Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B507D31E357F11F09678F9E3DAE4EC9C.roa
File: B507D31E357F11F09678F9E3DAE4EC9C.roa (raw, json)
Hash identifier: 0BGbn2jLF/tJA7DxNevWfviGEeNl25x5OH4VpyuAYEM=
Subject key identifier: E1:4B:64:A8:2E:8C:52:24:E2:B1:C8:01:F8:59:5D:83:18:FF:9C:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B507D31E357F11F09678F9E3DAE4EC9C.roa
Signing time: Tue 20 May 2025 13:38:27 +0000
ROA not before: Tue 20 May 2025 13:38:21 +0000
ROA not after: Tue 01 Jul 2025 13:38:21 +0000
asID: 62240
IP address blocks: 154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.194.117.0/24 maxlen: 24
154.195.113.0/24 maxlen: 24
154.195.141.0/24 maxlen: 24
154.195.142.0/24 maxlen: 24
154.196.68.0/24 maxlen: 24
154.196.70.0/24 maxlen: 24
154.196.76.0/24 maxlen: 24
154.196.77.0/24 maxlen: 24
154.196.78.0/24 maxlen: 24
154.196.79.0/24 maxlen: 24
154.196.80.0/24 maxlen: 24
154.196.81.0/24 maxlen: 24
154.196.87.0/24 maxlen: 24
154.223.208.0/24 maxlen: 24
154.223.213.0/24 maxlen: 24
154.223.215.0/24 maxlen: 24
154.223.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98747 (0x181bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 13:38:21 2025 GMT
Not After : Jul 1 13:38:21 2025 GMT
Subject: CN=682c85d3-fbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:63:e2:62:13:d1:fb:7c:e9:fc:93:56:ea:
49:59:80:88:a1:4c:04:de:83:0a:e8:f4:c5:a1:a3:
f8:6d:0b:73:1a:66:63:0a:a1:08:15:27:29:5d:64:
59:4b:65:4e:2c:54:6b:5e:57:15:d6:d5:73:0c:36:
8b:60:34:0d:af:3c:25:f4:05:b8:24:ce:14:3a:47:
fc:38:5c:11:ef:45:cd:00:3d:a5:e5:09:3d:63:f2:
a9:5b:8b:06:29:a8:5e:a0:cd:6c:9b:d0:2e:8d:7c:
5b:78:60:f5:62:74:31:98:a9:54:e8:e4:e8:ee:df:
5a:64:ef:b6:31:b0:92:e3:c1:aa:56:80:4d:f3:0e:
2c:a6:59:95:8b:87:ef:c6:be:3a:75:f4:ed:8d:52:
5d:ba:85:be:2f:d1:4d:95:43:98:d8:77:34:da:13:
81:51:e9:ac:ce:e1:7d:54:ba:b8:da:c3:d3:4d:a4:
24:d1:f6:9b:bf:6f:6e:f8:29:ca:40:75:63:ac:d6:
e9:76:4e:e9:fa:9e:9c:1b:be:83:a8:90:4f:c0:c2:
1c:11:36:74:9d:8c:bb:8c:5a:de:66:5d:c9:8b:e5:
f1:c7:67:38:0b:60:4b:49:df:98:1b:01:35:ba:53:
cb:be:1c:c0:3c:1f:c5:17:c9:55:b4:af:f0:ff:d1:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4B:64:A8:2E:8C:52:24:E2:B1:C8:01:F8:59:5D:83:18:FF:9C:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B507D31E357F11F09678F9E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.109.0-154.194.111.255
154.194.117.0/24
154.195.113.0/24
154.195.141.0-154.195.142.255
154.196.68.0/24
154.196.70.0/24
154.196.76.0-154.196.81.255
154.196.87.0/24
154.223.208.0/24
154.223.213.0/24
154.223.215.0-154.223.216.255
Signature Algorithm: sha256WithRSAEncryption
30:1e:be:22:88:d3:67:e7:c0:72:78:31:4c:4d:5d:8a:3e:d2:
7a:d5:6d:04:50:0a:9b:1c:75:6e:d9:8e:e9:b2:3d:56:c2:7a:
d8:34:22:46:9e:45:23:11:72:f2:2e:b3:16:5b:3e:ff:95:0b:
08:42:03:e0:14:78:f2:bd:5b:e5:e0:ce:c3:ca:7a:52:53:53:
4f:f5:00:e6:2b:a9:e8:00:9b:89:6c:fd:c4:c4:a5:dc:72:f4:
f2:66:91:c2:e2:e8:d8:89:34:0d:27:c1:22:25:20:dc:f8:eb:
24:ec:2f:ea:63:9d:ad:d6:bc:79:8b:74:f7:df:9b:7a:71:a0:
53:a4:80:47:ce:a1:7f:b3:72:72:e2:cd:cd:25:7c:4d:13:00:
f1:74:44:66:36:60:3e:d2:89:65:59:48:da:24:c4:b0:51:42:
9e:38:7d:d1:98:39:4c:90:49:2f:27:f7:59:88:7e:ac:e6:b3:
43:1e:dd:40:46:0a:71:43:cb:1e:83:39:c7:91:7c:4d:31:b8:
5f:50:ea:45:ce:c5:ad:ed:19:28:20:0f:22:e8:00:88:4f:ff:
61:73:76:b7:c3:7f:e8:65:2c:2b:87:c7:be:5b:6e:95:14:40:
85:7e:25:b7:6b:af:74:62:87:99:2f:79:43:66:a8:2f:6b:ed:
87:74:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:09:54 2025 by rpki-client