Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBCC39D0247F11F0A0D6FE9ADAE4EC9C.roa
File: BBCC39D0247F11F0A0D6FE9ADAE4EC9C.roa (raw, json)
Hash identifier: 06NKMh5Fhf+Vw6mYmkAZlvxY/2i+etAeeQCBGnKaNAE=
Subject key identifier: 17:30:4D:38:A8:DB:74:0C:B4:CF:5D:07:6B:F6:22:59:49:7A:1A:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBCC39D0247F11F0A0D6FE9ADAE4EC9C.roa
Signing time: Mon 28 Apr 2025 22:25:48 +0000
ROA not before: Mon 28 Apr 2025 22:25:43 +0000
ROA not after: Fri 04 Jul 2025 22:25:43 +0000
asID: 138915
IP address blocks: 154.93.73.0/24 maxlen: 24
154.93.110.0/24 maxlen: 24
154.93.111.0/24 maxlen: 24
154.93.114.0/24 maxlen: 24
154.93.115.0/24 maxlen: 24
154.93.116.0/22 maxlen: 24
154.93.121.0/24 maxlen: 24
154.93.122.0/24 maxlen: 24
154.93.124.0/23 maxlen: 24
154.93.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97417 (0x17c89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 22:25:43 2025 GMT
Not After : Jul 4 22:25:43 2025 GMT
Subject: CN=6810006c-b6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a6:73:9b:e3:53:61:5b:90:02:4e:e4:e6:33:
02:84:79:62:bc:10:ce:b4:dc:d4:64:75:fa:cb:82:
85:e6:1c:a0:81:bf:45:b8:dd:33:b8:5b:7e:bb:f6:
4e:9e:1b:16:8e:95:f2:5a:b0:da:f7:c3:2f:b8:1a:
f9:95:f0:fc:3a:dc:77:31:14:f0:ad:eb:3c:36:94:
3d:b6:34:85:56:fc:10:a2:5a:44:d1:0b:6b:68:3f:
cd:df:9a:f2:af:28:b9:81:56:a2:ac:dd:67:06:16:
c4:fc:9c:4d:f8:92:b3:fa:52:df:7c:36:73:01:be:
a1:7d:b5:a0:75:ac:89:35:d9:e7:cc:f9:b7:d6:fb:
6b:4a:00:46:21:0a:6c:23:84:b8:3b:4e:13:78:11:
f1:2a:5b:4e:8f:df:c6:d9:cf:6b:39:ed:82:c8:61:
b1:59:1b:77:fd:93:ad:9c:35:22:22:a0:95:b7:64:
10:10:85:7e:3c:ab:5f:e8:b8:ee:51:20:3c:54:34:
c7:1d:13:b7:83:e7:3a:e3:9f:44:3c:65:e9:02:4c:
95:c5:85:56:0f:61:20:f3:53:8e:7c:6c:e0:0c:31:
a2:09:b6:dc:db:d9:74:8b:f5:8c:73:ea:4d:a1:64:
5a:5c:f1:56:58:51:12:6e:d1:07:29:58:68:91:1c:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:30:4D:38:A8:DB:74:0C:B4:CF:5D:07:6B:F6:22:59:49:7A:1A:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBCC39D0247F11F0A0D6FE9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0/24
154.93.110.0/23
154.93.114.0-154.93.119.255
154.93.121.0-154.93.122.255
154.93.124.0-154.93.126.255
Signature Algorithm: sha256WithRSAEncryption
5c:37:32:64:d0:bc:43:6b:47:c0:26:0a:da:64:85:aa:25:44:
f2:f0:25:83:e1:39:43:2f:f4:54:f8:51:94:27:a4:39:3d:37:
d0:26:58:70:e0:0d:41:72:f8:06:9c:ec:5f:91:80:79:53:fc:
50:74:a4:e4:43:a1:71:06:dd:66:95:55:f8:c0:6c:9e:fa:37:
76:e7:bc:4a:ec:7f:67:f1:a1:67:88:c0:d0:ea:25:65:2a:2b:
6a:e5:67:1d:ba:ca:d3:dc:62:c7:92:c0:7a:e6:49:fb:5c:06:
e4:a1:5b:48:96:36:25:68:c6:f8:b6:fd:23:9e:b8:3c:b8:78:
fd:09:86:01:9a:4a:55:5b:7d:d8:1d:2e:3b:06:f9:35:a2:e1:
9e:1b:5e:19:fb:00:23:c7:39:5b:49:e9:61:36:3a:20:4d:ca:
ed:8c:30:d3:77:7e:f7:1c:13:69:09:95:7b:dd:cc:69:9f:a2:
30:c5:1e:b4:a7:f0:3b:c0:d8:3c:0b:2d:af:83:69:6d:05:dc:
24:2b:6b:d2:9d:74:31:d7:9a:51:a8:65:4a:b9:c2:ab:da:91:
1e:e6:fd:be:ea:7f:f1:5a:5d:8a:bb:d7:22:fd:4b:aa:aa:8c:
7b:a3:af:fc:3e:66:bf:41:ba:20:f5:50:7c:3b:b9:22:01:a1:
53:0f:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:10 2025 by rpki-client