Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFDCCDDEF65811EFA2FF6543762E951A.roa
File: EFDCCDDEF65811EFA2FF6543762E951A.roa (raw, json)
Hash identifier: ETPKvIizXktOyrsAmjZT92AYNKG0hDEwiYxmTr8pUmo=
Subject key identifier: 67:18:4A:4C:37:93:A3:F1:82:4B:C5:D6:96:58:D2:3D:FD:F8:2F:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFDCCDDEF65811EFA2FF6543762E951A.roa
Signing time: Sat 01 Mar 2025 04:52:11 +0000
ROA not before: Sat 01 Mar 2025 04:52:07 +0000
ROA not after: Thu 26 Feb 2026 04:52:07 +0000
asID: 984
IP address blocks: 154.197.66.0/24 maxlen: 24
154.197.98.0/24 maxlen: 24
154.199.129.0/24 maxlen: 24
154.199.132.0/24 maxlen: 24
154.199.140.0/24 maxlen: 24
154.199.151.0/24 maxlen: 24
154.199.153.0/24 maxlen: 24
154.199.157.0/24 maxlen: 24
154.199.193.0/24 maxlen: 24
154.199.194.0/24 maxlen: 24
154.202.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93460 (0x16d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 04:52:07 2025 GMT
Not After : Feb 26 04:52:07 2026 GMT
Subject: CN=67c2927b-eef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:5e:51:57:01:78:cb:1f:43:d4:b0:8a:32:
45:dc:3a:40:06:f9:03:9d:fb:e1:91:48:0c:f7:75:
0a:3e:f8:56:dd:50:ed:f8:4a:f8:dd:ea:89:44:cf:
32:a6:3d:1d:d9:42:d1:7c:62:52:aa:fa:e5:bf:fb:
a1:e0:89:41:4a:e3:6b:8b:bb:51:79:ea:95:4c:d8:
8d:08:38:99:d4:84:00:c6:f0:8b:22:63:c0:97:57:
7e:7b:5a:32:aa:c5:a9:f8:64:84:6c:90:2e:d6:74:
c3:3b:5c:d9:4d:63:7e:a9:6d:d7:1a:84:ca:e3:4a:
5e:08:21:fb:70:b5:f1:22:99:3b:88:fb:37:2c:c7:
76:dc:bb:b9:43:09:c8:fe:8f:16:65:49:e3:29:66:
c1:46:53:c8:69:7a:28:ea:ea:9a:41:22:37:28:4c:
96:20:0e:e2:de:fe:47:4c:31:9e:07:5b:72:fa:00:
17:17:6f:77:3b:b4:f6:90:7e:49:e0:88:07:c8:0b:
b4:7b:a4:46:8f:39:a1:9d:45:a6:5a:6b:2d:64:72:
9a:52:82:16:47:55:d0:a8:35:23:7a:3f:ee:c5:69:
1b:4f:40:a2:d1:64:b4:0d:ab:0e:fd:56:ec:5f:02:
7f:93:e6:00:00:5f:13:18:49:40:d3:e5:52:e3:1d:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:4A:4C:37:93:A3:F1:82:4B:C5:D6:96:58:D2:3D:FD:F8:2F:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFDCCDDEF65811EFA2FF6543762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.66.0/24
154.197.98.0/24
154.199.129.0/24
154.199.132.0/24
154.199.140.0/24
154.199.151.0/24
154.199.153.0/24
154.199.157.0/24
154.199.193.0-154.199.194.255
154.202.137.0/24
Signature Algorithm: sha256WithRSAEncryption
48:24:e8:4f:db:9c:be:60:11:1a:54:03:ab:11:17:55:62:35:
cc:06:4e:fe:83:06:92:fa:3e:f0:ba:c2:1c:84:78:b9:74:a9:
68:02:cb:8e:ab:f9:37:76:49:db:fc:2e:3c:eb:9c:be:54:9d:
df:09:50:01:7e:8b:2c:ad:98:d9:ba:11:b2:61:ef:49:2e:ed:
65:c0:11:6b:98:4f:ad:69:57:54:55:18:4c:29:da:7d:78:be:
12:a8:06:73:ad:93:42:16:13:ef:45:a6:b6:50:ce:0e:59:c9:
ff:f9:e9:48:73:5d:69:33:a1:f1:8e:07:71:5e:25:3a:ae:19:
98:54:ad:b8:b9:58:ff:de:9e:79:fe:01:dc:17:5e:7d:2f:4d:
82:c5:06:a5:6a:c8:f8:53:d1:e5:84:19:0a:26:23:7e:2a:d3:
56:64:4f:06:c3:d5:e7:33:c6:56:f5:f2:e0:d9:64:bf:27:2e:
78:1a:9d:a5:69:8c:46:e5:ae:c9:5b:9b:78:0f:49:07:e4:57:
1b:c4:4e:cf:10:7c:c8:76:15:59:71:96:e8:42:e4:db:5b:8d:
4c:c9:c3:36:e3:18:f6:4a:2a:ec:47:bc:31:91:9a:8f:91:ba:
2a:f5:97:27:7c:ab:21:5f:d3:dd:3e:71:71:49:6d:b6:1f:62:
e6:06:91:e6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIDAW0UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMDQ1MjA3WhcNMjYwMjI2MDQ1MjA3WjAYMRYw
FAYDVQQDEw02N2MyOTI3Yi1lZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvaFeUVcBeMsfQ9SwijJF3DpABvkDnfvhkUgM93UKPvhW3VDt+Er43eqJ
RM8ypj0d2ULRfGJSqvrlv/uh4IlBSuNri7tReeqVTNiNCDiZ1IQAxvCLImPAl1d+
e1oyqsWp+GSEbJAu1nTDO1zZTWN+qW3XGoTK40peCCH7cLXxIpk7iPs3LMd23Lu5
QwnI/o8WZUnjKWbBRlPIaXoo6uqaQSI3KEyWIA7i3v5HTDGeB1ty+gAXF293O7T2
kH5J4IgHyAu0e6RGjzmhnUWmWmstZHKaUoIWR1XQqDUjej/uxWkbT0Ci0WS0DasO
/VbsXwJ/k+YAAF8TGElA0+VS4x3+wwIDAQABo4IC4zCCAt8wHQYDVR0OBBYEFGcY
Skw3k6PxgkvF1pZY0j39+C8NMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRkRDQ0RERUY2NTgxMUVGQTJGRjY1NDM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAmsVCAwQAmsViAwQAmseB
AwQAmseEAwQAmseMAwQAmseXAwQAmseZAwQAmsedMAwDBACax8EDBACax8IDBACa
yokwDQYJKoZIhvcNAQELBQADggEBAEgk6E/bnL5gERpUA6sRF1ViNcwGTv6DBpL6
PvC6whyEeLl0qWgCy46r+Td2Sdv8LjzrnL5Und8JUAF+iyytmNm6EbJh70ku7WXA
EWuYT61pV1RVGEwp2n14vhKoBnOtk0IWE+9FprZQzg5Zyf/56UhzXWkzofGOB3Fe
JTquGZhUrbi5WP/ennn+AdwXXn0vTYLFBqVqyPhT0eWEGQomI34q01ZkTwbD1ecz
xlb18uDZZL8nLnganaVpjEblrslbm3gPSQfkVxvETs8QfMh2FVlxluhC5NtbjUzJ
wzbjGPZKKuxHvDGRmo+Ruir1lyd8qyFf090+cXFJbbYfYuYGkeY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:26 2025 by rpki-client