Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FA507D83BDA11F0A7E6C584DAE4EC9C.roa
File: 4FA507D83BDA11F0A7E6C584DAE4EC9C.roa (raw, json)
Hash identifier: ONNK4+4ve6S2ajTGaxNDYoaNJugVJMY5Dhdxg5a7+CY=
Subject key identifier: 43:05:15:06:17:AA:61:98:EE:F0:D0:FC:8B:AB:00:5D:EA:CD:34:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018390
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FA507D83BDA11F0A7E6C584DAE4EC9C.roa
Signing time: Wed 28 May 2025 15:42:08 +0000
ROA not before: Wed 28 May 2025 15:42:02 +0000
ROA not after: Sun 08 Jun 2025 15:42:02 +0000
asID: 399077
IP address blocks: 154.91.107.0/24 maxlen: 24
154.91.108.0/24 maxlen: 24
154.91.109.0/24 maxlen: 24
154.91.110.0/24 maxlen: 24
154.91.111.0/24 maxlen: 24
154.91.112.0/24 maxlen: 24
154.91.113.0/24 maxlen: 24
154.91.114.0/24 maxlen: 24
154.91.115.0/24 maxlen: 24
154.91.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 15:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99216 (0x18390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 15:42:02 2025 GMT
Not After : Jun 8 15:42:02 2025 GMT
Subject: CN=68372ed0-b38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:d1:0a:8b:f4:28:fe:98:3f:2d:3e:49:92:
a0:1a:23:40:f4:c1:f9:31:b8:e2:f6:97:97:e9:5f:
4d:c4:50:31:9d:c4:52:cd:8e:bb:89:4a:ce:5e:a0:
05:4f:f4:91:26:b4:b1:7f:e0:13:0a:0e:5a:f5:27:
0c:d0:47:15:11:9c:9d:e4:1b:63:e4:3e:81:64:60:
bc:a9:09:5e:0f:48:47:e8:60:01:2f:46:7c:c9:17:
08:89:4a:93:e8:1c:0e:75:2e:3f:2b:d8:a2:97:f4:
09:58:7f:09:57:fa:d4:f8:d9:ca:24:25:67:00:60:
3f:b7:07:90:e8:d6:e8:3b:d0:20:fa:fb:9d:84:24:
09:34:34:01:b7:5f:51:ea:23:e6:49:52:74:19:66:
d9:b3:6d:74:7b:74:70:a1:32:bf:a8:5e:c2:6c:8a:
11:9c:ab:0e:0b:61:51:d5:7f:e9:b4:2f:04:22:53:
50:27:9d:c1:7f:bb:90:84:c0:2d:5c:c4:31:65:44:
a1:5d:b8:25:2e:91:9f:39:42:db:c7:9f:8d:5c:33:
50:61:a3:fa:6b:6f:62:57:32:e7:be:2e:e1:f6:2b:
65:76:64:ff:3b:3c:a7:45:dc:d6:ab:95:91:cd:79:
b2:95:72:08:8b:a8:be:0d:ab:59:07:ea:f3:41:08:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:05:15:06:17:AA:61:98:EE:F0:D0:FC:8B:AB:00:5D:EA:CD:34:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FA507D83BDA11F0A7E6C584DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.107.0-154.91.116.255
Signature Algorithm: sha256WithRSAEncryption
1d:db:82:8f:fd:6d:a8:44:03:bc:43:02:6d:9b:0d:b9:c9:bc:
f3:80:fc:44:57:9e:49:11:91:0b:a9:6f:02:f0:53:b0:79:23:
1d:e4:76:f2:4a:d7:90:60:d8:10:9f:21:a1:19:17:64:2a:39:
ca:0d:aa:93:b8:9b:c9:e7:1a:fa:70:dd:20:c9:d3:cd:cf:c8:
76:7a:4b:aa:44:f6:93:16:06:ee:5c:dc:d0:db:f4:13:f0:bd:
13:70:36:f9:a6:be:88:3e:0b:c7:1b:98:3b:9e:ad:d0:a2:5d:
4c:b5:69:35:c5:49:f8:47:4d:5e:3f:0a:90:10:ce:b5:26:27:
0a:d8:f1:29:cd:7f:77:2b:7e:55:f3:87:80:65:56:e2:a1:bf:
0b:f9:d1:17:80:30:f3:b3:67:c8:fb:fe:f5:4b:d4:93:fa:27:
77:a0:dd:cf:94:4a:e3:d8:9e:d4:6a:f2:0a:18:48:31:66:83:
ea:d5:5f:92:f6:39:27:6b:f1:cd:b4:2f:74:32:56:12:63:d9:
94:42:6e:a2:c3:20:e3:77:04:e2:5b:b6:ba:06:7e:03:1a:df:
0b:82:c5:e6:3c:19:79:97:d8:4e:ca:f4:c7:98:83:f6:df:79:
a7:95:3b:19:51:fa:22:d7:48:93:f1:42:99:87:90:73:67:7d:
07:08:9e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:29:46 2025 by rpki-client