Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4581382332F11F0B48F82EADAE4EC9C.roa
File: A4581382332F11F0B48F82EADAE4EC9C.roa (raw, json)
Hash identifier: T2yFf9BFR66kMweQdIjE1lh2/ilNJEnWMt6rpbz0YOY=
Subject key identifier: 1D:41:BC:DB:ED:51:6C:F1:58:61:6A:62:FF:5F:72:31:62:35:EC:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01814C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4581382332F11F0B48F82EADAE4EC9C.roa
Signing time: Sat 17 May 2025 15:00:17 +0000
ROA not before: Sat 17 May 2025 15:00:12 +0000
ROA not after: Tue 16 Jun 2026 15:00:12 +0000
asID: 984
IP address blocks: 154.83.68.0/24 maxlen: 24
154.83.69.0/24 maxlen: 24
154.83.70.0/24 maxlen: 24
154.89.228.0/24 maxlen: 24
154.89.229.0/24 maxlen: 24
154.89.230.0/24 maxlen: 24
154.89.231.0/24 maxlen: 24
154.90.64.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.66.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.68.0/24 maxlen: 24
154.90.69.0/24 maxlen: 24
154.90.188.0/24 maxlen: 24
154.92.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98636 (0x1814c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 15:00:12 2025 GMT
Not After : Jun 16 15:00:12 2026 GMT
Subject: CN=6828a480-ef81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:d5:09:13:23:36:83:f9:13:7a:71:43:33:
66:41:f7:2a:34:2c:36:e7:5b:ab:43:8f:02:c0:fc:
b7:4a:fc:c3:6b:19:28:2b:af:f0:42:1c:6e:28:97:
d8:a7:06:de:27:2c:20:18:7d:d1:0d:0d:3a:c4:09:
21:d1:51:bf:08:23:8a:d1:37:68:9f:2e:ba:03:70:
21:06:e4:c2:04:ce:a1:10:6b:85:c8:7c:bf:92:a5:
e5:84:83:4a:4d:03:e3:66:fe:bd:17:2b:a3:4b:bb:
54:5b:a6:bb:c3:00:78:9f:a3:2a:c9:f1:2b:32:2c:
d3:fa:9f:ab:ea:9a:bf:46:ad:df:be:db:c8:56:49:
b1:7b:58:13:2c:2a:0f:c9:20:5a:e4:ff:94:fe:21:
c0:bd:7c:cb:7d:d9:3e:31:92:80:5d:1c:67:f0:40:
9b:67:14:c6:77:c6:82:c6:42:9f:78:50:8a:b0:1c:
b9:67:6d:1a:59:95:4f:24:eb:75:d8:f9:1d:80:ce:
7a:ce:89:60:3d:fe:34:d2:16:5e:c4:64:58:09:70:
28:6e:91:fd:a7:26:4e:1e:34:9b:1b:6d:b2:7e:0c:
9d:ae:df:44:4a:84:72:5f:4a:3e:d6:4b:39:ca:58:
6f:b3:46:c6:73:3a:64:3b:28:6b:88:d1:07:34:69:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:41:BC:DB:ED:51:6C:F1:58:61:6A:62:FF:5F:72:31:62:35:EC:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4581382332F11F0B48F82EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.68.0-154.83.70.255
154.89.228.0/22
154.90.64.0-154.90.69.255
154.90.188.0/24
154.92.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e8:a7:24:d8:66:70:2f:6d:2e:3f:6d:93:89:a3:8d:42:65:
34:fd:d5:bb:70:5d:4b:66:1e:5e:64:86:68:2e:67:d3:09:5c:
98:22:a9:07:f3:e9:5e:c2:50:c9:07:c1:bc:e2:67:a9:c5:9b:
e2:91:62:f2:29:52:f0:8d:1f:20:82:eb:38:06:fa:67:84:db:
50:32:ad:7e:6a:e2:5e:92:76:ed:72:2b:3d:9a:75:53:b8:1a:
49:e3:cd:0a:2c:b6:28:69:99:6b:b6:8e:9c:58:ec:5b:43:ea:
9d:8a:74:53:e8:41:fb:b1:19:b6:01:86:5e:74:8b:89:d1:0c:
05:34:db:68:db:ba:d1:2f:ad:9a:81:4a:3d:06:48:b1:41:38:
4d:7d:63:89:80:40:07:87:2a:eb:a1:af:c1:da:7e:64:a0:23:
28:88:b0:b9:05:ad:4f:b4:8f:e5:e1:46:71:53:ef:df:d4:92:
0b:78:87:9c:57:98:c9:92:e4:8b:0e:92:90:f9:d7:df:5e:d1:
19:a6:38:fc:cc:59:a9:85:ef:6a:f5:e1:42:32:1a:6e:92:ec:
63:f2:d0:2a:17:7a:37:02:db:65:6a:91:f5:8d:b5:5d:5d:a0:
c1:8a:5f:f0:52:1c:23:7a:4d:79:79:a1:7a:a6:6e:5d:bc:ff:
d9:23:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:56:22 2025 by rpki-client