Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E111E68541D11F083BCBCE7DAE4EC9C.roa
File: 1E111E68541D11F083BCBCE7DAE4EC9C.roa (raw, json)
Hash identifier: 50n30h1EFQFCf0iFV4nGUA8eSl05SNYznOJlIInjw4g=
Subject key identifier: 79:04:A2:5B:19:49:85:FD:23:6D:B5:AF:F5:87:E6:48:BC:E0:19:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01894B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E111E68541D11F083BCBCE7DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 12:40:49 +0000
ROA not before: Sat 28 Jun 2025 12:40:44 +0000
ROA not after: Tue 29 Jul 2025 12:40:44 +0000
asID: 214143
IP address blocks: 154.83.40.0/23 maxlen: 24
154.83.42.0/23 maxlen: 24
154.83.72.0/23 maxlen: 24
154.83.74.0/23 maxlen: 24
154.83.76.0/23 maxlen: 24
154.93.1.0/24 maxlen: 24
154.93.3.0/24 maxlen: 24
154.93.26.0/24 maxlen: 24
154.93.28.0/22 maxlen: 24
154.94.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100683 (0x1894b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 12:40:44 2025 GMT
Not After : Jul 29 12:40:44 2025 GMT
Subject: CN=685fe2d1-432b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:93:cf:d9:9f:1d:bb:3c:c1:32:1e:d4:62:
26:d3:7d:32:84:13:08:3c:63:96:4f:a7:01:a4:81:
3e:08:90:bf:c3:0c:ff:dd:e0:9e:4d:69:fe:b0:59:
12:0f:33:7d:4e:1e:15:da:29:c7:a1:0f:0b:61:57:
08:9d:a8:16:6d:95:31:0e:74:67:ba:49:9e:91:8f:
23:4a:16:4a:74:09:b0:5f:97:a4:70:59:16:a7:92:
84:76:bf:01:5f:4e:50:fc:39:12:2c:10:80:e6:51:
01:45:fc:c3:01:e1:1d:cb:5d:5a:27:56:4b:97:de:
9d:d4:3a:e2:97:c2:2f:b6:f7:a8:5b:55:0b:ee:c1:
68:98:be:df:b3:ee:ae:b0:cf:35:b3:6c:82:91:38:
4b:1c:4d:55:07:dc:42:1a:fa:80:9f:70:ea:25:42:
fa:c7:3f:4c:79:9c:30:34:e6:95:66:aa:53:86:21:
2a:80:2d:3a:a6:ab:fc:a6:b4:db:9f:0c:0a:1d:12:
46:b7:33:ed:b4:0a:3e:15:93:a4:0a:e3:97:ad:3d:
3b:9e:0c:2b:79:9e:94:46:55:a0:9d:ed:c3:f0:07:
95:c1:75:32:42:a8:ec:a7:fb:cf:79:f5:12:ff:92:
06:e0:cd:52:bc:c6:ae:52:aa:44:87:6e:93:4f:e0:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:A2:5B:19:49:85:FD:23:6D:B5:AF:F5:87:E6:48:BC:E0:19:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E111E68541D11F083BCBCE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.40.0/22
154.83.72.0-154.83.77.255
154.93.1.0/24
154.93.3.0/24
154.93.26.0/24
154.93.28.0/22
154.94.35.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b3:3d:60:74:f0:93:80:26:af:ba:9b:17:c8:76:ed:45:4c:
72:e4:9e:36:5c:9e:4e:08:32:02:66:de:4d:4c:69:9e:e4:90:
51:6d:96:5a:e5:eb:6c:ed:18:33:01:13:c3:6c:9b:22:08:1c:
3b:dc:a3:f1:c7:c2:a1:e9:38:2e:77:c1:07:8b:11:6f:98:38:
d0:3a:70:e1:f0:3a:6f:8c:15:cb:e7:19:0f:0c:74:e6:19:e4:
a7:b7:7e:29:8d:3c:c8:46:19:b5:3f:30:bb:02:20:6d:b2:71:
84:6e:08:d4:d9:37:bc:f4:4a:c1:1b:3c:15:01:8f:e4:fc:0c:
a0:5b:bd:13:d6:17:ed:1c:2c:6c:9f:bf:fa:e0:57:93:0e:cb:
41:0a:ca:5d:ca:70:c6:9e:61:32:7b:bf:eb:b9:43:a5:17:90:
80:c6:f2:dc:a3:d2:ad:ca:21:aa:45:33:8d:d5:52:31:ae:d4:
f9:10:78:83:fd:89:d4:68:68:4e:e5:7b:e4:79:b1:7e:08:47:
c3:85:79:43:2a:37:dd:bd:5d:c9:41:f9:16:c9:23:d5:59:84:
17:51:ee:1e:10:b2:cd:bd:a7:4b:39:e6:ba:0a:a3:77:c1:f4:
2a:e2:37:71:28:9c:69:b3:a0:d2:97:9f:d8:09:e4:f2:f3:b1:
2b:6a:ec:a8
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIDAYlLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjI4MTI0MDQ0WhcNMjUwNzI5MTI0MDQ0WjAYMRYw
FAYDVQQDEw02ODVmZTJkMS00MzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA356Tz9mfHbs8wTIe1GIm030yhBMIPGOWT6cBpIE+CJC/wwz/3eCeTWn+
sFkSDzN9Th4V2inHoQ8LYVcInagWbZUxDnRnukmekY8jShZKdAmwX5ekcFkWp5KE
dr8BX05Q/DkSLBCA5lEBRfzDAeEdy11aJ1ZLl96d1Dril8IvtveoW1UL7sFomL7f
s+6usM81s2yCkThLHE1VB9xCGvqAn3DqJUL6xz9MeZwwNOaVZqpThiEqgC06pqv8
prTbnwwKHRJGtzPttAo+FZOkCuOXrT07ngwreZ6URlWgne3D8AeVwXUyQqjsp/vP
efUS/5IG4M1SvMauUqpEh26TT+AY4QIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFHkE
olsZSYX9I221r/WH5ki84BmjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRTExMUU2ODU0MUQxMUYwODNCQ0JDRTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQCmlMoMAwDBAOaU0gDBAGa
U0wDBACaXQEDBACaXQMDBACaXRoDBAKaXRwDBACaXiMwDQYJKoZIhvcNAQELBQAD
ggEBABazPWB08JOAJq+6mxfIdu1FTHLknjZcnk4IMgJm3k1MaZ7kkFFtllrl62zt
GDMBE8NsmyIIHDvco/HHwqHpOC53wQeLEW+YONA6cOHwOm+MFcvnGQ8MdOYZ5Ke3
fimNPMhGGbU/MLsCIG2ycYRuCNTZN7z0SsEbPBUBj+T8DKBbvRPWF+0cLGyfv/rg
V5MOy0EKyl3KcMaeYTJ7v+u5Q6UXkIDG8tyj0q3KIapFM43VUjGu1PkQeIP9idRo
aE7le+R5sX4IR8OFeUMqN929XclB+RbJI9VZhBdR7h4Qss29p0s55roKo3fB9Cri
N3EonGmzoNKXn9gJ5PLzsStq7Kg=
-----END CERTIFICATE-----
Generated at Mon Jun 30 12:33:43 2025 by rpki-client