Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/401070903EDD11F095123F9BDAE4EC9C.roa
File: 401070903EDD11F095123F9BDAE4EC9C.roa (raw, json)
Hash identifier: ckbUP/9pDeFzSmmqkPmpMvnVJ2tbkeceouEWvGXB38k=
Subject key identifier: C7:A9:D8:A5:B5:34:A8:FD:92:11:88:B6:8B:E1:3A:06:E7:16:F1:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018437
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/401070903EDD11F095123F9BDAE4EC9C.roa
Signing time: Sun 01 Jun 2025 11:40:43 +0000
ROA not before: Sun 01 Jun 2025 11:40:39 +0000
ROA not after: Sat 05 Jul 2025 11:40:39 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99383 (0x18437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 11:40:39 2025 GMT
Not After : Jul 5 11:40:39 2025 GMT
Subject: CN=683c3c3b-9ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:39:f3:8f:c0:d2:9f:40:33:69:bf:ac:3c:2c:
96:65:dc:3c:fb:10:b2:f5:c5:22:df:72:4b:04:fb:
04:49:47:5f:72:b3:60:5b:6b:84:ee:10:cd:ae:f6:
5c:45:c0:08:19:1f:97:5e:70:99:e4:d5:02:85:64:
f0:5d:fd:73:d0:eb:5c:da:0e:55:92:fe:d7:18:3b:
c8:6e:3f:e9:03:ab:a5:b0:b6:7a:c3:64:0f:91:60:
27:25:6a:ca:9c:38:76:35:b5:70:a3:7a:66:c4:a3:
b8:62:82:dc:c0:83:66:8b:f9:8a:12:d9:9d:4f:24:
b3:5d:e0:3f:50:63:0c:f1:22:ad:37:f1:78:54:28:
32:ac:ed:fe:e0:9e:3c:cd:be:dd:c2:23:22:20:a8:
e7:e1:74:cd:fc:57:99:5a:a5:02:a0:f6:79:ec:3c:
0b:f5:30:bf:94:24:3f:37:16:af:45:45:14:81:26:
02:86:2c:9a:5e:54:54:5e:73:2d:52:81:e7:5a:de:
91:4c:bd:75:62:91:1b:8d:80:88:4f:45:f2:35:27:
bc:38:57:62:a5:a6:1c:24:7d:b1:4d:30:9c:a3:90:
d9:ab:5d:17:31:f8:4a:09:b2:a4:e3:64:b8:3c:2c:
13:d9:86:a0:b6:6f:ce:cd:41:f3:12:27:3b:80:18:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A9:D8:A5:B5:34:A8:FD:92:11:88:B6:8B:E1:3A:06:E7:16:F1:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/401070903EDD11F095123F9BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.197.116.0/24
154.197.124.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e6:0d:8d:9b:d9:62:fa:67:81:e3:97:32:d3:16:96:c1:f4:
66:1c:7a:78:16:cd:ac:4a:85:5b:fd:66:c9:e1:78:17:da:b5:
e9:6d:9a:07:31:4d:a3:e8:b0:95:89:0a:6a:fb:08:f6:b2:22:
e8:04:47:52:2f:a9:22:b5:52:80:6f:be:1b:f2:aa:8b:ac:79:
61:4d:54:49:33:0b:bf:70:5e:d0:8a:bf:7a:ed:44:bc:80:a3:
60:13:17:9c:02:5d:03:43:38:52:dd:57:e1:2c:f9:4e:13:bc:
28:7b:bb:5c:d1:72:8c:78:5d:4d:06:8c:01:73:b9:24:c5:3b:
d8:2f:e8:32:6f:86:d6:f3:27:ec:8d:42:e0:f6:61:aa:ca:b5:
19:a4:9b:c2:32:bc:9d:f4:25:ec:00:f5:99:14:34:ab:5f:1d:
6d:2f:be:5b:5b:52:99:ec:3d:49:95:a2:fc:c3:14:e5:93:4a:
4e:83:e4:83:ad:c6:ca:d2:e6:ed:88:8c:71:b4:47:b6:36:28:
e5:5d:15:26:2a:a9:ca:8f:8d:88:6e:76:5c:1b:86:f9:bc:e2:
54:14:48:2a:8c:3f:67:6e:38:95:bb:52:26:21:0d:d2:e1:74:
83:08:83:f4:21:20:47:77:4d:1d:10:59:ce:03:0c:88:18:bd:
1a:89:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:50:40 2025 by rpki-client