Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F814E0823BC111F0B78DF1E5DAE4EC9C.roa
File: F814E0823BC111F0B78DF1E5DAE4EC9C.roa (raw, json)
Hash identifier: 53X0lVdvDQlFoftrUqCZd8UI9W4JIofCTMI5wynEOwc=
Subject key identifier: E8:06:C4:6C:92:0B:D2:B7:77:28:81:B3:A7:C1:E9:D8:9F:66:FD:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01836E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F814E0823BC111F0B78DF1E5DAE4EC9C.roa
Signing time: Wed 28 May 2025 12:47:53 +0000
ROA not before: Wed 28 May 2025 12:47:48 +0000
ROA not after: Sun 06 Jul 2025 12:47:48 +0000
asID: 202656
IP address blocks: 154.219.224.0/24 maxlen: 24
154.219.225.0/24 maxlen: 24
154.219.226.0/24 maxlen: 24
154.219.227.0/24 maxlen: 24
154.219.228.0/24 maxlen: 24
154.219.229.0/24 maxlen: 24
154.219.231.0/24 maxlen: 24
154.219.233.0/24 maxlen: 24
154.219.234.0/24 maxlen: 24
154.219.235.0/24 maxlen: 24
154.219.236.0/24 maxlen: 24
154.219.237.0/24 maxlen: 24
154.219.238.0/24 maxlen: 24
154.219.239.0/24 maxlen: 24
154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
154.219.244.0/24 maxlen: 24
154.219.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99182 (0x1836e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 12:47:48 2025 GMT
Not After : Jul 6 12:47:48 2025 GMT
Subject: CN=683705f9-9658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:54:13:dc:d6:5e:2e:7e:dd:47:e8:4a:50:
21:97:13:d0:70:52:9c:3f:ac:f4:44:d9:d1:87:0f:
42:b3:fe:56:9e:08:26:5c:d9:fb:77:4d:ad:e8:0a:
c4:63:9f:3e:7b:e2:91:0e:84:62:81:98:0a:22:de:
24:f7:21:5c:82:44:99:b8:91:64:21:b1:d6:ed:24:
e7:f2:b4:f7:9b:8e:a8:4d:b1:8a:78:8e:65:8b:db:
f3:7b:b1:f4:02:f1:05:7b:b1:15:8c:92:a0:0a:df:
0c:33:e1:14:2f:dc:a4:c9:f8:2b:89:48:8e:ea:34:
ad:6a:df:ad:81:e2:87:84:46:70:db:0b:9f:7e:1d:
d0:ec:a9:5f:54:0c:39:89:bc:a2:1c:a3:ed:6f:0d:
46:f2:66:2c:58:7a:97:c6:0c:21:2f:77:6a:6e:bc:
6f:9e:08:a5:18:c9:bd:e8:62:1f:94:7d:1a:ba:db:
7d:79:b4:30:5b:e0:b3:76:5d:1c:ab:62:9a:b5:0c:
ab:bb:5d:98:39:4b:7a:0d:96:32:ae:8b:77:e7:2f:
83:a7:e6:49:b2:1a:d6:3d:cf:f7:0d:34:c9:e1:bc:
d9:6c:41:5b:d2:f1:d6:59:f4:4d:80:3b:fc:85:62:
e9:a2:56:8c:71:61:ea:4e:2a:00:20:f1:c0:aa:a1:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:06:C4:6C:92:0B:D2:B7:77:28:81:B3:A7:C1:E9:D8:9F:66:FD:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F814E0823BC111F0B78DF1E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.224.0-154.219.229.255
154.219.231.0/24
154.219.233.0-154.219.244.255
154.219.248.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:72:27:37:c1:57:44:4e:5f:52:28:a4:a4:eb:12:13:96:b9:
a4:29:b0:f3:cc:ac:c2:02:b7:17:58:68:d0:3f:6b:5a:6b:64:
e0:84:42:74:b3:70:f4:2d:2d:bb:9f:d2:f1:f4:0c:0a:c0:d5:
8d:85:47:8c:95:68:71:bc:5f:64:a7:fa:bd:d7:7c:1f:76:98:
2b:98:2a:30:cd:1a:d3:e7:d7:0a:22:84:af:fe:2a:45:b1:5c:
a8:2e:aa:f7:20:a8:c7:17:80:ee:40:18:d8:59:1d:e5:1b:90:
d0:32:fc:93:82:b4:c7:85:50:a9:65:7c:59:5a:f7:56:ff:ea:
b0:e4:8d:33:68:d4:8f:53:5a:77:1f:a3:69:01:68:66:db:dc:
8b:01:83:9f:52:e9:6e:c2:99:ac:87:1a:1a:b1:34:f4:1c:ac:
05:22:30:04:60:ef:b6:eb:1a:e8:e4:b2:a2:ad:59:c4:27:b7:
b3:76:20:f9:e5:44:3a:a9:c1:7a:a0:8e:30:92:28:4a:ad:4b:
ae:f0:f2:71:8f:c2:b6:1e:a7:f7:05:2e:1c:b9:83:c9:2d:7c:
b6:ee:37:e5:e3:58:c9:b0:4b:27:a6:eb:9e:73:c7:fe:74:4e:
ea:0b:11:d9:e3:cc:a4:88:35:2f:f8:bb:0b:15:50:c5:68:95:
11:d7:c3:39
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAYNuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTI4MTI0NzQ4WhcNMjUwNzA2MTI0NzQ4WjAYMRYw
FAYDVQQDEw02ODM3MDVmOS05NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt3xUE9zWXi5+3UfoSlAhlxPQcFKcP6z0RNnRhw9Cs/5WnggmXNn7d02t
6ArEY58+e+KRDoRigZgKIt4k9yFcgkSZuJFkIbHW7STn8rT3m46oTbGKeI5li9vz
e7H0AvEFe7EVjJKgCt8MM+EUL9ykyfgriUiO6jStat+tgeKHhEZw2wuffh3Q7Klf
VAw5ibyiHKPtbw1G8mYsWHqXxgwhL3dqbrxvngilGMm96GIflH0autt9ebQwW+Cz
dl0cq2KatQyru12YOUt6DZYyrot35y+Dp+ZJshrWPc/3DTTJ4bzZbEFb0vHWWfRN
gDv8hWLpolaMcWHqTioAIPHAqqHwSQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFOgG
xGySC9K3dyiBs6fB6difZv2/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GODE0RTA4MjNCQzExMUYwQjc4REYxRTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAWa2+ADBAGa2+QDBACa
2+cwDAMEAJrb6QMEAJrb9AMEAJrb+DANBgkqhkiG9w0BAQsFAAOCAQEA1HInN8FX
RE5fUiikpOsSE5a5pCmw88yswgK3F1ho0D9rWmtk4IRCdLNw9C0tu5/S8fQMCsDV
jYVHjJVocbxfZKf6vdd8H3aYK5gqMM0a0+fXCiKEr/4qRbFcqC6q9yCoxxeA7kAY
2Fkd5RuQ0DL8k4K0x4VQqWV8WVr3Vv/qsOSNM2jUj1Nadx+jaQFoZtvciwGDn1Lp
bsKZrIcaGrE09BysBSIwBGDvtusa6OSyoq1ZxCe3s3Yg+eVEOqnBeqCOMJIoSq1L
rvDycY/Cth6n9wUuHLmDyS18tu435eNYybBLJ6brnnPH/nRO6gsR2ePMpIg1L/i7
CxVQxWiVEdfDOQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:59:12 2025 by rpki-client