Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78B7F24C409011F08E2351A3DAE4EC9C.roa
File: 78B7F24C409011F08E2351A3DAE4EC9C.roa (raw, json)
Hash identifier: nGFYsQne3A8TcEm+OxdD3INyipC3gP2Zt+bG1jpwBmQ=
Subject key identifier: DD:40:C3:AA:84:31:88:2C:74:D0:5F:1E:41:E9:41:4B:18:43:ED:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78B7F24C409011F08E2351A3DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 15:36:10 +0000
ROA not before: Tue 03 Jun 2025 15:36:05 +0000
ROA not after: Fri 08 Aug 2025 15:36:05 +0000
asID: 214808
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99501 (0x184ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 15:36:05 2025 GMT
Not After : Aug 8 15:36:05 2025 GMT
Subject: CN=683f166a-0f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:b5:70:aa:3f:02:ff:b3:d5:a0:7e:12:27:
46:c2:d9:9d:95:16:7c:39:bf:9a:6d:17:a6:af:b1:
76:9e:0c:8d:14:fd:f6:e9:81:b3:59:aa:fa:92:b3:
b1:86:73:de:70:74:56:66:89:b8:69:85:00:32:93:
07:c7:8f:c4:8c:b8:e2:3d:ac:09:dd:13:64:2e:d2:
2f:2f:34:dd:7e:49:ac:8a:6a:8e:b3:70:05:d2:fe:
d7:91:ab:d6:16:d6:bd:e5:83:3d:e5:41:c6:06:c6:
39:92:38:7f:09:6d:a3:78:9e:dc:6e:3d:05:a1:aa:
36:ca:13:31:4c:a1:63:c0:8b:43:cc:64:b9:08:33:
f7:20:c4:66:61:f5:00:19:72:79:25:0d:c3:ea:07:
47:05:e2:c4:3f:66:4a:b7:52:48:38:92:21:b1:b6:
fe:cc:27:57:64:78:6e:16:18:c9:c5:a4:e0:77:9b:
7d:38:8f:90:00:77:79:36:fd:72:7a:c0:72:b6:d2:
21:0b:d8:dc:ee:d9:08:13:c2:c9:26:b7:cb:4b:06:
9d:b4:aa:bf:8c:63:bf:2c:a1:74:0a:2e:56:f9:f8:
f0:5a:f2:bc:b9:a6:22:fb:a6:78:a5:3e:6b:91:c0:
00:61:62:23:60:df:1b:9b:08:36:bc:8e:63:5a:e0:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:40:C3:AA:84:31:88:2C:74:D0:5F:1E:41:E9:41:4B:18:43:ED:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78B7F24C409011F08E2351A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
33:a5:8c:65:31:7b:4a:ac:2c:f4:07:2d:a6:9d:08:ad:fc:5c:
f7:3e:47:21:48:d8:fd:1c:cb:7b:7e:97:b3:ff:ae:0c:76:46:
e2:76:e2:95:d1:eb:bb:cd:88:77:52:b3:fe:1b:bd:a1:62:63:
73:b3:4a:7a:6b:d1:d4:90:61:f6:19:bd:6d:8c:74:31:7a:ea:
a4:93:a2:df:cb:cc:91:fb:b9:84:1b:ca:9b:c6:57:c3:4d:19:
97:89:64:9f:cf:1d:93:bf:1f:a0:4f:e9:98:07:c7:ab:c9:37:
d4:bd:5b:94:7a:45:0a:4b:cb:a8:d3:77:6f:25:89:ff:36:f7:
4d:2e:78:75:8f:e1:df:e7:54:b1:8a:df:30:ee:73:40:52:b4:
3d:38:cd:5e:7f:7d:0d:37:e7:9e:d7:af:a0:27:d0:cb:d5:26:
4b:58:94:bd:ed:76:36:e7:4f:09:d9:e2:a6:55:31:77:f8:d8:
0c:88:32:b8:5a:f2:3e:22:c4:d2:65:63:9e:ed:b3:99:58:51:
67:85:a3:fa:b5:01:20:db:6b:ec:62:93:63:8f:11:b3:3e:85:
21:4c:4f:88:6d:44:69:f2:bc:5e:0c:b2:57:fc:c9:e2:59:69:
48:76:a2:50:77:10:5a:00:6a:08:b8:95:bb:6f:08:15:2e:49:
93:69:86:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYStMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjAzMTUzNjA1WhcNMjUwODA4MTUzNjA1WjAYMRYw
FAYDVQQDEw02ODNmMTY2YS0wZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApmm1cKo/Av+z1aB+EidGwtmdlRZ8Ob+abRemr7F2ngyNFP326YGzWar6
krOxhnPecHRWZom4aYUAMpMHx4/EjLjiPawJ3RNkLtIvLzTdfkmsimqOs3AF0v7X
kavWFta95YM95UHGBsY5kjh/CW2jeJ7cbj0Foao2yhMxTKFjwItDzGS5CDP3IMRm
YfUAGXJ5JQ3D6gdHBeLEP2ZKt1JIOJIhsbb+zCdXZHhuFhjJxaTgd5t9OI+QAHd5
Nv1yesByttIhC9jc7tkIE8LJJrfLSwadtKq/jGO/LKF0Ci5W+fjwWvK8uaYi+6Z4
pT5rkcAAYWIjYN8bmwg2vI5jWuCb9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN1A
w6qEMYgsdNBfHkHpQUsYQ+1FMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OEI3RjI0QzQwOTAxMUYwOEUyMzUxQTNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlNYMA0GCSqGSIb3DQEB
CwUAA4IBAQAzpYxlMXtKrCz0By2mnQit/Fz3PkchSNj9HMt7fpez/64MdkbiduKV
0eu7zYh3UrP+G72hYmNzs0p6a9HUkGH2Gb1tjHQxeuqkk6Lfy8yR+7mEG8qbxlfD
TRmXiWSfzx2Tvx+gT+mYB8eryTfUvVuUekUKS8uo03dvJYn/NvdNLnh1j+Hf51Sx
it8w7nNAUrQ9OM1ef30NN+ee16+gJ9DL1SZLWJS97XY2508J2eKmVTF3+NgMiDK4
WvI+IsTSZWOe7bOZWFFnhaP6tQEg22vsYpNjjxGzPoUhTE+IbURp8rxeDLJX/Mni
WWlIdqJQdxBaAGoIuJW7bwgVLkmTaYZT
-----END CERTIFICATE-----
Generated at Fri Jun 6 14:10:47 2025 by rpki-client