Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA0BFFC23BA811F0A7DD80C5DAE4EC9C.roa
File: CA0BFFC23BA811F0A7DD80C5DAE4EC9C.roa (raw, json)
Hash identifier: dHfSHfiuzfRiZYqIN5wWBP1gJXxFbp9+Idmno5QEsBs=
Subject key identifier: 61:2C:6F:72:71:B2:B7:94:03:46:9E:44:F8:5C:94:71:55:AC:35:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01833A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA0BFFC23BA811F0A7DD80C5DAE4EC9C.roa
Signing time: Wed 28 May 2025 09:47:38 +0000
ROA not before: Wed 28 May 2025 09:47:33 +0000
ROA not after: Sat 07 Jun 2025 09:47:33 +0000
asID: 9009
IP address blocks: 154.218.195.0/24 maxlen: 24
154.218.202.0/24 maxlen: 24
154.218.223.0/24 maxlen: 24
154.218.230.0/24 maxlen: 24
154.218.234.0/24 maxlen: 24
154.218.235.0/24 maxlen: 24
154.218.241.0/24 maxlen: 24
154.218.245.0/24 maxlen: 24
154.218.250.0/24 maxlen: 24
154.218.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99130 (0x1833a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 09:47:33 2025 GMT
Not After : Jun 7 09:47:33 2025 GMT
Subject: CN=6836dbba-47a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:83:13:46:19:ea:f1:02:45:6d:37:4e:71:
e8:43:f7:9c:d1:58:3e:e9:bf:c9:af:0c:05:9a:56:
29:4f:96:da:52:7a:ac:83:4d:79:4f:49:89:d9:6e:
08:1c:c2:27:39:92:a8:75:d2:b7:68:d4:4f:6a:5f:
25:6c:53:81:cb:99:e4:ae:d2:e4:6d:a9:02:d1:c9:
0d:49:71:ca:51:5d:b5:2e:5f:5e:92:36:05:bf:16:
80:bd:1a:30:26:88:77:6a:2a:07:6a:5f:0b:06:c9:
61:e2:7c:c1:1c:df:09:ea:59:d6:62:39:32:03:a5:
43:9a:36:77:ef:3d:9a:38:1f:1b:7a:15:93:b8:41:
b0:68:0b:28:71:60:96:50:93:56:4e:7d:53:37:bf:
ea:82:50:52:ad:b7:88:08:db:c7:99:bb:41:3e:57:
be:5c:d1:54:42:db:38:fa:2b:53:53:25:c4:cf:52:
77:74:df:b0:10:ee:17:1b:97:99:fe:64:2d:d4:f4:
c0:53:b8:d0:a4:e0:e7:71:a2:10:7d:95:04:87:2f:
d1:28:3e:e2:5d:06:50:7b:e8:4a:70:09:4d:f9:94:
17:cc:40:b8:c2:03:73:67:d2:75:fc:f5:17:d0:d5:
6d:4e:fb:93:68:ae:cc:0f:ab:f8:84:6f:73:20:23:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2C:6F:72:71:B2:B7:94:03:46:9E:44:F8:5C:94:71:55:AC:35:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA0BFFC23BA811F0A7DD80C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.195.0/24
154.218.202.0/24
154.218.223.0/24
154.218.230.0/24
154.218.234.0/23
154.218.241.0/24
154.218.245.0/24
154.218.250.0/24
154.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:88:a3:d1:82:35:0f:6d:d0:3d:32:8a:3f:39:b3:15:d2:a7:
a8:59:7c:90:d5:1e:cf:5c:65:41:b8:80:a1:21:c6:7d:da:8a:
5a:67:0c:de:93:61:cd:d5:8d:55:3d:13:a0:e7:af:9b:51:8d:
fc:61:28:44:6d:d9:0d:ed:f9:b3:4f:a7:65:46:f0:af:3a:d5:
d4:ad:0d:dc:dd:74:fc:33:d9:92:5b:1d:06:10:aa:7e:28:ba:
1c:a3:08:4b:9c:d3:8e:85:b5:56:ad:1d:78:6c:3f:47:7a:48:
1a:ac:e4:72:05:d0:bc:78:ab:86:36:7a:26:0d:8c:f8:de:5c:
d3:e7:fa:04:60:9e:36:ae:58:80:0d:92:b1:28:86:09:91:ee:
ac:b4:91:5b:ef:b9:50:a5:f4:2e:d0:22:da:c0:a6:c2:06:49:
84:a2:2b:e1:70:f3:85:a5:7b:fd:ec:41:55:17:b8:70:0b:f8:
ed:05:89:02:d0:d7:3d:b5:d2:ed:39:a9:c5:ca:44:98:bd:04:
7d:35:4d:5f:b0:3d:29:7a:7f:2d:77:7d:9b:43:0c:d2:24:e6:
d5:69:38:ef:aa:f8:58:19:28:f6:4e:1e:5f:cb:ec:bd:4d:4d:
b9:fe:85:dd:da:f9:6f:18:22:ec:54:94:0e:b4:34:7f:13:88:
5b:ed:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:20:17 2025 by rpki-client