Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ECDDA9E327E11F08C5250C4DAE4EC9C.roa
File: 8ECDDA9E327E11F08C5250C4DAE4EC9C.roa (raw, json)
Hash identifier: rI2rNmXFEEIdjURcO3S5Gfai9aUl9dsvlNYPVgYzRO0=
Subject key identifier: D0:BA:DF:FC:38:BC:FD:CE:A4:0E:0B:EC:DB:68:35:69:CA:DF:7C:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ECDDA9E327E11F08C5250C4DAE4EC9C.roa
Signing time: Fri 16 May 2025 17:52:39 +0000
ROA not before: Fri 16 May 2025 17:52:35 +0000
ROA not after: Thu 19 Jun 2025 17:52:35 +0000
asID: 202736
IP address blocks: 154.88.53.0/24 maxlen: 24
154.88.54.0/24 maxlen: 24
154.88.56.0/24 maxlen: 24
154.88.57.0/24 maxlen: 24
154.88.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98551 (0x180f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 16 17:52:35 2025 GMT
Not After : Jun 19 17:52:35 2025 GMT
Subject: CN=68277b67-e305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:8b:c1:0d:f5:d7:d6:f7:f4:2a:19:e7:c4:
5c:0c:b6:fd:d5:6c:52:75:b8:d0:2e:2a:3f:df:8e:
e1:b6:87:47:67:f6:67:34:de:b6:18:29:d9:91:ab:
ae:52:04:2b:b1:07:6e:dc:dc:d9:5b:cb:7f:28:0f:
71:42:c2:c4:04:61:6f:bd:c5:07:46:0f:22:fe:d9:
ba:17:de:20:72:ec:ed:75:c5:74:f8:ac:a3:b8:5f:
3a:f8:d9:98:70:51:5f:8a:47:d6:fd:76:26:f3:06:
bf:bc:96:af:e0:0a:10:50:48:69:81:f1:f5:0a:71:
2d:2a:d8:4a:21:27:5a:08:8c:20:3a:7f:42:f8:d5:
96:88:6e:24:b9:be:bb:90:2e:1c:f4:f3:c7:c9:b0:
8c:9b:f1:39:bf:db:9a:16:59:26:b5:45:47:61:aa:
7d:5f:44:eb:b4:e4:09:0d:5d:de:d9:81:2a:e1:e1:
54:3a:d8:79:5b:37:81:5c:19:38:2f:39:7a:19:b4:
1e:99:af:fc:02:e8:f2:43:a1:06:b4:de:4b:55:04:
1a:c3:2e:50:33:aa:48:b5:d9:64:ae:f2:b5:63:2d:
54:2e:16:1c:4b:99:fc:53:b1:c7:fb:b4:90:d1:dc:
70:2e:59:ce:fd:ab:ee:34:c5:a3:3a:47:cb:3c:61:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BA:DF:FC:38:BC:FD:CE:A4:0E:0B:EC:DB:68:35:69:CA:DF:7C:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ECDDA9E327E11F08C5250C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.53.0-154.88.54.255
154.88.56.0-154.88.58.255
Signature Algorithm: sha256WithRSAEncryption
96:3c:d3:51:7e:a8:46:33:23:d9:c5:3a:e0:89:79:ce:51:1c:
71:22:8d:c2:d1:bc:86:70:4e:18:ff:c8:ae:57:22:72:50:d3:
77:e8:a9:aa:1e:b1:97:6d:3b:a3:b4:b0:63:6c:de:9c:19:b7:
1a:07:6f:ea:55:32:33:d3:9f:f9:f5:4e:a2:70:95:be:37:f0:
68:45:bb:9a:b5:fd:6e:2f:53:29:e7:84:8d:17:16:71:7c:cb:
1c:16:d2:94:c6:f4:38:65:85:03:ad:bd:78:d9:a2:9c:fd:6d:
e9:4e:6f:12:13:32:7d:7d:a3:fa:ec:92:7e:f4:b0:0e:94:7b:
4f:21:e5:55:d9:11:d0:19:3b:9a:ad:f3:52:ec:c4:df:da:0f:
a5:76:b2:d6:85:6d:c9:2d:55:0f:ff:a1:1b:3d:2c:dc:fc:34:
5f:46:a5:29:7b:4b:d2:5b:bd:b2:18:00:af:f4:50:01:8d:d5:
65:e4:06:a7:c5:9c:03:26:e5:ed:ca:47:9a:06:91:ef:21:5e:
46:aa:27:06:75:28:0d:a1:9c:aa:73:9b:ae:06:cf:9e:c1:f1:
49:49:fb:0c:12:cc:f9:43:49:66:3a:04:83:57:66:6a:74:c1:
4e:12:be:99:73:d3:22:c1:46:0f:f2:95:b5:f7:a6:9f:fa:05:
f5:2c:33:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 6 13:52:37 2025 by rpki-client