Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25DC6FCC297E11F080621698DAE4EC9C.roa
File: 25DC6FCC297E11F080621698DAE4EC9C.roa (raw, json)
Hash identifier: dkVLZ7W5sVVR+ltlBa5r0uf8UqvDcOzVYGeJyaoms/w=
Subject key identifier: 5C:38:48:F8:47:86:CE:4F:C3:57:AF:DB:F4:B5:0C:CD:AF:38:FA:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EDB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25DC6FCC297E11F080621698DAE4EC9C.roa
Signing time: Mon 05 May 2025 06:57:03 +0000
ROA not before: Mon 05 May 2025 06:56:58 +0000
ROA not after: Mon 19 May 2025 06:56:58 +0000
asID: 54801
IP address blocks: 154.90.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98011 (0x17edb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 06:56:58 2025 GMT
Not After : May 19 06:56:58 2025 GMT
Subject: CN=6818613f-f5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:67:30:e8:66:2f:46:2c:1c:a8:19:84:3d:
b0:43:3e:89:12:74:ad:c2:69:8f:39:ef:ed:ae:e9:
d2:5a:30:19:e9:66:f0:da:ec:34:1b:a7:4a:3a:ed:
4a:73:66:ea:e0:39:3c:30:34:f0:10:9d:39:d5:f2:
9a:7f:c2:0d:91:bb:b9:0a:4d:5a:b1:66:81:73:5d:
74:61:1e:f6:e2:f8:99:5f:12:8b:c2:fe:20:6f:7d:
11:50:da:05:b0:84:68:9f:4d:05:a3:02:a7:1c:d9:
62:79:36:1a:c3:db:85:81:92:73:20:da:70:22:8b:
38:6f:df:25:67:e7:e7:ae:09:c1:7b:13:b3:7b:dc:
88:af:d7:63:dd:30:e3:7c:ab:37:30:0a:79:4e:07:
de:8f:0a:a3:d2:37:f2:10:23:c3:a3:ed:8d:fe:db:
3e:a1:14:db:fc:a3:b7:e7:df:0e:97:c9:c6:2a:ba:
24:47:65:55:98:83:ba:ed:74:35:1f:62:73:07:6f:
76:5c:3f:84:6b:cd:af:97:84:cc:4e:fa:42:cd:5d:
ef:6c:9f:e7:a9:77:59:05:f2:cc:3a:b2:f0:4e:9e:
67:1b:bb:26:0b:cf:eb:f8:14:e9:21:78:34:d2:6a:
fa:1d:6c:f0:15:a9:97:19:76:76:f1:e4:24:96:52:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:38:48:F8:47:86:CE:4F:C3:57:AF:DB:F4:B5:0C:CD:AF:38:FA:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25DC6FCC297E11F080621698DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.28.0/22
Signature Algorithm: sha256WithRSAEncryption
51:57:05:7f:51:36:be:ff:fc:d2:d7:c8:4f:af:da:cc:5d:be:
29:02:c3:42:9c:6b:f7:70:44:c5:bc:5f:62:3b:45:eb:d2:b0:
67:6d:3d:38:02:64:d7:20:71:d2:a2:b4:30:81:2f:40:98:58:
86:6b:9a:3c:4e:49:4a:7b:03:7e:b7:11:01:2f:85:f8:0e:bd:
6e:54:aa:ce:cc:21:82:9c:25:18:3c:6c:63:9f:50:cb:d9:fc:
ec:47:6f:e8:4b:5d:05:94:86:e8:e2:08:93:ec:4d:76:83:a0:
d0:cc:23:6f:d1:cd:5a:c5:88:d9:7b:f9:b4:54:f3:dc:a6:cf:
51:5d:4f:55:db:cb:77:93:63:86:cc:17:b8:38:22:ee:24:49:
83:76:d7:09:b9:15:03:c7:83:65:37:b1:6f:a0:c7:77:e7:1c:
a7:c8:4e:1c:06:a8:df:65:72:da:8d:16:c7:d4:26:c5:71:92:
99:98:d5:d4:d8:31:9c:c8:6f:c8:6d:24:91:ae:96:4c:b4:4f:
37:54:43:d1:3e:f1:d0:20:4d:f3:32:3c:5a:2e:34:d8:82:5d:
cb:67:f0:80:50:b0:34:ff:a2:86:c0:61:d0:a5:4c:99:e8:67:
61:fd:75:75:c3:43:be:f7:47:d4:a8:2b:92:f6:6e:6d:1f:8a:
2d:46:fe:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAX7bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA1MDY1NjU4WhcNMjUwNTE5MDY1NjU4WjAYMRYw
FAYDVQQDEw02ODE4NjEzZi1mNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0K5nMOhmL0YsHKgZhD2wQz6JEnStwmmPOe/trunSWjAZ6Wbw2uw0G6dK
Ou1Kc2bq4Dk8MDTwEJ051fKaf8INkbu5Ck1asWaBc110YR724viZXxKLwv4gb30R
UNoFsIRon00FowKnHNlieTYaw9uFgZJzINpwIos4b98lZ+fnrgnBexOze9yIr9dj
3TDjfKs3MAp5Tgfejwqj0jfyECPDo+2N/ts+oRTb/KO3598Ol8nGKrokR2VVmIO6
7XQ1H2JzB292XD+Ea82vl4TMTvpCzV3vbJ/nqXdZBfLMOrLwTp5nG7smC8/r+BTp
IXg00mr6HWzwFamXGXZ28eQkllJDAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFw4
SPhHhs5Pw1ev2/S1DM2vOPqgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNURDNkZDQzI5N0UxMUYwODA2MjE2OThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlocMA0GCSqGSIb3DQEB
CwUAA4IBAQBRVwV/UTa+//zS18hPr9rMXb4pAsNCnGv3cETFvF9iO0Xr0rBnbT04
AmTXIHHSorQwgS9AmFiGa5o8TklKewN+txEBL4X4Dr1uVKrOzCGCnCUYPGxjn1DL
2fzsR2/oS10FlIbo4giT7E12g6DQzCNv0c1axYjZe/m0VPPcps9RXU9V28t3k2OG
zBe4OCLuJEmDdtcJuRUDx4NlN7FvoMd35xynyE4cBqjfZXLajRbH1CbFcZKZmNXU
2DGcyG/IbSSRrpZMtE83VEPRPvHQIE3zMjxaLjTYgl3LZ/CAULA0/6KGwGHQpUyZ
6Gdh/XV1w0O+90fUqCuS9m5tH4otRv6O
-----END CERTIFICATE-----
Generated at Thu May 15 23:47:54 2025 by rpki-client