58:64:53:2a:6d:33:89:13:b5:7c:1d:b5:15:04:29:e7:1f:b8:
ed:bd:8d:c4:8e:a5:ac:77:5b:5f:08:6e:84:d7:ba:62:91:8b:
ca:f2:ab:45:e7:93:8b:2e:bf:b3:bf:02:99:a3:c1:99:02:21:
24:81:dc:ca:73:16:04:e3:3f:5a:e0:04:45:b0:0c:3f:68:62:
a6:6f:28:a1:ea:e9:cc:7c:ed:34:93:fd:01:24:1a:ea:ad:7b:
fe:48:65:1c:62:f3:04:94:40:67:82:de:0d:f0:78:7e:45:94:
ef:99:bd:3b:3c:c5:1f:b2:8c:ba:40:14:46:cb:b7:d0:99:17:
fd:f8:d0:4e:57:c4:53:b7:92:3a:71:9d:e5:a6:94:c5:bf:3b:
54:1f:2e:4e:29:80:10:21:44:7d:d5:c4:eb:2e:9b:b1:ee:fe:
52:fb:2f:6f:6a:11:5c:f1:42:21:8e:c5:42:18:fd:aa:0e:ef:
f9:66:16:94:31:e1:8b:61:95:be:e4:30:74:02:1b:85:41:fb:
50:09:0f:6a:78:14:c1:92:10:d2:d3:86:73:da:d2:93:75:00:
a8:a3:30:5b:4d:71:bf:d5:39:65:cd:8d:ec:7c:fa:f9:27:f9:
29:af:18:27:b3:7e:a1:9e:e3:5c:2d:cd:84:2d:00:3d:bc:c6:
c8:fe:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:13:34 2025 by rpki-client