Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A1296CA3BAB11F098DF14D7DAE4EC9C.roa
File: 9A1296CA3BAB11F098DF14D7DAE4EC9C.roa (raw, json)
Hash identifier: GLCu9/lXz3IY6b9svAeNtS1WzGRYjOMZsO48g4RLBHQ=
Subject key identifier: 8E:3F:81:20:1F:32:0D:FC:7E:80:D3:89:3D:2B:BA:2D:D2:E0:0F:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018340
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A1296CA3BAB11F098DF14D7DAE4EC9C.roa
Signing time: Wed 28 May 2025 10:07:46 +0000
ROA not before: Wed 28 May 2025 10:07:41 +0000
ROA not after: Sat 07 Jun 2025 10:07:41 +0000
asID: 9009
IP address blocks: 154.218.198.0/24 maxlen: 24
154.218.199.0/24 maxlen: 24
154.218.207.0/24 maxlen: 24
154.218.211.0/24 maxlen: 24
154.218.213.0/24 maxlen: 24
154.218.226.0/24 maxlen: 24
154.218.233.0/24 maxlen: 24
154.218.238.0/24 maxlen: 24
154.218.247.0/24 maxlen: 24
154.218.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99136 (0x18340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 10:07:41 2025 GMT
Not After : Jun 7 10:07:41 2025 GMT
Subject: CN=6836e072-8a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:73:4e:35:83:6a:de:d6:26:b2:09:99:b2:
d2:52:e6:1c:d5:a1:7a:50:cc:22:aa:07:38:33:d9:
85:be:d3:dc:ad:c7:30:aa:87:e9:a6:99:6c:fd:a5:
25:47:41:fb:d4:b8:82:30:0a:59:af:0d:01:9b:2d:
fe:38:7c:45:d1:02:a5:4d:e6:c9:a3:cd:c2:43:e9:
27:b1:a8:88:20:3c:d0:e2:ec:1d:cd:86:25:94:6a:
27:a7:fd:b6:39:e8:a8:f8:d7:94:22:12:3a:10:32:
7c:91:4d:74:91:c2:73:c2:da:0f:33:a8:b8:fc:08:
1e:f6:ba:dc:84:11:a6:72:39:15:57:f0:57:9c:95:
bc:dd:4f:0c:7f:19:2e:6c:98:b7:94:f5:c6:e3:89:
18:d3:e3:f5:de:a9:2c:7f:5f:40:c3:91:a2:b3:90:
9f:12:eb:9b:2e:19:6a:c4:57:c0:23:e2:e6:b8:ba:
26:67:be:6b:76:c6:fa:54:4b:c1:bd:85:1b:9d:4e:
5a:07:53:2d:f6:76:73:6f:a4:ab:4f:4e:66:59:6d:
69:41:00:72:ae:ed:28:b6:f9:42:c7:ae:c8:2d:94:
89:fa:ef:82:13:cb:8a:d0:dd:39:0d:30:66:32:ca:
6f:66:ff:3d:2b:74:eb:48:a9:03:98:46:d4:22:d2:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:81:20:1F:32:0D:FC:7E:80:D3:89:3D:2B:BA:2D:D2:E0:0F:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A1296CA3BAB11F098DF14D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.198.0/23
154.218.207.0/24
154.218.211.0/24
154.218.213.0/24
154.218.226.0/24
154.218.233.0/24
154.218.238.0/24
154.218.247.0-154.218.248.255
Signature Algorithm: sha256WithRSAEncryption
c4:06:53:a1:3a:e6:fa:15:d5:f3:d2:61:40:3d:59:90:6c:42:
54:8c:82:c1:c9:f7:62:ca:e6:46:c3:e0:92:f9:4d:49:09:fa:
0b:f5:49:a8:4b:f7:c0:97:a2:e1:ab:ff:bd:7a:3f:31:28:ec:
e1:8b:42:82:39:92:43:7a:de:68:95:2d:cc:35:71:c7:ec:ba:
b1:eb:22:24:82:f0:b2:ca:91:41:b3:19:df:ae:72:5f:d0:6a:
a8:d2:0f:0d:be:9f:48:f7:c0:43:ba:07:ab:1f:f7:a3:a9:0c:
fa:44:6f:60:ae:4e:d8:24:3a:e1:0d:fe:dd:ca:18:f7:20:d4:
db:79:24:b6:4f:3a:b2:2d:25:d4:29:f0:92:61:41:0c:89:28:
7a:27:15:75:62:bb:f8:df:b3:43:96:f1:3c:fa:0a:8b:be:86:
e3:fe:d0:85:16:c8:e3:ca:81:f8:e1:4f:37:73:45:24:f4:6d:
97:99:d2:2b:d1:dd:bc:8a:73:b9:63:3c:4f:30:cf:9d:43:7a:
4d:f8:d6:ab:62:fc:e5:f4:9e:8d:59:08:26:19:d4:ed:58:38:
1a:af:05:10:a4:4c:9e:66:23:f2:70:13:63:de:79:c5:68:a2:
af:c4:16:d7:08:c2:cf:68:9b:8f:aa:01:ff:2f:c1:b1:05:5b:
9a:f4:8c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:13:05 2025 by rpki-client