Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D66936C265511F08F7FEBF2DAE4EC9C.roa
File: 1D66936C265511F08F7FEBF2DAE4EC9C.roa (raw, json)
Hash identifier: LNmsq20cOy50F6FuBaykAEpFSyPiKwFjxuCyxmREnpg=
Subject key identifier: 11:4E:1A:A4:02:D2:D0:79:4E:DC:4F:53:CE:A7:C8:DC:68:A7:61:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D66936C265511F08F7FEBF2DAE4EC9C.roa
Signing time: Thu 01 May 2025 06:25:46 +0000
ROA not before: Thu 01 May 2025 06:25:41 +0000
ROA not after: Fri 01 May 2026 06:25:41 +0000
asID: 984
IP address blocks: 154.218.74.0/24 maxlen: 24
154.218.75.0/24 maxlen: 24
154.218.76.0/24 maxlen: 24
154.218.77.0/24 maxlen: 24
154.218.78.0/24 maxlen: 24
154.218.79.0/24 maxlen: 24
154.218.80.0/24 maxlen: 24
154.218.81.0/24 maxlen: 24
154.218.82.0/24 maxlen: 24
154.218.83.0/24 maxlen: 24
154.218.84.0/24 maxlen: 24
154.218.85.0/24 maxlen: 24
154.218.86.0/24 maxlen: 24
154.218.87.0/24 maxlen: 24
154.218.88.0/24 maxlen: 24
154.218.89.0/24 maxlen: 24
154.218.90.0/24 maxlen: 24
154.218.91.0/24 maxlen: 24
154.218.92.0/24 maxlen: 24
154.218.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97724 (0x17dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 06:25:41 2025 GMT
Not After : May 1 06:25:41 2026 GMT
Subject: CN=681313ea-0026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:2a:a1:57:0e:fa:77:25:aa:1c:5d:70:e7:
ac:f1:c8:94:0e:e9:e7:9a:d1:d2:bd:e5:56:e6:8a:
b7:38:4b:a3:a9:aa:a7:a9:01:10:81:98:c2:a1:a4:
f2:41:36:21:d3:6d:eb:0a:c7:12:5e:0a:09:59:47:
f0:60:3c:a9:ca:c8:eb:58:67:9a:a6:5b:07:ca:8f:
6f:78:93:a8:45:17:8d:d7:58:4b:0d:52:6a:c5:ff:
1d:5f:d6:b8:c0:7c:ed:e2:80:5f:8f:65:a1:47:9b:
38:54:42:ee:5f:72:41:03:15:04:81:6f:fa:26:2b:
10:88:d4:16:c9:13:7b:0e:20:9d:38:65:49:c1:1c:
02:32:2c:05:29:2a:6b:c0:ac:87:ee:80:d5:04:f8:
04:78:f7:8f:b5:12:25:3c:f4:43:26:4e:fb:d4:50:
3f:e7:94:c7:58:b6:78:02:90:71:cd:ae:86:be:ec:
c3:58:2f:b7:b8:54:55:da:0b:48:e0:39:19:52:e1:
db:a9:79:b6:cd:bf:79:a8:80:8c:89:0b:20:cb:c1:
63:5f:5c:43:35:a7:8d:20:46:2d:2c:77:98:dd:13:
5a:ee:6e:b3:e6:f0:d3:ec:24:94:ff:91:6d:49:c1:
9b:6a:c2:1b:b5:2a:32:b4:bf:cc:b1:4e:c0:20:7d:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4E:1A:A4:02:D2:D0:79:4E:DC:4F:53:CE:A7:C8:DC:68:A7:61:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D66936C265511F08F7FEBF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.74.0-154.218.93.255
Signature Algorithm: sha256WithRSAEncryption
a3:29:98:53:fa:1f:1d:af:58:17:1f:3c:ce:2a:49:bd:22:0d:
48:8f:78:68:45:70:0e:08:86:97:ec:3b:f3:51:71:96:2f:d8:
15:3e:94:bc:6c:c9:36:f6:f1:b9:49:dc:86:5d:15:f6:fd:26:
92:27:7a:6a:d1:7e:53:4f:53:76:59:2f:f5:d3:0f:c2:b1:d6:
5e:7e:e3:2f:23:66:5f:cd:ea:97:34:85:9e:fb:2b:a6:f6:c1:
a1:0c:85:07:64:ac:fa:92:9f:45:b6:b3:ed:14:ad:fd:42:97:
52:75:03:7e:81:0e:09:e0:d0:3d:35:3a:c5:6c:67:3a:c5:4e:
70:84:37:73:88:e2:da:aa:1d:62:d4:f5:3c:48:00:92:cd:27:
ba:19:c6:ca:e2:b7:85:b4:10:8b:c4:48:e6:b1:10:a4:c8:1e:
3c:dc:26:19:e4:fc:73:7b:50:d0:14:e8:d4:18:d5:e5:3a:60:
8d:5f:54:c0:04:a3:fa:bc:74:bb:78:e9:4b:e4:f0:fe:3c:82:
20:90:40:f8:5d:5e:37:3a:73:3d:66:e3:5c:a6:b0:9f:56:e6:
e2:11:03:1f:61:b9:da:37:c3:4a:f2:9b:dd:b2:91:20:7c:f5:
3d:eb:ce:d2:5c:84:fd:a2:c6:33:72:79:9a:d5:b2:82:40:fe:
aa:29:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:38:11 2025 by rpki-client