Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9A9ACB0F65511EFA210B2AB762E951A.roa
File: D9A9ACB0F65511EFA210B2AB762E951A.roa (raw, json)
Hash identifier: TjTivKAwrg5Yo7npj/qyUb/EVYPD7O3bVrvD8JuC3XQ=
Subject key identifier: B1:57:89:7A:B0:74:F6:01:83:CC:A3:6A:E8:07:A6:C5:2A:CD:E4:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9A9ACB0F65511EFA210B2AB762E951A.roa
Signing time: Sat 01 Mar 2025 04:30:06 +0000
ROA not before: Sat 01 Mar 2025 04:30:02 +0000
ROA not after: Fri 20 Feb 2026 04:30:02 +0000
asID: 984
IP address blocks: 154.223.82.0/24 maxlen: 24
154.223.83.0/24 maxlen: 24
154.223.84.0/24 maxlen: 24
154.223.85.0/24 maxlen: 24
154.223.86.0/24 maxlen: 24
154.223.87.0/24 maxlen: 24
154.223.88.0/24 maxlen: 24
154.223.89.0/24 maxlen: 24
154.223.91.0/24 maxlen: 24
154.223.95.0/24 maxlen: 24
154.223.96.0/24 maxlen: 24
154.223.97.0/24 maxlen: 24
154.223.98.0/24 maxlen: 24
154.223.99.0/24 maxlen: 24
154.223.100.0/24 maxlen: 24
154.223.101.0/24 maxlen: 24
154.223.102.0/24 maxlen: 24
154.223.103.0/24 maxlen: 24
154.223.104.0/24 maxlen: 24
154.223.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93450 (0x16d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 04:30:02 2025 GMT
Not After : Feb 20 04:30:02 2026 GMT
Subject: CN=67c28d4e-9a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:c3:78:b7:b2:b8:92:a8:c7:97:15:66:44:
94:b9:4f:18:cb:5e:0a:12:d8:6f:58:63:2e:39:f8:
b3:42:6a:be:a3:a7:b8:08:9a:e6:5f:71:ba:e7:06:
fd:a4:fb:f7:33:89:0b:ef:58:c2:32:0b:61:cd:7b:
ac:ab:a5:1e:ae:cb:64:ea:e9:57:b2:f3:46:81:eb:
67:76:e6:6c:23:2c:44:76:df:0b:cb:4e:ac:6d:12:
bb:ab:64:fb:15:d2:29:3f:4f:1c:3a:74:f5:65:04:
f4:8a:ec:84:45:43:10:69:79:ca:2d:5d:fd:0e:6d:
67:f0:77:4b:cc:b9:b6:f4:60:d9:d5:10:83:09:63:
0c:39:66:ed:86:ff:31:7d:ad:3e:cf:83:7a:b1:da:
5d:ca:ab:93:5c:48:1c:39:39:d5:9d:a9:b0:28:47:
af:09:85:5b:71:1a:23:e1:03:d4:a9:c7:49:84:21:
cc:76:c2:a1:ba:6b:9a:e0:d8:cf:6f:70:da:44:8a:
23:a0:92:eb:36:2b:24:3f:f2:ca:04:39:11:c0:79:
8d:85:6d:60:d6:f1:1f:ed:f3:1b:22:9b:da:54:54:
f9:94:67:ba:6f:a8:68:c8:2e:7f:77:9d:3b:69:8a:
3d:1f:52:b0:2e:95:0f:38:26:d7:53:ff:b2:9f:86:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:57:89:7A:B0:74:F6:01:83:CC:A3:6A:E8:07:A6:C5:2A:CD:E4:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9A9ACB0F65511EFA210B2AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.82.0-154.223.89.255
154.223.91.0/24
154.223.95.0-154.223.105.255
Signature Algorithm: sha256WithRSAEncryption
42:25:b8:c3:7b:55:e8:a2:14:00:44:ac:b0:1c:a6:cb:4c:e3:
ab:53:91:64:d6:e4:14:e8:a0:da:c8:93:e7:21:73:c8:51:fe:
ff:82:32:eb:86:ae:4e:62:a5:59:44:b0:76:ab:e3:10:b6:0d:
87:93:31:14:6e:37:a5:d0:01:89:3e:e5:a2:d7:74:b4:f7:74:
65:36:c2:ab:f4:d4:5c:44:50:91:1d:20:6f:27:56:f2:32:71:
89:4c:b7:df:d6:c0:08:d7:73:b5:f1:d3:0d:59:28:2a:2b:f7:
d3:4d:d2:92:7f:f7:ed:7c:b9:f5:cb:e1:aa:53:07:74:bb:a1:
8a:91:d1:6f:02:b3:80:15:e0:cc:9d:f3:8e:f5:9b:d4:cd:77:
34:89:35:34:d8:d0:c0:b9:66:a6:6d:d4:ab:10:91:bd:3d:38:
9a:eb:ff:c5:64:b9:77:67:33:0b:83:6d:64:e1:fc:09:ff:c6:
df:38:57:ef:75:ae:ac:3a:88:6c:44:39:82:7d:08:22:a6:b9:
2d:ad:b5:89:27:b1:05:65:af:d1:cc:89:2e:60:6a:00:73:a6:
ae:9c:d6:ac:e5:b3:74:85:5d:3c:07:09:52:91:02:53:57:9c:
67:00:ed:b3:56:01:33:3f:18:db:2a:7b:ea:2c:c1:b8:2b:f6:
a2:21:16:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:51 2025 by rpki-client