Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF78C9543BA711F0BBBF2EBFDAE4EC9C.roa
File: DF78C9543BA711F0BBBF2EBFDAE4EC9C.roa (raw, json)
Hash identifier: sT5zgKzyoLqncqcvkbv6Lo5doxO0yi88v6NpdZ1+4fo=
Subject key identifier: FE:45:90:33:7F:05:B9:E9:39:8C:ED:F6:ED:1F:6E:B2:63:98:EA:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018338
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF78C9543BA711F0BBBF2EBFDAE4EC9C.roa
Signing time: Wed 28 May 2025 09:41:05 +0000
ROA not before: Wed 28 May 2025 09:41:00 +0000
ROA not after: Sat 07 Jun 2025 09:41:00 +0000
asID: 9009
IP address blocks: 154.218.193.0/24 maxlen: 24
154.218.197.0/24 maxlen: 24
154.218.203.0/24 maxlen: 24
154.218.208.0/24 maxlen: 24
154.218.212.0/24 maxlen: 24
154.218.218.0/24 maxlen: 24
154.218.229.0/24 maxlen: 24
154.218.240.0/24 maxlen: 24
154.218.251.0/24 maxlen: 24
154.218.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99128 (0x18338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 09:41:00 2025 GMT
Not After : Jun 7 09:41:00 2025 GMT
Subject: CN=6836da31-d74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:18:4d:f2:04:c0:d9:8b:4e:b7:2c:08:49:
db:65:0c:14:33:46:f6:f4:b5:af:36:ff:dc:ee:cc:
2c:40:70:f6:48:9a:16:e6:23:e5:98:01:3e:5d:9e:
d2:04:5f:b8:1b:20:48:ef:ef:58:43:8c:eb:3c:ec:
14:5a:3e:85:45:ab:37:43:cc:fd:89:6f:aa:8c:b8:
a8:be:01:53:67:69:93:60:04:05:ee:5c:2b:cd:90:
1c:e3:ff:22:eb:f5:17:36:ee:c8:b0:57:22:f2:13:
60:72:71:c8:c9:4d:ba:58:fa:b5:7f:cf:4c:9f:e1:
62:c5:f5:33:35:e7:d1:1f:80:dc:39:3c:c6:ca:97:
66:b3:69:0f:47:52:75:23:bc:dd:02:b8:71:0b:99:
ec:50:34:91:aa:bb:2e:b1:e2:1f:a5:c3:07:4f:a4:
18:61:c5:25:4c:48:fc:a7:27:e5:95:a5:09:ed:95:
c9:b1:5c:d1:9a:c2:ba:2f:86:77:21:e0:fe:5a:26:
99:d8:cb:d2:2b:d0:99:90:5e:b4:11:4e:ab:aa:d9:
3c:c6:40:07:37:3d:c4:bf:62:6f:99:69:9e:25:f3:
f4:f7:0c:7f:f9:b4:4c:bc:40:41:08:dc:5d:25:0b:
b5:3b:15:f9:ed:fa:ea:e6:6d:32:ad:34:f3:30:5b:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:45:90:33:7F:05:B9:E9:39:8C:ED:F6:ED:1F:6E:B2:63:98:EA:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF78C9543BA711F0BBBF2EBFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.193.0/24
154.218.197.0/24
154.218.203.0/24
154.218.208.0/24
154.218.212.0/24
154.218.218.0/24
154.218.229.0/24
154.218.240.0/24
154.218.251.0/24
154.218.255.0/24
Signature Algorithm: sha256WithRSAEncryption
99:cb:b4:7c:16:f8:21:f1:dc:99:d6:35:bf:36:18:ca:d1:e1:
7c:ca:da:13:d3:8b:c7:ca:b6:9d:2a:41:96:88:47:ec:71:1d:
12:49:80:a6:91:16:47:1d:2b:3b:37:23:8a:21:30:eb:5b:38:
be:63:5b:29:31:0e:81:dc:7d:bf:1b:3c:d1:91:6c:d2:89:5a:
1e:8f:8d:b5:9f:db:df:3e:64:fb:aa:1f:55:a0:08:ff:08:90:
df:c9:6f:d4:5f:a6:a1:47:ca:b5:1b:24:a3:19:af:51:5d:b0:
35:94:6c:b6:56:b1:97:ea:51:19:21:18:35:49:e7:c3:20:99:
0f:b0:a5:14:6f:da:01:4e:06:ca:13:05:a2:16:64:78:f5:a6:
44:7c:76:c9:f2:c1:38:30:cc:23:f6:5b:b7:c1:6b:14:a9:da:
2f:06:82:69:af:34:6a:38:ee:74:4b:5f:a9:66:34:db:a2:5c:
64:5a:7e:37:1c:cf:f8:67:c3:c1:4e:16:b9:cd:5f:32:b2:58:
6e:87:ca:27:b5:7b:69:39:e2:67:65:c0:80:07:27:a1:e3:f7:
b3:e8:fc:37:5b:9c:80:7b:4b:b0:a5:9b:6a:45:44:08:13:99:
6b:2e:f0:b5:7d:4c:e5:c7:dd:65:25:d9:89:03:e4:36:d7:b2:
12:f6:be:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:13:06 2025 by rpki-client