Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C9F8C28242911F096E509E0DAE4EC9C.roa
File: 6C9F8C28242911F096E509E0DAE4EC9C.roa (raw, json)
Hash identifier: zudpxPa+rPJE6eSik8Qn/jehpqT383XhM3kGZwp5Fs0=
Subject key identifier: 30:2E:A3:06:F2:11:95:AD:1C:09:FD:CB:4F:AF:10:39:BE:8A:C2:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C9F8C28242911F096E509E0DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:07:59 +0000
ROA not before: Mon 28 Apr 2025 12:07:54 +0000
ROA not after: Wed 04 Jun 2025 12:07:54 +0000
asID: 44559
IP address blocks: 154.209.136.0/24 maxlen: 24
154.209.137.0/24 maxlen: 24
154.209.138.0/24 maxlen: 24
154.209.139.0/24 maxlen: 24
154.209.140.0/24 maxlen: 24
154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97174 (0x17b96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:07:54 2025 GMT
Not After : Jun 4 12:07:54 2025 GMT
Subject: CN=680f6f9f-fd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:82:b1:d6:a1:7c:c8:d5:93:dd:8a:b4:9f:7f:
63:eb:ea:f2:16:6b:37:a2:04:e0:ae:f0:e3:c5:c5:
64:6e:18:6d:f2:23:85:8d:d7:ac:b5:c8:5e:f2:bc:
cf:d6:4f:fc:cd:d8:a5:ed:4e:05:11:ea:28:e3:2b:
1a:ca:cd:94:f2:dc:64:9c:b5:3f:f2:d8:0c:71:b7:
11:d9:66:31:97:48:61:76:2c:b2:23:4a:2a:16:0e:
be:b2:75:96:fa:a5:12:ec:02:ea:f4:e3:5f:91:0f:
fc:46:eb:f7:3a:f0:b7:53:52:f0:6b:61:e6:06:04:
d2:b0:6d:37:45:d5:ad:d3:d3:ef:e5:34:b2:57:bc:
92:12:d4:8f:eb:3a:72:fb:1e:9a:39:5f:8a:df:e0:
14:eb:69:87:74:76:98:4f:c9:27:8b:05:f0:ab:44:
74:36:c3:1f:33:c2:a7:ee:f8:6b:4a:78:33:2c:2d:
32:e6:da:e4:82:29:03:b8:20:40:9c:f0:25:43:0a:
29:c9:0b:f7:14:c9:5a:35:d1:1e:aa:1d:19:55:21:
69:56:cb:49:cb:00:47:80:9d:49:e2:70:fb:4c:ad:
86:64:24:32:a7:b5:8d:e6:7e:9e:cd:1a:24:ed:c1:
d9:89:71:87:07:18:27:ab:5b:c6:6b:88:2b:34:ed:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2E:A3:06:F2:11:95:AD:1C:09:FD:CB:4F:AF:10:39:BE:8A:C2:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C9F8C28242911F096E509E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.136.0-154.209.142.255
154.209.157.0-154.209.158.255
154.209.205.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:c6:3d:88:f4:13:f4:10:80:2a:2a:17:da:d7:8c:34:94:fd:
af:0d:4c:d1:e1:28:70:7c:9e:15:79:6f:ef:8f:b3:3d:c2:27:
26:e8:9b:4d:c0:83:fb:2c:4f:a7:45:09:a0:9c:77:60:ab:f5:
67:df:64:47:63:b5:3a:00:59:19:f0:a5:fe:41:48:0e:b8:df:
d3:eb:cc:87:26:19:c4:fb:26:58:d9:d2:b4:a5:34:0f:23:83:
08:52:32:3b:7b:5d:b2:70:96:8a:9b:9f:13:18:ef:bd:1e:3e:
8f:c6:f3:d3:90:8f:37:4c:a6:4c:a4:67:78:47:a4:ed:d9:8c:
98:8f:16:9a:a2:07:55:7a:58:68:40:85:c1:d0:97:23:ef:41:
01:25:34:e7:a8:b2:eb:e9:5d:cc:29:2b:68:fb:8e:0f:f5:75:
1e:4e:9f:42:25:e7:7a:37:35:4f:d0:09:2c:07:a5:b8:f3:bc:
97:12:0a:e8:88:a4:ed:09:b6:5b:da:e0:04:67:c8:a6:31:ca:
24:b9:58:83:1c:29:4d:b6:45:b9:db:b5:b8:9e:d3:cc:86:da:
cf:bf:d8:d9:49:22:8a:75:1a:c4:69:96:b3:8b:d4:99:f4:34:
2b:fc:77:06:51:6b:be:67:2c:8e:23:88:26:65:8a:da:d8:1e:
6d:6e:26:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:51:27 2025 by rpki-client