Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1054511050E311F0B74BE2EBDAE4EC9C.roa
File: 1054511050E311F0B74BE2EBDAE4EC9C.roa (raw, json)
Hash identifier: zkiq5IUOrVjR+SG43lzPXEyQAv7mncyxyAsgl6BkFeo=
Subject key identifier: 99:CD:4D:3F:1F:64:2D:66:65:CD:43:3F:6A:C4:CF:32:77:74:32:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018846
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1054511050E311F0B74BE2EBDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 10:07:41 +0000
ROA not before: Tue 24 Jun 2025 10:07:37 +0000
ROA not after: Tue 05 Aug 2025 10:07:37 +0000
asID: 44559
IP address blocks: 154.209.138.0/24 maxlen: 24
154.209.139.0/24 maxlen: 24
154.209.140.0/24 maxlen: 24
154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.143.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100422 (0x18846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 10:07:37 2025 GMT
Not After : Aug 5 10:07:37 2025 GMT
Subject: CN=685a78ed-5e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:67:2e:ce:a7:18:e6:56:c1:38:bf:d8:06:
09:8b:f4:8d:b4:0d:34:ce:ff:9c:54:61:bb:ec:25:
c9:b6:1e:fd:d7:ff:9e:39:a0:b4:f7:d6:5e:b8:7b:
a2:92:e6:40:c7:59:ad:02:d4:c8:22:bb:77:b0:09:
5b:03:6a:08:33:94:b3:55:03:b0:24:e8:87:9e:06:
4e:f2:ff:bc:ac:b5:42:68:97:bc:bd:75:89:f2:9e:
a4:b7:69:51:ad:e3:20:98:88:2e:ff:8d:cf:50:c7:
72:42:f7:6b:36:2f:7f:34:7d:67:0e:a1:ac:99:79:
79:0b:c9:4e:3e:ba:4b:f0:7e:f0:83:e7:78:a6:dc:
e7:40:73:f8:fd:4d:ce:80:1a:ea:b5:2f:a9:6d:55:
16:20:a2:67:fd:eb:ec:23:f0:3f:6d:bd:f8:d5:de:
b7:bb:5b:0d:4c:02:31:8e:dd:de:4f:ec:d5:68:2d:
0d:84:45:1c:d2:e2:b9:0a:cc:36:1a:e4:c0:84:91:
71:68:7c:fc:64:b4:10:c5:da:6b:9b:65:84:13:a5:
f7:0c:5a:70:0d:b2:7b:25:2e:3c:8c:f0:c3:48:21:
31:71:00:a8:d3:7b:f7:55:8d:9e:28:45:88:c8:80:
01:35:9d:9e:d3:0c:3d:f6:31:31:57:78:e1:86:ea:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CD:4D:3F:1F:64:2D:66:65:CD:43:3F:6A:C4:CF:32:77:74:32:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1054511050E311F0B74BE2EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.138.0-154.209.143.255
154.209.150.0-154.209.153.255
Signature Algorithm: sha256WithRSAEncryption
46:e0:57:f9:4f:43:fc:ad:e1:63:7f:ca:e0:7d:0f:c4:b2:6c:
d1:50:c0:0a:99:08:38:40:cd:ef:88:7b:e7:07:b6:d7:b2:ec:
06:a3:e3:d1:c3:f9:c0:bc:c3:d3:cc:df:56:08:ce:bd:6c:73:
d4:31:d9:b7:d9:8f:74:25:f8:39:44:29:14:02:e9:df:84:ac:
00:56:dc:3f:77:96:7d:40:46:0d:9e:68:4f:f8:e5:63:29:b7:
1d:41:10:bc:08:70:f8:8a:7b:3c:29:62:a6:83:79:45:e5:b2:
fd:f4:87:cb:26:ed:86:f4:32:c3:65:55:9a:92:f2:0e:70:69:
90:43:ee:55:6c:06:21:08:22:46:22:df:d6:df:7a:95:52:7a:
c5:80:e0:d8:e6:00:45:2f:3e:10:d1:eb:e9:f7:04:92:8e:ed:
cf:a0:90:3e:49:62:93:e6:5b:bb:a3:6f:a2:1e:8b:b7:8f:c8:
f5:05:a4:0a:fd:96:08:bd:20:9a:b7:9d:47:b7:69:1b:90:b6:
62:58:f1:6e:3b:5d:e9:8d:f9:f6:ce:b3:f4:9d:bc:76:89:35:
86:9c:8e:a6:32:87:f9:68:75:f5:97:57:f0:34:3b:63:b6:3a:
60:ff:02:be:22:1a:7d:29:a8:e6:58:da:b5:61:65:36:68:96:
7d:c0:36:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:04:49 2025 by rpki-client