Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8DBC14317E11F0AD027898DAE4EC9C.roa
File: 0F8DBC14317E11F0AD027898DAE4EC9C.roa (raw, json)
Hash identifier: z75/3Hk1HSfbn65ByBuA7n5tciZTQd/aiKXYIoGrl1c=
Subject key identifier: BC:E0:06:CF:46:85:08:9F:D1:12:B9:55:27:61:4D:98:BE:DF:3B:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8DBC14317E11F0AD027898DAE4EC9C.roa
Signing time: Thu 15 May 2025 11:16:35 +0000
ROA not before: Thu 15 May 2025 11:16:29 +0000
ROA not after: Sat 05 Jul 2025 11:16:29 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.90.224.0/19 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98528 (0x180e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 11:16:29 2025 GMT
Not After : Jul 5 11:16:29 2025 GMT
Subject: CN=6825cd12-c91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:9c:bb:6e:c8:8d:08:e5:70:41:bd:e3:54:
b5:2a:9c:da:ff:3b:ac:73:45:50:f9:82:14:52:80:
67:3f:d2:48:ba:93:23:2a:4a:ab:61:85:6a:29:6c:
8b:94:e5:27:4e:14:00:07:a3:0f:35:ff:ba:fb:07:
07:02:8b:af:07:b4:45:11:79:d2:45:44:9f:87:e5:
42:cf:52:b3:e5:f3:29:b2:21:06:02:21:0c:04:ba:
45:14:26:cf:34:f5:03:57:43:67:03:28:52:24:58:
b5:ec:bb:bf:33:4f:7b:70:6d:c1:5f:fa:96:c1:91:
d6:d9:7f:fe:33:a3:00:39:d7:dd:45:12:f2:03:73:
48:47:f9:b4:1d:4d:4d:2a:30:4f:4e:77:3a:97:6e:
84:0f:ab:b9:87:6a:78:7c:2d:f8:e9:e6:46:15:ed:
2e:e7:ce:e1:56:89:06:35:7c:e0:61:87:68:c0:27:
4f:1c:98:33:2d:61:aa:bc:a2:d4:e9:80:f7:bf:a9:
4b:f1:cf:37:6f:20:a0:7f:be:79:7c:77:44:25:83:
4f:28:b6:7f:ee:74:fd:8c:6a:55:12:9b:aa:98:88:
b6:8e:5b:db:db:0a:cb:21:09:a7:6c:64:51:b0:58:
82:2f:9a:7d:91:43:42:b7:0d:97:61:f3:57:83:51:
cd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E0:06:CF:46:85:08:9F:D1:12:B9:55:27:61:4D:98:BE:DF:3B:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8DBC14317E11F0AD027898DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.90.224.0/19
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:07:d0:c6:3d:55:3d:21:23:ac:49:66:56:0e:f4:43:38:75:
fc:0d:bf:84:01:32:57:d4:b9:e6:6a:5e:70:48:55:84:1b:4c:
bc:30:17:0e:19:4b:01:92:74:35:e6:47:88:16:a1:34:1a:f8:
99:95:3e:89:51:53:a2:09:e3:06:28:71:9d:38:5e:1c:12:32:
b2:25:7f:eb:64:bd:f8:9b:c2:58:27:85:09:e9:42:d3:3f:bb:
f3:75:be:93:3d:8b:a5:bc:be:b4:20:07:9f:11:53:f0:63:cc:
0f:0b:8b:9b:df:96:f3:30:43:ed:5d:26:57:1d:7a:84:dd:87:
78:f3:ab:a9:14:86:ed:66:e7:6a:36:65:23:c6:0d:16:25:cf:
a0:24:44:f4:fc:e9:0d:31:08:c0:b6:52:fb:90:a9:f1:99:fb:
d8:c1:a1:55:6e:5a:90:64:57:d5:74:bd:e3:8a:14:e5:7c:35:
aa:d1:7b:89:da:83:f3:22:67:33:44:07:68:2e:a4:1a:66:48:
81:30:c3:f8:43:ff:0e:c9:91:2e:fe:7b:61:e1:8c:86:71:9a:
17:7c:9a:2d:96:f8:24:58:b7:58:57:dc:99:40:1f:fe:e9:4a:
f7:13:61:eb:b3:ec:e3:e7:48:88:87:0a:11:20:ed:ae:c4:cd:
1f:1c:47:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:18 2025 by rpki-client