Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDBBE8A8247D11F0BDAA698FDAE4EC9C.roa
File: DDBBE8A8247D11F0BDAA698FDAE4EC9C.roa (raw, json)
Hash identifier: yA5ejbzQnzUDnDiz0P+Queql7uQmBgYccsE/ZiAfPcU=
Subject key identifier: 88:97:1F:BF:9D:D0:5D:78:F1:49:BC:F1:2C:B4:85:A8:8E:02:52:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDBBE8A8247D11F0BDAA698FDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 22:12:26 +0000
ROA not before: Mon 28 Apr 2025 22:12:21 +0000
ROA not after: Fri 04 Jul 2025 22:12:21 +0000
asID: 138915
IP address blocks: 154.93.74.0/24 maxlen: 24
154.93.86.0/24 maxlen: 24
154.93.96.0/24 maxlen: 24
154.95.64.0/24 maxlen: 24
154.95.65.0/24 maxlen: 24
154.95.66.0/23 maxlen: 24
154.95.68.0/24 maxlen: 24
154.95.69.0/24 maxlen: 24
154.95.70.0/23 maxlen: 24
154.95.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97413 (0x17c85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 22:12:21 2025 GMT
Not After : Jul 4 22:12:21 2025 GMT
Subject: CN=680ffd4a-417a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:05:84:e4:ea:40:d9:39:e0:c2:da:9e:80:
e3:9d:f0:b5:67:0c:c3:07:8d:af:66:58:f3:8b:09:
eb:3c:1d:f9:4a:9a:e5:db:da:17:b1:47:ab:11:08:
08:91:10:8a:8f:1f:48:65:1d:25:77:a0:3b:4a:3c:
e7:4e:ed:81:57:a6:dd:24:de:31:a5:c2:51:39:44:
e3:6c:df:5c:aa:7a:74:fd:25:0b:e5:c1:78:27:c9:
a6:3f:4d:83:22:90:6d:62:e4:b1:aa:15:3e:58:90:
a8:63:15:73:a0:e9:b4:6d:26:5e:10:60:9b:d0:05:
6a:6d:9a:f5:a7:14:24:92:f9:02:97:86:e1:e2:6e:
29:92:bf:43:4e:62:65:aa:a6:5f:3b:c5:3f:58:fd:
0e:1f:85:e8:38:57:43:70:43:9f:6f:56:b7:79:11:
82:53:6e:58:21:1f:b3:fe:73:91:f5:3e:16:8c:d3:
7d:b4:50:bb:79:f7:aa:3f:7c:45:98:8f:64:c1:d6:
34:04:71:b4:02:a4:3e:83:fa:a3:95:62:0c:7a:ab:
3d:1d:eb:0e:3a:18:cd:6a:91:3a:5a:b3:48:07:e2:
62:db:b8:83:d4:4f:ef:d4:a4:28:b3:3e:ae:31:6a:
77:30:d8:ed:4b:b3:3c:93:f0:85:c1:8a:04:58:a4:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:1F:BF:9D:D0:5D:78:F1:49:BC:F1:2C:B4:85:A8:8E:02:52:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDBBE8A8247D11F0BDAA698FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.74.0/24
154.93.86.0/24
154.93.96.0/24
154.95.64.0-154.95.75.255
Signature Algorithm: sha256WithRSAEncryption
7f:dd:3f:21:af:eb:12:4f:6f:4d:78:fb:14:10:ed:36:8f:43:
48:77:8b:ab:99:88:40:32:a1:3d:a7:67:a5:fe:30:6e:02:96:
77:b0:49:6e:a2:ee:fa:fd:81:a0:36:5b:bb:a6:f4:7d:c9:2c:
6a:66:33:0a:69:ed:93:01:22:75:23:f6:9b:98:15:65:27:77:
82:e0:db:ff:f6:12:17:62:f0:b0:f5:cd:80:33:35:3c:a4:8b:
6b:67:35:fa:14:26:a2:19:18:81:52:08:bb:5e:81:a8:84:af:
da:b7:7a:b6:be:ab:17:69:d1:96:59:68:b4:af:77:bc:f8:27:
3d:2c:2d:66:b8:18:91:bc:b1:f3:90:95:c8:f1:0e:ea:10:91:
51:0e:48:fc:6d:ef:c6:90:32:63:bb:91:68:1f:a8:35:12:17:
be:6e:91:00:59:a5:b4:1b:bc:8a:70:5a:b2:52:db:ac:d7:9f:
5c:d0:f3:89:0c:34:c4:ef:21:8f:d8:01:2a:18:21:6a:38:f9:
cd:3d:39:0e:86:61:db:ec:9c:35:55:7f:e4:f8:11:5a:84:fe:
43:0f:9d:78:5f:da:d8:44:7c:fb:8b:75:85:51:de:0c:b4:c1:
3a:1b:9f:8c:00:89:af:cc:87:16:20:c4:a7:25:e9:8a:cc:55:
86:16:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:49 2025 by rpki-client