Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BCD90B00A2A11F093AB1354762E951A.roa
File: 6BCD90B00A2A11F093AB1354762E951A.roa (raw, json)
Hash identifier: vge3hR4JvdNbC+yux/TlyOHsd4EMlZRYQLDBVcM/cic=
Subject key identifier: D6:1D:1C:4D:25:FC:BF:E8:0B:C8:FE:21:F1:95:B0:FE:64:21:1B:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017671
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BCD90B00A2A11F093AB1354762E951A.roa
Signing time: Wed 26 Mar 2025 10:09:36 +0000
ROA not before: Wed 26 Mar 2025 10:09:32 +0000
ROA not after: Sat 17 May 2025 10:09:32 +0000
asID: 138915
IP address blocks: 154.206.80.0/23 maxlen: 24
154.206.82.0/23 maxlen: 24
154.206.84.0/23 maxlen: 24
154.206.86.0/23 maxlen: 24
154.206.88.0/23 maxlen: 24
154.206.90.0/23 maxlen: 24
154.206.112.0/23 maxlen: 24
154.206.114.0/23 maxlen: 24
154.206.116.0/23 maxlen: 24
154.206.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95857 (0x17671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 10:09:32 2025 GMT
Not After : May 17 10:09:32 2025 GMT
Subject: CN=67e3d260-2c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:0e:0a:32:0c:c1:c2:ea:7c:bf:64:6f:36:
73:bf:06:60:6f:b3:e8:b4:d1:16:1e:40:03:a4:10:
46:3c:a0:b5:b9:26:a5:15:b0:18:c2:44:b2:19:1b:
5a:72:b2:12:23:dc:a9:67:ba:e5:12:33:28:ed:22:
74:d6:ff:06:35:1a:66:55:7a:0c:7b:1d:eb:62:dd:
33:4c:97:9c:3d:65:e6:34:fd:55:6c:05:bf:c7:be:
b2:00:2e:91:59:16:97:e5:3a:7a:2c:27:8b:14:ec:
6b:5a:3b:5b:e9:21:a1:4c:bf:b7:8f:c7:9e:ae:37:
78:c4:06:00:c9:f1:9b:81:5b:ee:0e:48:e2:f6:ba:
c4:98:02:42:ab:b8:2f:db:bb:26:87:c2:52:ea:36:
27:27:75:92:95:40:92:44:fb:29:c7:7c:ca:c9:60:
c3:3a:ff:10:47:91:cd:ac:00:5c:ec:6c:41:4a:29:
a8:e8:b9:78:a6:e4:47:d0:a2:05:01:da:b5:57:26:
9b:60:76:52:13:cd:9e:da:48:a6:6f:ce:e6:ca:57:
0a:a0:54:6a:2f:1f:97:b9:f9:ef:c8:e8:1d:f2:db:
fa:9a:91:7b:25:9c:b8:7f:82:fa:38:c8:ea:6f:06:
8a:77:e0:1c:74:f2:e2:b5:ca:f9:1d:52:35:de:49:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:1C:4D:25:FC:BF:E8:0B:C8:FE:21:F1:95:B0:FE:64:21:1B:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BCD90B00A2A11F093AB1354762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.80.0-154.206.91.255
154.206.112.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:e6:05:23:c3:16:e8:c0:2a:f7:65:d9:57:9e:cc:b0:24:10:
09:ec:b0:4c:90:5a:68:d8:9e:45:04:76:7b:c3:b4:45:55:7b:
90:e1:54:8a:04:71:25:fa:90:6a:15:11:7e:ac:05:e6:8a:ce:
4d:29:c0:e4:50:40:7a:5d:77:22:f5:d5:cd:57:9c:59:9d:72:
0b:e7:4e:cd:24:27:f9:f0:19:d1:b0:68:23:82:40:70:13:58:
1e:16:e2:9a:2b:8d:34:4c:8d:27:37:75:25:d5:f9:e4:35:3b:
b9:b3:95:7e:56:33:6d:bd:7d:25:8c:6d:52:30:6a:75:dc:1c:
87:74:09:e6:2c:9a:8d:93:26:91:00:63:6e:7c:2a:45:24:32:
e0:1d:26:db:03:9b:83:6a:8d:14:09:b7:d9:a7:98:ba:73:4b:
8c:9f:49:f1:0a:c5:20:5e:30:32:54:70:25:e6:1a:8c:f6:3b:
a3:51:89:55:ef:f8:e2:57:72:48:eb:1e:48:85:11:8e:33:5d:
ce:2c:8f:36:97:9c:d8:17:0d:6c:d5:9a:89:3c:aa:5d:8a:9f:
94:51:bc:0e:8e:ca:8c:52:49:0e:dc:11:56:ec:9b:ef:d2:ce:
12:01:78:df:5c:d4:00:27:f3:e9:4c:86:6c:76:85:02:8a:f6:
ff:a2:82:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:54 2025 by rpki-client