Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D98128F23BDE11F09262C5A0DAE4EC9C.roa
File: D98128F23BDE11F09262C5A0DAE4EC9C.roa (raw, json)
Hash identifier: wO4/aQyYaLlTRTbXcgEeLzOdUh+j88CEs5AMJACQ+d8=
Subject key identifier: 4B:49:81:58:D7:83:AA:77:99:8A:FA:D7:C1:6B:06:74:C3:3F:4B:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01839A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D98128F23BDE11F09262C5A0DAE4EC9C.roa
Signing time: Wed 28 May 2025 16:14:37 +0000
ROA not before: Wed 28 May 2025 16:14:32 +0000
ROA not after: Sun 08 Jun 2025 16:14:32 +0000
asID: 399077
IP address blocks: 154.91.64.0/24 maxlen: 24
154.91.65.0/24 maxlen: 24
154.91.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99226 (0x1839a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 16:14:32 2025 GMT
Not After : Jun 8 16:14:32 2025 GMT
Subject: CN=6837366d-1b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:84:e1:8c:ec:e7:1d:01:95:b2:99:57:f6:
d9:a8:2a:24:ef:7d:91:8d:cd:6d:6c:4b:7c:86:f9:
47:82:c7:e2:e5:eb:5c:bd:49:fd:b4:47:13:7a:32:
ce:74:a7:bf:c3:c9:ad:28:7a:6a:41:86:a8:cc:34:
45:b2:7e:2d:00:40:f3:86:e4:02:3b:79:f0:8a:b5:
d2:c6:49:35:a9:e1:d6:11:1c:fa:44:90:28:0a:c9:
c2:53:63:ff:cd:7a:22:6f:37:82:ed:d3:af:c4:da:
2f:01:13:b6:e0:a7:85:d9:e0:52:41:6f:34:92:8f:
86:22:0c:53:84:82:a2:a7:45:55:0d:7b:f4:c3:21:
8f:90:88:e1:41:d5:8e:7c:fc:ec:9e:2f:5e:ae:85:
a1:84:4d:ec:ce:ee:90:9d:00:aa:4f:3c:e7:c0:5f:
56:16:07:8c:be:cb:60:6e:85:e6:af:a3:55:23:f6:
a7:b3:d5:bb:39:17:13:22:83:e8:0d:09:cb:a1:66:
3c:cb:52:0c:4f:a4:61:1e:a6:ff:78:7b:5b:f4:2f:
bf:0d:b2:30:fc:85:87:d5:d9:84:3e:89:be:5d:c8:
81:50:9c:f2:9a:04:b3:a7:e6:cd:d3:c9:12:70:5b:
9c:81:42:2d:f0:5c:67:74:90:90:e3:af:16:de:67:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:49:81:58:D7:83:AA:77:99:8A:FA:D7:C1:6B:06:74:C3:3F:4B:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D98128F23BDE11F09262C5A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.64.0-154.91.66.255
Signature Algorithm: sha256WithRSAEncryption
c9:e3:f8:07:66:92:6c:b9:14:71:28:54:ec:5b:0a:2a:b6:80:
99:42:5e:de:92:5d:0d:e8:b0:5d:75:02:30:a5:d1:b3:0b:fd:
58:18:71:59:c9:60:fd:0b:26:cc:2a:8d:e9:65:c6:16:1b:64:
e4:3a:b8:7e:eb:3f:75:8c:75:83:7a:fd:a4:ea:c0:ba:fe:43:
ea:b2:7e:ca:c6:cc:76:c1:1d:ab:76:d6:09:d9:b2:82:5a:8d:
57:90:30:4b:60:7a:8f:f6:e4:32:13:3a:ad:23:e7:54:8a:d1:
2a:fe:13:04:af:f8:e7:65:21:17:3e:c9:6a:7a:43:18:78:e4:
1f:dd:34:e0:d8:32:18:17:59:7a:a4:70:57:61:27:0c:0c:6f:
37:d2:5d:d8:b5:3a:63:d0:f4:1b:de:87:09:58:d7:b9:60:d4:
0d:68:c2:5e:dc:38:ce:df:75:75:97:c0:b4:0e:b2:6e:70:0d:
65:90:be:53:3d:34:a5:d5:72:63:42:80:50:b8:b4:7e:b3:0a:
4e:65:3e:93:03:b1:ca:82:ee:1b:00:f3:25:29:b7:1b:d7:cc:
d1:25:d7:74:7f:ac:c5:21:76:82:d7:79:a2:08:dc:3e:c6:7c:
fd:46:f1:b6:46:d9:1a:2b:db:87:e6:7f:f1:6f:24:7c:e3:72:
d5:95:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:43:55 2025 by rpki-client