Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E87388C264F11F0A1E1D4CEDAE4EC9C.roa
File: 7E87388C264F11F0A1E1D4CEDAE4EC9C.roa (raw, json)
Hash identifier: M6lraIr8Xns3sdlTO727i8fNHcM3uQVDmRo1ymfQDgw=
Subject key identifier: 43:21:B6:4A:A7:7B:2D:07:06:6A:4D:1A:44:A2:6F:98:1C:1A:17:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E87388C264F11F0A1E1D4CEDAE4EC9C.roa
Signing time: Thu 01 May 2025 05:45:32 +0000
ROA not before: Thu 01 May 2025 05:45:27 +0000
ROA not after: Tue 28 Apr 2026 05:45:27 +0000
asID: 984
IP address blocks: 154.215.230.0/24 maxlen: 24
154.215.231.0/24 maxlen: 24
154.215.232.0/24 maxlen: 24
154.215.233.0/24 maxlen: 24
154.215.234.0/24 maxlen: 24
154.215.235.0/24 maxlen: 24
154.215.236.0/24 maxlen: 24
154.215.237.0/24 maxlen: 24
154.215.238.0/24 maxlen: 24
154.215.239.0/24 maxlen: 24
154.215.240.0/24 maxlen: 24
154.215.241.0/24 maxlen: 24
154.215.242.0/24 maxlen: 24
154.215.243.0/24 maxlen: 24
154.215.244.0/24 maxlen: 24
154.215.245.0/24 maxlen: 24
154.215.246.0/24 maxlen: 24
154.215.247.0/24 maxlen: 24
154.215.248.0/24 maxlen: 24
154.215.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97708 (0x17dac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 05:45:27 2025 GMT
Not After : Apr 28 05:45:27 2026 GMT
Subject: CN=68130a7c-8389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:f9:54:02:43:78:7b:2c:2e:36:4d:19:6d:
60:2f:7a:91:00:06:0f:fa:83:74:45:c7:c2:93:ed:
c3:98:ed:cc:e9:7a:ca:85:d8:b2:10:53:4f:1f:b6:
f8:bb:08:a3:9b:19:a6:0f:72:fe:0f:2f:48:7d:6a:
ad:cb:1b:f3:fa:08:1c:df:18:67:00:a4:34:48:66:
65:27:9c:05:ac:f9:29:6b:73:d3:e9:21:9c:6c:a6:
2c:c5:31:a2:97:41:e7:30:a6:a1:4b:92:c8:9f:75:
d8:70:70:7b:9e:ea:ab:af:42:d0:f9:eb:48:ec:86:
20:17:bf:dd:6c:75:21:64:18:61:7a:b7:37:36:45:
31:71:0b:87:9a:39:14:d0:e5:6e:ca:d5:1a:40:68:
3e:72:c1:27:43:e9:2a:2c:01:b6:72:83:70:ba:86:
a2:2d:05:d4:ed:bd:81:92:b5:f2:8f:41:1f:23:20:
f3:b4:df:90:4c:dc:1e:e9:f9:df:78:52:90:50:74:
5b:a4:ba:4d:d0:c4:5e:f1:b5:80:31:ce:2f:0f:2e:
a8:88:c1:1f:0a:a5:c2:bd:69:b4:61:cf:3b:36:0b:
66:7f:5a:06:e6:2b:ea:be:bf:2b:1f:d5:d8:7d:93:
fd:d2:9c:91:69:f6:93:50:1c:0d:13:d6:a6:1f:d9:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:21:B6:4A:A7:7B:2D:07:06:6A:4D:1A:44:A2:6F:98:1C:1A:17:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E87388C264F11F0A1E1D4CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.230.0-154.215.249.255
Signature Algorithm: sha256WithRSAEncryption
99:a6:56:e2:ca:35:b8:df:78:50:fa:af:e2:55:1c:e9:f0:4e:
e5:9c:c9:f1:2a:07:17:a3:3d:3a:08:ae:91:5c:7f:bf:33:97:
e8:08:36:cf:f9:73:ff:ac:87:52:88:57:40:14:4c:98:96:2a:
53:81:2f:51:76:3c:f7:6a:7b:e3:4d:38:a7:4c:af:2c:78:77:
88:37:7b:45:99:6d:37:28:a7:70:f2:5b:56:0c:21:4c:98:2f:
bc:71:0e:fd:51:4d:db:89:01:d7:f5:9d:7e:e3:b7:13:65:e3:
c8:02:6d:b1:43:4d:f4:9a:3e:02:ce:93:02:85:49:05:41:22:
02:ca:57:88:d2:6c:10:35:f9:91:9f:a0:6c:83:6a:bb:93:b0:
e2:87:0f:0d:66:20:73:0e:2d:44:17:32:7f:de:2e:ef:11:ff:
7e:07:38:c3:61:6d:d7:7e:46:e9:91:24:cf:3c:01:86:e3:f9:
31:8c:1a:8f:5f:81:b1:71:3c:cc:ba:83:58:26:43:f7:c3:59:
3f:1e:aa:ce:9d:58:7c:33:f9:80:64:4c:99:d3:28:e5:15:4a:
bc:ee:c3:23:df:e7:46:d7:84:fd:f2:13:a6:99:49:27:86:e7:
66:71:09:15:8f:71:03:2c:e2:f7:eb:4d:98:23:a0:17:a9:ee:
31:90:bf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:20:32 2025 by rpki-client