Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2809A13E3BC611F0B2511C83DAE4EC9C.roa
File: 2809A13E3BC611F0B2511C83DAE4EC9C.roa (raw, json)
Hash identifier: 7uXmUXgaoK95HvIhHmS1NwmRbzgO1RcHdDTsU3p2/j8=
Subject key identifier: 63:BF:22:FC:D4:80:45:47:A7:29:B2:6A:E4:7E:42:E7:82:4E:B2:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01837A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2809A13E3BC611F0B2511C83DAE4EC9C.roa
Signing time: Wed 28 May 2025 13:17:51 +0000
ROA not before: Wed 28 May 2025 13:17:46 +0000
ROA not after: Sun 06 Jul 2025 13:17:46 +0000
asID: 48031
IP address blocks: 154.213.6.0/24 maxlen: 24
154.213.7.0/24 maxlen: 24
154.222.248.0/24 maxlen: 24
154.222.249.0/24 maxlen: 24
154.222.250.0/24 maxlen: 24
154.222.251.0/24 maxlen: 24
154.222.253.0/24 maxlen: 24
154.222.254.0/24 maxlen: 24
154.222.255.0/24 maxlen: 24
154.223.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99194 (0x1837a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 13:17:46 2025 GMT
Not After : Jul 6 13:17:46 2025 GMT
Subject: CN=68370cff-3de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:d5:ac:ff:51:69:b5:27:e4:6c:7e:97:17:
33:50:e4:36:90:fb:16:76:87:76:a9:84:58:84:c9:
cf:c8:6a:d5:82:65:4a:eb:16:f2:a5:1f:9e:b9:b2:
64:f0:9d:90:a6:0d:1b:c5:83:07:e8:7e:1e:f4:a8:
6b:c1:0d:fb:fa:36:50:2b:93:68:2d:f2:0c:c8:97:
99:c7:14:2a:07:3f:77:e6:c7:5d:52:b7:7c:42:0d:
4a:15:a3:31:2e:b1:ae:25:f0:46:97:54:e5:07:65:
71:67:c9:40:a0:cf:8b:86:b5:14:7c:56:c5:20:2e:
7b:bf:d9:58:33:67:b4:d8:fa:67:44:cf:ad:21:8e:
22:37:ef:e9:46:1b:82:aa:a5:a8:63:fc:5f:06:cf:
74:b6:7f:bb:5b:d8:2a:3b:79:55:7c:e9:3b:0f:5d:
34:7b:cc:c0:09:87:4d:bc:09:95:92:8a:12:b5:02:
89:e6:f7:d0:a2:04:60:92:e4:88:0e:67:62:a0:82:
40:56:f9:6a:4e:f4:d5:20:4d:b8:d5:fa:bd:4d:70:
c2:f7:98:8e:c3:13:77:80:f9:24:6c:1b:18:c1:cb:
25:bb:b6:c0:cc:8c:af:bf:ad:29:5c:9c:03:a0:6f:
05:72:ca:89:c0:2a:a3:f5:70:1a:c7:02:4c:4d:31:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BF:22:FC:D4:80:45:47:A7:29:B2:6A:E4:7E:42:E7:82:4E:B2:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2809A13E3BC611F0B2511C83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.6.0/23
154.222.248.0/22
154.222.253.0-154.222.255.255
154.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
05:21:9d:8f:2b:6d:9e:16:17:ad:16:35:44:4e:fa:13:e8:91:
7b:97:e6:a0:58:99:54:6d:ea:c2:31:f0:51:14:d9:26:57:ae:
95:25:dc:6f:03:a3:d6:f9:7b:e7:b6:6e:d8:ba:ef:6f:b9:75:
c7:74:8b:85:74:c7:9f:4a:67:c6:a6:7c:3f:d5:e7:90:1f:a3:
c0:fb:28:06:b0:af:89:35:89:08:d2:58:68:4b:e0:6f:a6:aa:
c7:d3:a5:87:51:a7:12:2b:13:6c:4d:8e:71:48:98:34:ca:fc:
20:2e:47:bf:31:d3:32:96:08:22:e5:b4:43:f0:7a:a7:67:e3:
a7:de:81:74:c0:4f:7b:93:08:75:38:44:08:4d:7b:81:54:7d:
6f:95:47:0c:f2:19:c8:6a:ad:23:07:41:a6:b0:85:23:07:28:
07:4c:4c:05:f3:36:3a:88:99:8b:a7:2d:fa:d5:54:3d:62:0d:
af:1b:de:a6:ed:68:b0:e5:75:7f:0c:35:7f:85:60:5d:57:02:
ee:10:79:9e:19:0f:07:1f:34:27:ef:03:ea:7c:e9:31:fe:fa:
81:65:b7:82:6b:25:18:82:c8:27:52:35:6a:9b:77:30:2c:1a:
f0:37:ac:b3:70:d9:95:68:ec:53:aa:18:e3:40:01:e9:e7:70:
99:89:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:04:19 2025 by rpki-client