Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10EAFC62248A11F0983528DDDAE4EC9C.roa
File: 10EAFC62248A11F0983528DDDAE4EC9C.roa (raw, json)
Hash identifier: EysnnpNoN+xy5PtN+8wFEHpTaSyK/dI8p9s6XRfcVw0=
Subject key identifier: 71:80:B9:CF:CB:2A:92:B7:EE:FF:16:AF:AA:26:12:FA:D7:47:88:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10EAFC62248A11F0983528DDDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 23:39:46 +0000
ROA not before: Mon 28 Apr 2025 23:39:41 +0000
ROA not after: Tue 17 Jun 2025 23:39:41 +0000
asID: 138915
IP address blocks: 154.206.64.0/24 maxlen: 24
154.206.65.0/24 maxlen: 24
154.206.66.0/24 maxlen: 24
154.206.79.0/24 maxlen: 24
154.206.98.0/23 maxlen: 24
154.206.102.0/23 maxlen: 24
154.206.104.0/23 maxlen: 24
154.206.106.0/24 maxlen: 24
154.206.108.0/23 maxlen: 24
154.206.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97439 (0x17c9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 23:39:41 2025 GMT
Not After : Jun 17 23:39:41 2025 GMT
Subject: CN=681011c2-e1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:c4:6b:c6:0d:f3:bf:95:f0:fb:1f:ad:49:
45:1f:09:ed:1c:4a:6a:6e:6d:69:86:28:22:a3:99:
0e:0c:7e:2d:3d:00:6b:45:a2:76:d4:85:b7:a2:ec:
a9:8c:dd:c4:4f:22:27:2d:65:a9:6f:bc:52:2e:60:
bd:e0:1b:95:57:4d:43:d4:7e:b2:e4:56:d7:3e:f6:
bb:30:b3:09:b9:29:0a:12:b2:eb:b5:91:96:7d:16:
86:07:45:2c:14:5f:16:b8:95:47:ff:ca:60:a0:7d:
69:70:66:51:d3:48:06:fe:82:1e:2c:4a:9f:12:6a:
5c:8d:cf:07:fc:f6:9e:ed:57:53:a9:b1:95:4f:bf:
35:b3:07:a4:b7:48:85:4b:c5:43:3e:d5:67:1a:81:
fc:1b:da:4b:86:04:db:1f:16:a1:b9:e7:ff:57:cc:
9f:cc:22:d2:46:9c:f1:83:29:e3:d8:16:f5:d6:69:
d1:a5:fd:fd:68:47:64:06:0f:be:13:f7:fc:74:26:
39:fa:45:77:d3:f8:5d:93:33:0c:69:08:7c:78:16:
d9:00:b4:60:4b:e2:5d:87:14:42:6f:e8:9d:a1:e1:
4e:1b:85:97:34:56:75:8c:4c:09:36:a4:fc:a0:c2:
cb:de:04:4b:9a:a0:56:0f:89:6e:32:c9:3b:37:dc:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:80:B9:CF:CB:2A:92:B7:EE:FF:16:AF:AA:26:12:FA:D7:47:88:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10EAFC62248A11F0983528DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0-154.206.66.255
154.206.79.0/24
154.206.98.0/23
154.206.102.0-154.206.106.255
154.206.108.0/22
Signature Algorithm: sha256WithRSAEncryption
18:4a:de:52:e9:16:f9:43:ed:7d:6b:a6:0a:3c:c2:6f:93:ce:
10:e7:09:00:b9:02:46:40:c9:8e:3b:ae:8b:ba:b1:bb:d1:b7:
5c:0c:fc:b9:e4:cc:86:13:72:32:63:eb:63:83:8f:17:c1:b0:
df:fc:ca:1d:85:f5:40:ac:43:c0:bd:a7:40:5e:76:0f:54:14:
45:80:7c:fd:da:af:81:59:4f:77:8b:ed:b0:9b:db:a7:b5:ac:
cf:d4:3b:07:4d:67:4f:93:a1:e7:bc:a2:6a:7b:26:93:85:91:
7b:fd:c8:bd:bb:6d:2a:d4:ac:d9:b5:44:7a:79:ad:16:86:f2:
22:1a:5d:85:b4:68:bc:42:5c:1a:0d:c7:67:19:ca:59:76:29:
fc:01:ba:d0:77:5d:20:22:7b:11:22:06:63:00:a1:d4:55:0e:
ae:75:fe:63:48:12:c6:d9:b6:a5:30:c5:54:d7:d9:18:8e:02:
4e:01:57:54:cc:03:78:66:35:a5:7f:d6:93:54:2d:39:53:e6:
de:c3:a8:ed:a5:49:41:23:39:69:26:b7:60:18:30:d1:69:00:
0c:f3:1a:43:e0:cb:b3:22:33:87:58:99:4f:87:18:ef:a6:b1:
58:c5:25:ef:6e:fa:89:4f:31:99:9c:40:bd:cc:32:82:d7:db:
3c:19:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:43:22 2025 by rpki-client