Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FE2FD4C50FF11F0B52900A3DAE4EC9C.roa
File: 4FE2FD4C50FF11F0B52900A3DAE4EC9C.roa (raw, json)
Hash identifier: kmnshM22pwU9nSHY1g7dQPwwP0w44JK5a4YVsNthwxI=
Subject key identifier: A5:66:0A:90:EF:90:07:C3:C2:83:B0:7A:B8:07:38:48:10:A7:1A:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018858
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FE2FD4C50FF11F0B52900A3DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:29:54 +0000
ROA not before: Tue 24 Jun 2025 13:29:49 +0000
ROA not after: Tue 05 Aug 2025 13:29:49 +0000
asID: 49505
IP address blocks: 154.209.208.0/24 maxlen: 24
154.209.209.0/24 maxlen: 24
154.209.210.0/24 maxlen: 24
154.209.211.0/24 maxlen: 24
154.209.212.0/24 maxlen: 24
154.209.213.0/24 maxlen: 24
154.209.214.0/24 maxlen: 24
154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100440 (0x18858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 13:29:49 2025 GMT
Not After : Aug 5 13:29:49 2025 GMT
Subject: CN=685aa852-801d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:14:36:fa:c0:f3:06:a1:b6:f3:61:33:56:
e9:ee:51:b4:63:18:08:9c:0a:94:b3:d7:d0:28:b4:
9e:d4:1d:2c:ea:6c:90:e9:5d:9b:19:85:99:6e:30:
67:39:0f:22:0d:ba:87:29:a0:cc:7b:09:b0:29:53:
69:27:16:39:e8:57:42:3b:18:e0:88:96:0c:cf:72:
e4:77:b5:69:1c:bb:e0:62:97:55:b1:b9:e8:38:31:
11:8d:6d:4e:96:a0:21:ce:30:0f:bc:6b:18:ae:94:
01:0e:e7:52:11:c7:c4:b5:b5:f3:fb:e0:c6:85:5d:
ce:12:af:02:83:af:30:05:e4:ff:d1:3f:2f:f9:9e:
56:a6:81:6b:85:40:35:e4:2a:aa:98:5a:f2:cd:86:
51:95:8c:c1:c8:2a:10:18:50:a9:5e:ee:71:4b:ac:
f9:a8:ef:68:95:5f:ea:de:8b:86:13:2b:b0:c6:df:
31:e7:a4:5f:ff:2f:e2:41:3d:33:39:ac:22:10:f5:
9f:7c:16:a0:31:6c:39:55:97:46:8d:4d:9f:89:ba:
a3:16:17:06:4e:6a:58:9c:b0:e8:58:ae:d4:4b:48:
d6:71:30:19:4e:32:a5:d2:6c:f3:8c:8b:b7:88:ed:
c4:70:93:fa:b4:c7:e4:f9:92:2b:ea:16:ab:e1:7f:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:66:0A:90:EF:90:07:C3:C2:83:B0:7A:B8:07:38:48:10:A7:1A:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FE2FD4C50FF11F0B52900A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.208.0-154.209.214.255
154.209.221.0-154.209.223.255
Signature Algorithm: sha256WithRSAEncryption
5b:0c:da:6f:e0:db:30:f4:bc:96:d6:2a:3a:32:df:bc:ad:74:
8f:30:5b:94:d5:f9:d6:74:b1:d8:86:3e:1b:1d:9a:f4:47:69:
df:1e:ec:32:f6:ff:28:44:53:45:ea:09:49:0a:32:42:ba:a4:
26:0c:52:7b:72:6d:44:0d:82:74:c0:ad:66:f8:0b:1f:38:53:
c9:94:0f:09:a8:68:8a:ab:9b:6a:ab:0f:0c:d1:fb:03:a0:0d:
d2:cf:f0:d2:d5:ba:d1:9f:d1:df:6d:8a:62:7c:94:0d:05:ef:
13:41:e0:05:4b:2b:19:c4:8e:2f:52:2a:0a:b1:99:4d:fa:f5:
fe:d0:2c:0f:bc:82:8f:ae:f5:57:fe:80:70:93:56:82:72:3e:
03:5d:18:3c:10:80:8d:bb:d3:03:0d:6b:e4:6b:2f:5f:9d:c6:
bf:c8:39:8f:4d:1b:15:aa:86:40:71:ad:69:5e:b1:60:21:73:
14:6f:a8:c2:2f:07:09:d6:05:48:04:84:f9:48:62:60:bc:9d:
c3:a6:c9:c5:7a:fc:12:d5:3d:47:80:c7:41:7d:c7:62:5c:f7:
bb:d8:f0:63:2e:69:52:a9:78:c1:49:47:2b:31:27:af:8a:db:
a2:b5:ed:c5:71:95:06:74:5b:a2:af:cb:c7:66:a4:e4:74:5b:
7d:de:69:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 30 09:44:53 2025 by rpki-client