Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58C2D0DE514711F0BDCE50EEDAE4EC9C.roa
File: 58C2D0DE514711F0BDCE50EEDAE4EC9C.roa (raw, json)
Hash identifier: 2dfKtlAYjHCKDTpVpQbtHLvpriFJCCzM4aPXIO9kVY0=
Subject key identifier: 38:63:DA:E2:B4:2E:71:02:53:4A:EC:BE:D1:AA:EC:A4:A2:B1:9A:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58C2D0DE514711F0BDCE50EEDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 22:05:33 +0000
ROA not before: Tue 24 Jun 2025 22:05:27 +0000
ROA not after: Wed 03 Sep 2025 22:05:27 +0000
asID: 63139
IP address blocks: 154.94.90.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.92.0/24 maxlen: 24
154.94.93.0/24 maxlen: 24
154.94.96.0/24 maxlen: 24
154.94.97.0/24 maxlen: 24
154.94.98.0/24 maxlen: 24
154.94.99.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100560 (0x188d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 22:05:27 2025 GMT
Not After : Sep 3 22:05:27 2025 GMT
Subject: CN=685b212d-f6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:62:7e:e1:e9:6f:5f:fd:cf:c0:04:e3:b3:
d5:51:76:6a:70:36:fb:b1:88:b0:e4:1a:d1:e2:96:
12:e3:7d:9b:4f:11:5f:4c:11:2e:45:22:a7:11:f2:
27:76:88:80:39:c3:b9:c0:83:5b:05:9f:a8:ce:0b:
1e:69:28:fd:08:f4:bb:22:7b:33:5d:72:2f:ea:bd:
99:77:34:bc:0a:47:20:b4:30:9d:ca:53:92:a9:98:
ab:9e:89:c9:e7:61:58:6c:cd:2e:6a:28:9d:77:6e:
a4:74:03:a1:b2:8c:9f:7e:86:c8:b0:38:07:75:78:
07:0a:3e:ce:cb:b1:0c:e9:30:81:76:92:73:cc:79:
72:48:ab:0a:80:00:fa:29:37:f2:8d:b7:4f:93:d2:
08:66:10:39:29:40:cd:5e:be:e9:b5:56:24:47:c4:
46:fb:95:da:da:96:14:35:f7:17:e9:67:48:d3:6d:
83:e4:31:b7:c4:2f:0b:32:a0:7c:2b:8c:40:1b:0f:
f4:ee:2b:d8:71:98:b2:f0:cb:ab:e6:47:83:04:0e:
65:dc:62:63:a5:4b:59:5e:00:b2:e0:0b:ab:38:9a:
6b:29:17:e9:53:7e:9e:3b:e0:e3:03:6f:f1:ff:50:
4e:89:d1:5f:45:df:4f:a5:3f:71:23:13:03:3d:e9:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:DA:E2:B4:2E:71:02:53:4A:EC:BE:D1:AA:EC:A4:A2:B1:9A:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58C2D0DE514711F0BDCE50EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.90.0-154.94.93.255
154.94.96.0-154.94.100.255
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:19:3f:b2:72:fa:aa:d2:bd:30:d9:77:9a:84:0d:a0:51:84:
bb:45:09:5f:18:01:32:39:fe:9e:2f:99:57:e8:f2:18:5e:31:
2b:38:4b:9a:f8:6e:2b:f8:13:2a:94:9f:22:97:e6:fe:4d:87:
03:63:11:54:d3:84:7c:52:24:2a:93:fe:a4:4d:a7:f9:eb:92:
82:71:6b:e0:59:f2:f1:7c:85:70:31:48:30:48:12:0f:22:ad:
b3:01:e8:07:bb:ed:4e:6b:2e:15:89:ac:3f:77:90:f6:1b:a0:
7e:0e:3a:db:be:96:fb:7f:79:66:f4:c9:da:1c:3b:7d:d1:25:
7e:33:69:f9:09:d1:ff:52:47:72:6a:9d:fd:e1:27:cf:f0:2a:
dc:cb:6b:61:e6:98:91:e4:b3:b2:db:1a:cb:8b:1e:66:fa:9a:
23:0d:ab:5d:9f:8f:b8:06:7c:ed:22:65:63:cd:a3:1f:ec:d7:
66:bd:31:7a:46:dc:44:85:af:26:35:c1:c2:7e:2a:52:75:ec:
84:fa:12:7f:1d:34:68:e0:39:78:c4:55:b8:29:f1:06:2a:6b:
7a:8a:e3:17:47:c8:c7:bd:6e:45:f6:8c:bb:84:99:a7:5c:61:
23:d4:1c:7a:c5:37:7b:77:54:52:3e:57:31:b0:0a:2f:7a:e9:
33:65:a9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:07:33 2025 by rpki-client