Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643675940A1E11F085A2808B762E951A.roa
File: 643675940A1E11F085A2808B762E951A.roa (raw, json)
Hash identifier: lCxMoqeTcnUBoP4pOqYNS0QVrMNjYmBNiHygcXqHT7g=
Subject key identifier: A5:6E:88:F3:C7:D5:CD:F5:2A:53:C7:1B:CE:13:1A:CD:04:C2:78:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017665
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643675940A1E11F085A2808B762E951A.roa
Signing time: Wed 26 Mar 2025 08:43:29 +0000
ROA not before: Wed 26 Mar 2025 08:43:25 +0000
ROA not after: Sun 19 Apr 2026 08:43:25 +0000
asID: 984
IP address blocks: 154.82.192.0/24 maxlen: 24
154.83.131.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.89.133.0/24 maxlen: 24
154.89.134.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.92.153.0/24 maxlen: 24
154.92.154.0/24 maxlen: 24
154.92.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95845 (0x17665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 08:43:25 2025 GMT
Not After : Apr 19 08:43:25 2026 GMT
Subject: CN=67e3be31-1271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:4e:0e:07:8c:8a:fc:cb:16:18:31:30:29:
5d:cc:73:69:6c:4a:c0:c9:cd:b3:44:e5:91:eb:88:
05:25:91:2d:1e:01:1b:95:c3:b0:36:c1:94:8a:7c:
29:db:e3:1f:05:d9:4b:4a:96:ca:38:0d:14:15:28:
4e:3a:95:57:83:16:d4:4c:48:23:ac:8c:a9:bf:e2:
1f:f5:d8:f5:60:a8:c4:a4:d8:40:3f:f9:18:c4:fb:
cd:dd:69:2f:1a:c7:1d:0e:ea:50:74:1a:b4:3b:e9:
9c:27:32:28:01:f5:1a:f7:6e:d3:52:00:44:af:d5:
de:a6:23:75:71:1d:bf:5f:f0:b9:d7:ca:84:e7:07:
7b:4b:ef:3c:c7:1c:89:41:1e:ca:b4:d1:8a:ba:10:
c4:3b:33:54:ec:cc:60:7c:a9:49:54:7f:09:85:96:
68:79:93:90:68:80:48:d2:cc:06:b2:8d:94:5d:a8:
70:82:db:a1:88:14:22:69:08:6f:f9:32:f0:36:a5:
9d:68:d1:76:c0:cc:c5:aa:49:63:12:60:84:f5:29:
28:95:31:c5:c3:c1:8d:c5:60:0a:29:d2:06:44:ac:
74:8a:3f:b5:9a:b1:ce:ab:78:9f:12:b3:aa:22:5b:
d8:69:06:b7:3f:8d:52:f6:9c:7d:7c:dc:01:6d:fa:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6E:88:F3:C7:D5:CD:F5:2A:53:C7:1B:CE:13:1A:CD:04:C2:78:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643675940A1E11F085A2808B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.192.0/24
154.83.131.0/24
154.89.132.0-154.89.134.255
154.90.128.0/24
154.92.153.0-154.92.155.255
Signature Algorithm: sha256WithRSAEncryption
60:61:e2:04:9a:a0:19:08:a4:c9:96:a9:9d:b6:76:0e:e1:76:
d5:5b:0f:c0:93:6a:a7:96:c5:56:4a:dc:c2:d2:af:a5:a7:06:
d5:b3:cf:78:59:68:e0:80:c0:74:a1:fc:f2:fa:74:ab:7d:a5:
a8:17:9b:45:b1:68:10:8e:7f:73:77:01:3a:c9:b0:b4:10:1c:
7c:4d:d0:f4:ca:11:2c:e1:6a:9c:4c:8a:0a:d5:82:a0:00:14:
91:06:0a:63:39:dc:36:5d:95:66:9c:05:64:ac:34:89:92:08:
af:fb:5c:f0:e1:ec:00:c4:87:e2:49:05:4f:00:28:8f:6a:d7:
94:c2:ea:28:b2:c6:e1:9e:81:a6:36:54:ce:af:1d:90:19:87:
7a:6c:a6:9a:0f:e0:ee:1b:f5:5b:8e:b2:40:95:7a:68:c5:25:
06:c6:c4:a9:32:02:1a:59:b3:60:90:c8:34:6c:65:2b:9c:b2:
14:60:98:25:4d:8c:ca:08:d9:ed:5b:5d:de:34:47:2b:36:f8:
c1:92:e6:ea:4c:1b:31:d3:b4:66:1a:86:cd:1d:5e:26:53:84:
30:91:67:10:d0:42:0f:fd:bc:14:0e:16:1c:cf:86:10:35:91:
f8:e7:55:43:c7:05:59:eb:47:ef:47:9b:79:ac:ea:20:b6:74:
71:9f:e0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:33 2025 by rpki-client