Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CFE63BA248211F0A16FF0ACDAE4EC9C.roa
File: 7CFE63BA248211F0A16FF0ACDAE4EC9C.roa (raw, json)
Hash identifier: sGM0JfviZPYJ3vY0e7Fvr5DcyN4PUfABpjqHPWiHX+c=
Subject key identifier: CD:53:CE:83:9E:91:1C:5C:31:30:C0:D5:D0:17:BE:27:F5:3F:D2:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CFE63BA248211F0A16FF0ACDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 22:45:31 +0000
ROA not before: Mon 28 Apr 2025 22:45:26 +0000
ROA not after: Sun 15 Jun 2025 22:45:26 +0000
asID: 63139
IP address blocks: 154.203.160.0/24 maxlen: 24
154.203.161.0/24 maxlen: 24
154.203.184.0/24 maxlen: 24
154.203.185.0/24 maxlen: 24
154.203.186.0/24 maxlen: 24
154.203.187.0/24 maxlen: 24
154.203.188.0/24 maxlen: 24
154.203.189.0/24 maxlen: 24
154.203.190.0/24 maxlen: 24
154.203.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97423 (0x17c8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 22:45:26 2025 GMT
Not After : Jun 15 22:45:26 2025 GMT
Subject: CN=6810050b-2d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:47:63:f5:fc:26:1d:4e:6b:c9:ff:de:d7:22:
a7:53:a3:b3:60:c5:4d:a8:28:05:a9:7a:6c:a5:49:
bf:b7:a3:60:59:ec:86:15:4c:1b:24:ce:e9:ce:8a:
7a:b6:ea:69:51:71:0d:48:fb:10:e9:09:b1:9c:bb:
76:10:ad:50:e9:77:f0:0e:4e:c3:11:d3:0d:f5:3f:
7a:1b:81:84:5d:e9:3e:6c:01:65:f9:65:90:a5:94:
60:08:ef:e5:78:5e:77:64:54:73:9d:cd:75:b3:b7:
1c:96:85:79:94:31:e7:eb:1a:eb:e6:c8:e5:a1:80:
6f:53:8f:94:2d:19:c5:e1:ad:9b:7d:40:a3:3b:da:
46:3f:8d:0b:9f:23:c1:08:37:ee:9a:2a:bf:7b:5e:
09:4e:28:87:9a:fe:ac:f9:7a:78:1f:55:f9:ac:57:
a2:f4:d2:f3:01:75:40:02:9e:79:75:1b:c2:c1:96:
c3:05:a0:09:ea:0a:98:98:ba:3b:2f:17:82:b8:a2:
e7:42:ef:a5:27:d7:7f:60:d0:74:12:fe:95:5b:46:
8f:b8:5a:03:e0:27:81:ab:9b:0d:d1:eb:5e:c6:e1:
bf:fd:89:5e:6c:a9:ce:54:0c:ac:a2:e8:92:55:22:
5b:41:59:cd:ce:b0:23:55:87:b3:8f:48:2e:64:77:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:CE:83:9E:91:1C:5C:31:30:C0:D5:D0:17:BE:27:F5:3F:D2:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CFE63BA248211F0A16FF0ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.160.0/23
154.203.184.0/21
Signature Algorithm: sha256WithRSAEncryption
c2:53:01:1a:7f:09:a0:d6:4b:1b:a8:e3:78:cc:f7:9d:13:cc:
57:d8:7b:cf:36:93:22:b0:f9:9f:a6:01:b8:d7:45:04:4a:99:
cb:f3:cc:a5:ee:58:91:e3:67:25:c7:1b:08:e8:d1:0c:08:de:
51:b6:3d:42:4c:2f:01:dd:80:2c:4a:e9:91:da:55:40:3f:22:
3e:c2:99:90:49:e5:6c:e2:e1:9b:72:01:5e:6f:0e:7c:0a:41:
0c:3c:f9:24:e3:3c:6b:eb:66:63:ef:8e:d7:a7:9f:5e:52:54:
36:a3:6c:8c:bf:51:38:15:7e:fb:ec:2f:c4:c4:6c:69:94:88:
7f:53:cf:24:4f:ce:03:78:81:29:b6:bc:d8:5e:4b:6a:ae:8a:
3f:08:74:a6:62:e5:1b:9e:05:f5:14:60:33:85:1c:33:b4:e3:
53:b6:67:07:f6:77:02:0a:7e:8e:7a:b3:08:41:8d:32:49:e9:
1c:74:29:91:dd:7c:a9:86:8f:cf:b4:87:3c:cd:f5:69:a1:81:
3c:7a:8b:cf:f0:da:da:e9:00:c3:9c:6f:e4:7c:2b:68:94:e8:
01:b9:19:62:e8:be:1e:3f:cb:82:db:7b:24:83:c4:28:7e:be:
f4:35:af:82:7e:62:cb:b3:99:03:5a:d0:a0:31:39:f3:3a:8d:
ee:bc:29:be
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAXyPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MjI0NTI2WhcNMjUwNjE1MjI0NTI2WjAYMRYw
FAYDVQQDEw02ODEwMDUwYi0yZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9Edj9fwmHU5ryf/e1yKnU6OzYMVNqCgFqXpspUm/t6NgWeyGFUwbJM7p
zop6tuppUXENSPsQ6QmxnLt2EK1Q6XfwDk7DEdMN9T96G4GEXek+bAFl+WWQpZRg
CO/leF53ZFRznc11s7ccloV5lDHn6xrr5sjloYBvU4+ULRnF4a2bfUCjO9pGP40L
nyPBCDfumiq/e14JTiiHmv6s+Xp4H1X5rFei9NLzAXVAAp55dRvCwZbDBaAJ6gqY
mLo7LxeCuKLnQu+lJ9d/YNB0Ev6VW0aPuFoD4CeBq5sN0etexuG//YlebKnOVAys
ouiSVSJbQVnNzrAjVYezj0guZHeO0QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFM1T
zoOekRxcMTDA1dAXvif1P9JgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83Q0ZFNjNCQTI0ODIxMUYwQTE2RkYwQUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmsugAwQDmsu4MA0GCSqG
SIb3DQEBCwUAA4IBAQDCUwEafwmg1ksbqON4zPedE8xX2HvPNpMisPmfpgG410UE
SpnL88yl7liR42clxxsI6NEMCN5Rtj1CTC8B3YAsSumR2lVAPyI+wpmQSeVs4uGb
cgFebw58CkEMPPkk4zxr62Zj747Xp59eUlQ2o2yMv1E4FX777C/ExGxplIh/U88k
T84DeIEptrzYXktqroo/CHSmYuUbngX1FGAzhRwztONTtmcH9ncCCn6OerMIQY0y
SekcdCmR3Xypho/PtIc8zfVpoYE8eovP8Nra6QDDnG/kfCtolOgBuRli6L4eP8uC
23skg8Qofr70Na+CfmLLs5kDWtCgMTnzOo3uvCm+
-----END CERTIFICATE-----
Generated at Sat May 10 18:24:28 2025 by rpki-client