Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FCB588C248911F099C854D8DAE4EC9C.roa
File: 0FCB588C248911F099C854D8DAE4EC9C.roa (raw, json)
Hash identifier: zZj4n9AemwmeSdolWvmfzWQJrJbRKBjzpa6WvC5WsE0=
Subject key identifier: 4E:66:4E:EC:7A:E6:32:08:B5:4B:FF:04:F1:D9:A9:3C:B9:20:BD:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FCB588C248911F099C854D8DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 23:32:35 +0000
ROA not before: Mon 28 Apr 2025 23:32:30 +0000
ROA not after: Tue 17 Jun 2025 23:32:30 +0000
asID: 138915
IP address blocks: 154.206.67.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.72.0/23 maxlen: 24
154.206.74.0/23 maxlen: 24
154.206.76.0/23 maxlen: 24
154.206.78.0/24 maxlen: 24
154.206.90.0/23 maxlen: 24
154.206.92.0/23 maxlen: 24
154.206.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97437 (0x17c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 23:32:30 2025 GMT
Not After : Jun 17 23:32:30 2025 GMT
Subject: CN=68101012-7ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:da:e3:ce:ec:85:79:a0:13:a6:d5:d0:66:
0d:bb:b5:7b:d5:f8:d8:4f:04:5e:85:95:17:ce:df:
a0:d1:91:fb:04:01:93:2c:0c:a8:d7:8a:68:82:08:
f0:19:b1:b8:ef:c3:9d:a0:e9:65:f1:d1:4b:97:a6:
33:f0:0c:fe:3f:5b:88:cb:f9:02:eb:7e:72:24:44:
11:2a:55:f9:34:25:18:0b:c8:b0:4d:90:31:26:9d:
82:4c:f4:d9:6f:75:ed:0a:e3:3d:24:a0:1b:39:fd:
0c:c7:62:64:7c:8b:1a:1d:b1:5e:67:df:41:13:44:
9d:77:9d:6b:04:6d:3e:79:9d:be:59:fa:f1:b8:01:
76:6c:f5:b1:4a:64:a9:c6:5c:c3:85:18:81:b7:64:
a6:f4:3c:11:1c:11:25:72:37:3a:5d:35:68:1b:e0:
ab:49:05:f2:fe:db:62:01:f4:48:d3:8c:12:ff:44:
a9:72:75:02:f8:53:fe:d0:cf:0e:cc:be:e7:7c:dc:
28:b7:fe:b9:20:6b:b3:0d:83:70:be:0e:05:f2:45:
45:ae:89:54:26:4f:7f:3a:70:65:33:59:02:85:d7:
48:18:57:9a:98:77:1e:b9:bd:07:b5:1d:76:e0:c0:
d9:50:d9:77:99:62:61:81:86:41:0f:7b:b2:dc:27:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:66:4E:EC:7A:E6:32:08:B5:4B:FF:04:F1:D9:A9:3C:B9:20:BD:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FCB588C248911F099C854D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.67.0-154.206.78.255
154.206.90.0-154.206.95.255
Signature Algorithm: sha256WithRSAEncryption
d4:19:64:c3:51:ed:75:a8:16:02:f0:1e:a5:6d:56:d8:ca:fe:
bb:48:09:f5:6c:53:ef:bb:a7:3a:05:56:b3:0f:15:56:86:d0:
24:d7:ba:3b:70:a1:ec:94:a8:92:ce:35:58:21:47:eb:f1:1d:
dc:6c:aa:19:a2:38:21:44:a4:00:33:c3:4b:0b:ec:56:58:4e:
82:ae:ac:cc:9c:ed:dd:f8:5a:63:de:a9:53:d4:8d:2e:ca:ab:
8b:9f:8d:b3:a2:47:a6:68:37:b9:37:44:22:ef:4b:81:f8:2a:
19:d4:ad:d2:5c:0e:26:9f:33:61:58:43:28:4a:07:4d:d4:be:
c3:40:18:59:51:bd:8a:ef:17:92:9b:c1:5b:c2:69:ed:78:04:
2f:4e:6d:6a:a4:fe:ff:1f:86:3c:60:aa:88:0d:1e:0e:25:9f:
2d:c0:7a:30:41:6f:12:6f:71:8a:85:71:25:23:bb:5c:2e:34:
82:25:a8:87:18:34:d9:05:0f:f5:5b:bd:c1:e9:11:aa:5e:0a:
9c:73:10:3c:9d:2a:64:d3:29:c7:df:ab:b3:c0:c1:c5:d9:cf:
e6:0a:0f:51:c4:b4:0c:7d:a7:f3:16:31:9b:3c:30:18:fb:af:
6c:a0:16:fe:9f:9b:9e:1a:9a:a3:d1:b0:5b:4a:60:05:8a:07:
92:7b:a7:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 8 17:22:45 2025 by rpki-client