Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/448B700C355A11F0936C3EEEDAE4EC9C.roa
File: 448B700C355A11F0936C3EEEDAE4EC9C.roa (raw, json)
Hash identifier: EMwjRpCXnmgmiZVKswn2tYtVAp6AZlzxCK9PxkSkAiA=
Subject key identifier: DB:D5:A6:7B:1F:9A:50:E1:F4:B8:87:EE:67:15:B3:3A:E0:B5:36:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018195
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/448B700C355A11F0936C3EEEDAE4EC9C.roa
Signing time: Tue 20 May 2025 09:10:26 +0000
ROA not before: Tue 20 May 2025 09:10:21 +0000
ROA not after: Fri 27 Jun 2025 09:10:21 +0000
asID: 6079
IP address blocks: 154.202.138.0/23 maxlen: 24
154.202.140.0/22 maxlen: 24
154.207.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98709 (0x18195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 09:10:21 2025 GMT
Not After : Jun 27 09:10:21 2025 GMT
Subject: CN=682c4702-a3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:1d:c5:03:69:36:aa:ee:c6:16:9a:a4:b9:
d0:d7:cf:9a:22:6c:3b:44:49:66:c5:c0:31:c8:d8:
56:3e:8c:59:81:d0:c9:3c:52:70:bc:42:1f:37:6d:
b6:8f:0d:80:95:12:dc:68:e9:89:ce:c5:af:d4:fa:
0d:af:c4:c6:d3:43:e9:7c:76:87:2e:60:d0:44:bd:
55:fd:ec:23:5d:2f:7b:90:1c:27:58:1a:a7:cf:60:
a5:18:da:e1:68:08:3a:30:96:92:35:d1:57:82:c7:
47:4d:f0:b1:cd:d1:e7:b9:d7:e8:d5:3d:c7:89:dd:
96:ad:06:d5:2a:b1:c1:bc:d9:0c:9f:09:1b:be:1c:
16:92:c7:5c:56:90:5c:3d:2f:4e:0e:3e:11:ab:24:
ef:76:bf:bd:92:ce:ea:df:80:07:3d:4d:9e:f8:be:
be:01:1a:d5:8e:cf:d6:90:8e:c7:c3:80:e5:fb:f5:
92:7a:2b:43:13:bd:2d:ed:c0:46:43:1b:f4:6b:d8:
43:f6:6a:be:0e:80:72:ce:9c:c3:40:e7:56:48:fa:
da:f7:da:cd:da:ce:19:4d:1e:dc:16:ad:3a:c5:ca:
64:8d:f6:d0:83:f2:e9:86:7d:7f:51:82:0d:85:8b:
3b:4c:c4:97:03:ac:d3:f1:b6:ca:c8:0d:2f:35:ca:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:A6:7B:1F:9A:50:E1:F4:B8:87:EE:67:15:B3:3A:E0:B5:36:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/448B700C355A11F0936C3EEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.138.0-154.202.143.255
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
17:bd:9b:13:e3:2d:8a:3e:65:2c:71:55:db:72:69:42:6f:88:
3c:74:b4:d2:62:e4:a8:07:6c:84:12:14:f2:ac:31:1c:65:73:
53:61:56:dc:01:c2:f0:06:44:87:87:80:26:ee:78:0f:f4:10:
09:28:03:b7:23:b0:83:1c:19:20:4b:79:3b:78:95:86:79:e5:
4a:7a:bd:62:f0:e0:5c:63:9f:f0:65:ab:73:3e:5a:b6:68:a3:
12:a5:93:47:9a:97:f4:6c:0d:72:1d:1f:e2:b1:78:ef:38:25:
3f:87:82:a5:88:2b:e3:59:58:f6:d4:8e:8d:cf:37:7c:d2:9b:
ab:9e:bc:fe:84:86:28:4f:36:f7:ed:1c:fa:3b:77:90:12:b5:
a7:c5:05:ba:2b:60:9c:32:77:16:84:63:af:53:a3:43:c0:5a:
b8:32:df:4b:eb:d4:76:39:40:e4:c1:d6:5c:f9:40:59:75:9f:
b3:9e:1b:a5:1d:ba:c5:57:29:2c:1e:e7:14:eb:9f:bf:0e:06:
c9:20:8c:38:4b:f3:df:03:e6:ea:b4:65:48:7a:94:eb:7b:df:
c1:46:d8:43:d0:f2:45:66:97:a5:b8:69:55:43:c2:29:df:33:
1a:37:d2:9e:d7:40:4c:a0:25:ef:18:43:8f:d1:21:fd:4e:d5:
3a:e1:6d:fd
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAYGVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIwMDkxMDIxWhcNMjUwNjI3MDkxMDIxWjAYMRYw
FAYDVQQDEw02ODJjNDcwMi1hM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm5gdxQNpNqruxhaapLnQ18+aImw7RElmxcAxyNhWPoxZgdDJPFJwvEIf
N222jw2AlRLcaOmJzsWv1PoNr8TG00PpfHaHLmDQRL1V/ewjXS97kBwnWBqnz2Cl
GNrhaAg6MJaSNdFXgsdHTfCxzdHnudfo1T3Hid2WrQbVKrHBvNkMnwkbvhwWksdc
VpBcPS9ODj4RqyTvdr+9ks7q34AHPU2e+L6+ARrVjs/WkI7Hw4Dl+/WSeitDE70t
7cBGQxv0a9hD9mq+DoByzpzDQOdWSPra99rN2s4ZTR7cFq06xcpkjfbQg/Lphn1/
UYINhYs7TMSXA6zT8bbKyA0vNcobMwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFNvV
pnsfmlDh9LiH7mcVszrgtTYyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NDhCNzAwQzM1NUExMUYwOTM2QzNFRUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAGayooDBASayoADBAWa
zwAwDQYJKoZIhvcNAQELBQADggEBABe9mxPjLYo+ZSxxVdtyaUJviDx0tNJi5KgH
bIQSFPKsMRxlc1NhVtwBwvAGRIeHgCbueA/0EAkoA7cjsIMcGSBLeTt4lYZ55Up6
vWLw4Fxjn/Blq3M+WrZooxKlk0eal/RsDXIdH+KxeO84JT+HgqWIK+NZWPbUjo3P
N3zSm6uevP6EhihPNvftHPo7d5AStafFBborYJwydxaEY69To0PAWrgy30vr1HY5
QOTB1lz5QFl1n7OeG6UdusVXKSwe5xTrn78OBskgjDhL898D5uq0ZUh6lOt738FG
2EPQ8kVml6W4aVVDwinfMxo30p7XQEygJe8YQ4/RIf1O1Trhbf0=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:49:17 2025 by rpki-client