Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF39554574411F0B8B474E6DAE4EC9C.roa
File: 4EF39554574411F0B8B474E6DAE4EC9C.roa (raw, json)
Hash identifier: 9Y6kyItMJ940WsezCsURya+aLCkfhPdcSa6vuQpUZBs=
Subject key identifier: 00:4A:00:8B:BD:AC:9C:59:38:77:4F:5B:62:10:B7:80:8F:B8:20:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF39554574411F0B8B474E6DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 12:58:55 +0000
ROA not before: Wed 02 Jul 2025 12:58:50 +0000
ROA not after: Sun 24 Aug 2025 12:58:50 +0000
asID: 139923
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 10:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100800 (0x189c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 12:58:50 2025 GMT
Not After : Aug 24 12:58:50 2025 GMT
Subject: CN=68652d0e-c9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:d5:24:96:28:96:c5:8f:df:28:9d:19:89:
3d:74:3f:f5:e1:99:e2:6e:cd:aa:30:02:c5:d1:51:
83:43:6d:7f:99:50:c0:5d:f3:f7:89:fe:78:fd:81:
01:02:51:43:b6:9d:18:47:41:78:5d:39:7a:51:5b:
78:de:f7:60:da:f4:bc:06:b6:e0:84:d7:5e:44:4a:
a4:c6:a8:c0:fe:d9:1b:e3:31:20:68:3f:e4:0f:fe:
50:32:0a:09:b4:08:0f:5e:a2:a7:d4:ff:5b:a0:29:
6d:c3:a4:4b:7f:b1:7b:fe:54:0c:7c:60:98:8f:49:
8f:01:96:d2:12:71:08:d7:b1:3e:ce:66:24:47:0b:
27:fd:72:f0:37:45:c1:78:33:db:78:78:29:5f:41:
51:73:4b:55:26:91:0f:3c:af:1b:d2:f9:c2:4a:5d:
64:3e:4a:27:9d:2b:35:a9:3f:d0:16:1d:62:bf:91:
13:d3:8c:12:7e:70:4a:70:fa:37:1e:df:b2:09:8a:
20:ff:eb:be:d2:03:f3:93:61:59:50:6d:c9:71:8d:
92:b8:41:12:1c:b7:65:6f:2f:d3:44:50:be:97:6a:
b1:97:89:0e:4c:03:06:6c:5e:7a:c9:7e:63:3d:e5:
77:87:21:a5:30:8a:5b:12:d3:18:45:e2:c2:2a:75:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4A:00:8B:BD:AC:9C:59:38:77:4F:5B:62:10:B7:80:8F:B8:20:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF39554574411F0B8B474E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:43:16:c2:3f:cf:c5:07:f2:38:90:8b:02:d6:ec:64:12:7c:
0e:dc:a0:a4:17:43:0c:07:55:e1:ec:e3:85:fb:01:9c:4b:ae:
84:44:0f:c7:a9:d2:18:fd:48:e6:05:72:75:c2:9e:a2:1c:0c:
35:8f:2b:25:0a:dd:b5:73:c8:5e:0e:68:c7:83:98:b3:01:48:
1e:5f:a2:1c:d8:d0:62:5f:0d:10:02:e8:7f:8c:c2:70:df:8b:
43:4d:70:77:ef:2d:91:06:81:ef:9d:f8:17:25:02:09:6e:2a:
43:b4:de:9e:f7:d6:94:72:fb:be:a9:d2:88:a9:6a:7c:c5:e9:
72:42:69:78:30:d1:e7:24:0f:72:32:40:04:b7:ea:84:cd:0f:
f9:e5:5a:3b:19:ec:59:88:a5:26:a1:90:d7:e8:13:3d:79:90:
f8:7f:3f:81:ec:0d:25:34:84:88:43:0b:95:af:4c:f7:b8:57:
74:ce:b1:78:7a:04:43:43:1c:42:3e:b6:33:ad:42:87:3a:82:
47:b7:66:e0:a1:1b:02:ee:95:9c:af:9e:18:52:d2:ad:e3:54:
d6:30:d3:3e:5c:60:89:7e:aa:9e:02:6b:ad:ae:a6:c4:f0:8e:
62:0a:44:7e:0c:f4:37:6c:9a:1c:98:de:af:a2:90:50:b8:7b:
1d:fa:0e:6b
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAYnAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzAyMTI1ODUwWhcNMjUwODI0MTI1ODUwWjAYMRYw
FAYDVQQDEw02ODY1MmQwZS1jOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvH/VJJYolsWP3yidGYk9dD/14Znibs2qMALF0VGDQ21/mVDAXfP3if54
/YEBAlFDtp0YR0F4XTl6UVt43vdg2vS8BrbghNdeREqkxqjA/tkb4zEgaD/kD/5Q
MgoJtAgPXqKn1P9boCltw6RLf7F7/lQMfGCYj0mPAZbSEnEI17E+zmYkRwsn/XLw
N0XBeDPbeHgpX0FRc0tVJpEPPK8b0vnCSl1kPkonnSs1qT/QFh1iv5ET04wSfnBK
cPo3Ht+yCYog/+u+0gPzk2FZUG3JcY2SuEESHLdlby/TRFC+l2qxl4kOTAMGbF56
yX5jPeV3hyGlMIpbEtMYReLCKnXFkQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFABK
AIu9rJxZOHdPW2IQt4CPuCAWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RUYzOTU1NDU3NDQxMUYwQjhCNDc0RTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACaWZcDBAGaWZgDBACa
WZ0wDQYJKoZIhvcNAQELBQADggEBAC5DFsI/z8UH8jiQiwLW7GQSfA7coKQXQwwH
VeHs44X7AZxLroRED8ep0hj9SOYFcnXCnqIcDDWPKyUK3bVzyF4OaMeDmLMBSB5f
ohzY0GJfDRAC6H+MwnDfi0NNcHfvLZEGge+d+BclAgluKkO03p731pRy+76p0oip
anzF6XJCaXgw0eckD3IyQAS36oTND/nlWjsZ7FmIpSahkNfoEz15kPh/P4HsDSU0
hIhDC5WvTPe4V3TOsXh6BENDHEI+tjOtQoc6gke3ZuChGwLulZyvnhhS0q3jVNYw
0z5cYIl+qp4Ca62upsTwjmIKRH4M9DdsmhyY3q+ikFC4ex36Dms=
-----END CERTIFICATE-----
Generated at Fri Jul 4 13:37:34 2025 by rpki-client