Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115F942C268411F09BA296A7DAE4EC9C.roa
File: 115F942C268411F09BA296A7DAE4EC9C.roa (raw, json)
Hash identifier: kuEvl+tYdlIpoVPlE6Ua0jXToq6wj8L8zhXLF/RsH5c=
Subject key identifier: CB:97:5F:15:A2:C2:51:5B:3A:2E:97:61:86:68:3A:BF:CC:9F:19:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115F942C268411F09BA296A7DAE4EC9C.roa
Signing time: Thu 01 May 2025 12:01:52 +0000
ROA not before: Thu 01 May 2025 12:01:46 +0000
ROA not after: Wed 26 Apr 2028 12:01:46 +0000
asID: 17561
IP address blocks: 154.84.186.0/24 maxlen: 24
154.84.188.0/24 maxlen: 24
154.84.189.0/24 maxlen: 24
154.84.190.0/24 maxlen: 24
154.85.12.0/24 maxlen: 24
154.85.13.0/24 maxlen: 24
154.85.104.0/24 maxlen: 24
154.85.105.0/24 maxlen: 24
154.85.106.0/24 maxlen: 24
154.85.107.0/24 maxlen: 24
154.85.108.0/24 maxlen: 24
154.85.109.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.111.0/24 maxlen: 24
154.85.112.0/24 maxlen: 24
154.85.113.0/24 maxlen: 24
154.85.114.0/24 maxlen: 24
154.85.115.0/24 maxlen: 24
154.85.116.0/24 maxlen: 24
154.85.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97780 (0x17df4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 12:01:46 2025 GMT
Not After : Apr 26 12:01:46 2028 GMT
Subject: CN=681362b0-8169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e5:ae:d4:47:62:0c:37:01:ed:ee:53:8c:6e:
bf:b8:70:41:f0:f8:cf:0d:58:12:13:7f:99:d6:af:
52:dc:8c:b2:77:7f:6c:d3:54:99:72:61:fc:27:70:
2b:ca:e2:4f:43:a6:ba:78:3a:6e:46:90:c9:e9:05:
2c:7b:19:01:1a:27:4e:f4:40:83:61:b2:87:98:9b:
6b:40:59:c4:d5:d1:9d:32:d9:3c:ea:5b:04:45:a4:
66:95:35:f9:51:4a:e5:74:f3:18:1a:28:f2:52:c9:
ec:d6:5f:a4:4e:de:08:ad:d6:cc:7c:0b:a4:e2:98:
15:1f:b7:39:b2:06:72:98:e1:fc:76:51:22:62:1a:
1c:3f:2e:42:01:a0:48:11:6f:8a:94:54:e6:36:4d:
09:21:4c:52:28:72:da:c1:6a:24:93:af:ab:77:12:
30:1a:b4:47:ae:b2:b7:db:5d:76:6e:c4:1f:99:d0:
b0:15:b8:b9:53:3c:13:06:26:00:9a:da:fa:9e:7a:
79:94:a2:ce:b7:c9:1a:35:84:76:4b:46:06:6d:93:
80:ef:b4:e7:49:7a:ed:0d:49:f9:71:d1:a6:50:f5:
fd:90:3f:3a:2e:8c:90:cf:ae:a6:48:f7:ef:a4:81:
dd:b1:c8:21:af:18:35:bb:8d:7a:64:df:44:da:65:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:97:5F:15:A2:C2:51:5B:3A:2E:97:61:86:68:3A:BF:CC:9F:19:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115F942C268411F09BA296A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.186.0/24
154.84.188.0-154.84.190.255
154.85.12.0/23
154.85.104.0-154.85.117.255
Signature Algorithm: sha256WithRSAEncryption
1e:ac:c0:7b:63:04:f3:e8:97:68:a5:b8:89:25:84:40:26:0c:
44:f8:ac:de:d0:65:55:98:d3:3e:87:a2:3a:d9:44:a8:07:b9:
b2:dc:cb:4b:5f:31:3e:94:38:48:60:7c:f2:7d:e4:ef:34:00:
93:46:6a:74:5a:4f:f2:83:89:f5:36:ad:d3:57:f5:ae:7e:bf:
27:b9:06:14:8c:7b:46:18:83:03:45:b3:10:e4:af:5d:9e:57:
81:c7:bc:ec:d8:4d:70:6e:ec:5c:2e:12:81:e3:26:b8:85:ba:
4c:c7:50:e0:66:ca:ce:24:ed:23:37:b3:97:0e:02:8f:1d:a8:
4b:a1:08:41:d2:98:31:e5:45:62:77:42:f2:99:61:10:64:47:
c1:f5:f3:2e:22:85:ae:af:1c:b9:fd:ce:d9:9f:2d:b1:43:92:
1b:ac:78:6a:06:b6:2c:d8:cc:2b:30:8b:c9:1b:16:d2:c3:c9:
c0:02:4d:37:72:d5:e3:3f:d5:7a:68:f3:b1:7c:b1:13:b8:f2:
26:b4:48:9c:d8:66:35:4b:86:2e:5e:b3:8d:90:1e:ea:3d:69:
59:6b:51:8f:59:e8:65:cb:77:52:e1:73:ed:89:80:9f:5e:7b:
b3:d1:0c:f9:48:ee:f3:d6:47:19:b3:48:43:ba:16:17:64:ae:
c1:d4:6a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:11:34 2025 by rpki-client