Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B83B46C3EE711F08AC54BDADAE4EC9C.roa
File: 6B83B46C3EE711F08AC54BDADAE4EC9C.roa (raw, json)
Hash identifier: slUVdkjokzre4OMRAQsTV98+++2MTHYUWKENAg2MBWo=
Subject key identifier: 7F:D8:FE:D6:F6:26:9D:77:B5:2F:16:55:67:84:44:40:D1:91:8A:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018445
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B83B46C3EE711F08AC54BDADAE4EC9C.roa
Signing time: Sun 01 Jun 2025 12:53:31 +0000
ROA not before: Sun 01 Jun 2025 12:53:26 +0000
ROA not after: Fri 24 Apr 2026 12:53:26 +0000
asID: 138995
IP address blocks: 154.218.2.0/24 maxlen: 24
154.218.3.0/24 maxlen: 24
154.218.4.0/24 maxlen: 24
154.218.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 14:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99397 (0x18445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 12:53:26 2025 GMT
Not After : Apr 24 12:53:26 2026 GMT
Subject: CN=683c4d4b-4357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:a9:e6:76:eb:7e:ba:56:b4:8f:30:f4:2b:
68:17:ca:8a:f8:77:97:8a:51:26:71:ce:5e:8d:39:
84:19:ff:40:df:4b:62:d3:17:e2:74:7f:3b:54:6a:
5e:5b:b7:4b:2c:be:3f:0e:1e:db:82:d9:f8:46:24:
3d:f8:67:2c:13:b2:d1:16:7f:c1:31:0a:dc:04:08:
4d:2f:af:6e:86:ed:74:c6:6f:c3:f3:6e:ac:4b:f3:
af:4f:43:da:7b:13:15:c8:65:c6:a2:7c:db:c9:80:
c2:dc:9c:5d:a4:ac:b1:3c:6a:bf:78:15:fb:41:b9:
ec:da:6d:75:39:bc:89:32:a5:ba:e6:6c:41:67:d2:
89:2f:9f:fe:d0:a5:fa:74:79:89:80:bc:63:e6:4a:
f0:46:19:66:4d:01:60:37:24:eb:57:10:30:4f:31:
10:12:7f:00:56:74:6e:17:05:34:b0:30:a4:b3:74:
22:25:35:05:4b:69:a2:ef:c7:26:db:1b:ba:19:85:
7c:fd:ec:4c:d3:19:f0:10:7f:ad:f2:ec:32:6f:6d:
0a:8a:77:54:f6:72:d8:32:72:38:85:41:cc:7d:39:
1b:48:07:a7:22:c2:ba:c1:a1:36:5b:bc:68:8a:44:
b2:e2:d5:fa:43:03:d6:db:e9:27:e5:fc:3f:86:b4:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D8:FE:D6:F6:26:9D:77:B5:2F:16:55:67:84:44:40:D1:91:8A:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B83B46C3EE711F08AC54BDADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.2.0-154.218.5.255
Signature Algorithm: sha256WithRSAEncryption
75:e2:1b:1d:0c:4c:1a:0e:b7:34:c7:b6:2f:a2:bf:ef:a8:e4:
8e:73:3f:36:69:35:7e:06:f4:78:59:37:30:53:34:6e:f2:08:
54:91:c8:c9:0e:a4:67:aa:c2:97:1b:16:b1:b5:e4:8c:6e:ca:
7b:ea:cc:e6:a2:d4:54:a9:36:61:aa:79:fc:7e:0f:cf:e3:71:
28:71:ab:d3:a9:aa:d5:b2:ba:f6:70:c4:49:3c:72:78:91:61:
f2:c9:a4:bc:41:7a:c0:b1:65:7d:5d:17:35:e4:c2:17:4b:3a:
4f:af:f0:a8:f5:87:a6:3e:03:ea:d0:0e:7a:48:71:26:f8:81:
79:54:41:96:14:4d:1d:c8:a2:1e:46:6f:7b:54:d2:b5:82:6a:
56:1f:10:f8:a4:8d:d5:ac:ee:7e:69:cb:fe:4d:ed:82:00:47:
5a:60:52:2e:b3:c6:39:cf:a6:19:ef:99:19:f6:e1:8b:a1:80:
22:b4:19:f5:a8:da:ae:cf:45:2b:2b:be:ef:b3:8d:32:3f:e5:
34:4d:4c:93:7e:69:b1:17:11:23:0f:5c:69:03:f1:70:4a:33:
41:f5:36:54:72:ca:23:5a:16:3c:13:56:69:d5:98:22:ff:aa:
51:e9:e8:b4:45:08:07:2c:fd:56:c8:b2:3d:22:f8:5f:f5:82:
01:e8:2d:88
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAYRFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjAxMTI1MzI2WhcNMjYwNDI0MTI1MzI2WjAYMRYw
FAYDVQQDEw02ODNjNGQ0Yi00MzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu8ep5nbrfrpWtI8w9CtoF8qK+HeXilEmcc5ejTmEGf9A30ti0xfidH87
VGpeW7dLLL4/Dh7bgtn4RiQ9+GcsE7LRFn/BMQrcBAhNL69uhu10xm/D826sS/Ov
T0PaexMVyGXGonzbyYDC3JxdpKyxPGq/eBX7Qbns2m11ObyJMqW65mxBZ9KJL5/+
0KX6dHmJgLxj5krwRhlmTQFgNyTrVxAwTzEQEn8AVnRuFwU0sDCks3QiJTUFS2mi
78cm2xu6GYV8/exM0xnwEH+t8uwyb20KindU9nLYMnI4hUHMfTkbSAenIsK6waE2
W7xoikSy4tX6QwPW2+kn5fw/hrQMeQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFH/Y
/tb2Jp13tS8WVWeEREDRkYo8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QjgzQjQ2QzNFRTcxMUYwOEFDNTRCREFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGa2gIDBAGa2gQwDQYJ
KoZIhvcNAQELBQADggEBAHXiGx0MTBoOtzTHti+iv++o5I5zPzZpNX4G9HhZNzBT
NG7yCFSRyMkOpGeqwpcbFrG15IxuynvqzOai1FSpNmGqefx+D8/jcShxq9OpqtWy
uvZwxEk8cniRYfLJpLxBesCxZX1dFzXkwhdLOk+v8Kj1h6Y+A+rQDnpIcSb4gXlU
QZYUTR3Ioh5Gb3tU0rWCalYfEPikjdWs7n5py/5N7YIAR1pgUi6zxjnPphnvmRn2
4YuhgCK0GfWo2q7PRSsrvu+zjTI/5TRNTJN+abEXESMPXGkD8XBKM0H1NlRyyiNa
FjwTVmnVmCL/qlHp6LRFCAcs/VbIsj0i+F/1ggHoLYg=
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:45:58 2025 by rpki-client