Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90EA9EA225B811F0A016B0D5DAE4EC9C.roa
File: 90EA9EA225B811F0A016B0D5DAE4EC9C.roa (raw, json)
Hash identifier: 7/Gr94Hx217TadyT3plUjdGTfDCDGeK69IVG6TlojE0=
Subject key identifier: 1B:04:AB:0F:B1:7E:68:46:C5:77:27:92:6C:3A:23:68:16:ED:8E:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90EA9EA225B811F0A016B0D5DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 11:45:09 +0000
ROA not before: Wed 30 Apr 2025 11:45:04 +0000
ROA not after: Wed 26 Apr 2028 11:45:04 +0000
asID: 17561
IP address blocks: 154.202.20.0/24 maxlen: 24
154.202.21.0/24 maxlen: 24
154.202.22.0/24 maxlen: 24
154.202.23.0/24 maxlen: 24
154.202.24.0/24 maxlen: 24
154.202.25.0/24 maxlen: 24
154.202.27.0/24 maxlen: 24
154.202.29.0/24 maxlen: 24
154.202.30.0/24 maxlen: 24
154.202.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97624 (0x17d58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 11:45:04 2025 GMT
Not After : Apr 26 11:45:04 2028 GMT
Subject: CN=68120d45-ce54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:97:e3:58:d1:5f:d7:cc:88:0c:bc:a7:bd:
fc:05:57:8a:41:7c:c7:20:8c:22:aa:2e:e2:c9:c0:
9a:e1:16:b6:9e:3f:95:70:88:3b:ed:e7:e5:de:57:
f0:f2:d4:ed:e0:84:a6:31:a0:a3:b0:99:c2:0c:4c:
8a:c9:93:0c:bb:ef:33:5e:6d:ba:ad:4c:0d:f6:82:
c2:56:6b:ff:3c:f9:1f:f9:d5:e9:66:eb:af:92:27:
d3:35:c1:a3:78:8d:98:55:c8:53:9d:9f:0e:3a:84:
93:a6:78:0b:df:15:a2:28:66:e5:83:c2:f1:8b:24:
0b:1d:40:69:da:c2:29:cb:5f:04:25:de:3f:d5:d7:
77:e0:1d:39:8c:e3:d3:55:b8:9b:73:88:be:27:d9:
78:cb:fd:33:b4:94:b4:05:ed:83:d6:2c:28:11:48:
d8:4a:01:f9:f8:4f:2f:ca:ca:c1:e5:ed:3c:18:05:
2f:7b:73:73:04:9a:6c:bf:6d:59:56:a6:4c:91:1f:
1f:d9:d4:9f:cb:bb:ee:f4:0b:70:0f:96:b0:ab:3a:
37:47:35:8a:6a:d6:07:25:dd:f5:26:02:bd:17:8e:
a5:11:57:ec:ff:d3:3a:8d:3c:3e:0f:8e:d5:f6:6b:
9c:c6:53:ea:8b:eb:c0:e4:f4:80:86:41:1f:9e:67:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:04:AB:0F:B1:7E:68:46:C5:77:27:92:6C:3A:23:68:16:ED:8E:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90EA9EA225B811F0A016B0D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.20.0-154.202.25.255
154.202.27.0/24
154.202.29.0-154.202.31.255
Signature Algorithm: sha256WithRSAEncryption
a2:94:5c:5c:8a:4e:83:7b:01:de:93:38:9a:ed:5e:b5:5d:87:
78:68:2d:c6:b5:f6:43:ec:fa:8b:1f:fd:55:a2:60:f0:64:1c:
c8:e2:2d:bd:68:41:cb:5e:da:98:be:2f:75:76:1e:f8:fd:31:
64:86:e1:9f:c1:e1:62:b6:52:65:89:f9:30:2a:ea:7e:d8:a0:
e4:0b:a0:50:9e:77:3c:0a:11:b2:62:a7:d7:81:29:66:16:fa:
1a:8a:c2:93:89:a5:9f:97:6e:2d:06:b5:74:5f:2d:2d:3f:9b:
8f:38:c2:86:73:b2:a1:6e:52:80:08:fa:f9:f3:7e:a2:61:cf:
8d:7f:2c:bd:0b:13:64:65:c2:d2:f0:4a:5d:d0:ae:51:23:94:
2e:48:1b:4f:da:78:4c:5e:76:e3:61:39:dd:03:b2:b5:ab:a8:
55:ae:c6:03:2d:f6:84:6f:0b:13:d3:b1:31:f8:8d:27:ff:48:
32:71:cc:0b:fc:02:f9:6f:4f:49:96:eb:41:35:07:7b:d1:53:
ff:f5:9c:e8:16:27:26:e6:5e:30:c8:0b:7f:79:99:73:67:3d:
f0:da:bb:31:97:f0:b5:7a:83:d2:b5:41:c7:7d:f2:2d:93:29:
e6:27:b6:eb:a8:f0:bf:a5:dc:08:25:d9:98:fe:51:88:a6:f0:
89:4a:aa:7e
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAX1YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDMwMTE0NTA0WhcNMjgwNDI2MTE0NTA0WjAYMRYw
FAYDVQQDEw02ODEyMGQ0NS1jZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1UGX41jRX9fMiAy8p738BVeKQXzHIIwiqi7iycCa4Ra2nj+VcIg77efl
3lfw8tTt4ISmMaCjsJnCDEyKyZMMu+8zXm26rUwN9oLCVmv/PPkf+dXpZuuvkifT
NcGjeI2YVchTnZ8OOoSTpngL3xWiKGblg8LxiyQLHUBp2sIpy18EJd4/1dd34B05
jOPTVbibc4i+J9l4y/0ztJS0Be2D1iwoEUjYSgH5+E8vysrB5e08GAUve3NzBJps
v21ZVqZMkR8f2dSfy7vu9AtwD5awqzo3RzWKatYHJd31JgK9F46lEVfs/9M6jTw+
D47V9mucxlPqi+vA5PSAhkEfnmfYQwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFBsE
qw+xfmhGxXcnkmw6I2gW7Y4oMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MEVBOUVBMjI1QjgxMUYwQTAxNkIwRDVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAKayhQDBAGayhgDBACa
yhswDAMEAJrKHQMEBZrKADANBgkqhkiG9w0BAQsFAAOCAQEAopRcXIpOg3sB3pM4
mu1etV2HeGgtxrX2Q+z6ix/9VaJg8GQcyOItvWhBy17amL4vdXYe+P0xZIbhn8Hh
YrZSZYn5MCrqftig5AugUJ53PAoRsmKn14EpZhb6GorCk4mln5duLQa1dF8tLT+b
jzjChnOyoW5SgAj6+fN+omHPjX8svQsTZGXC0vBKXdCuUSOULkgbT9p4TF5242E5
3QOytauoVa7GAy32hG8LE9OxMfiNJ/9IMnHMC/wC+W9PSZbrQTUHe9FT//Wc6BYn
JuZeMMgLf3mZc2c98Nq7MZfwtXqD0rVBx33yLZMp5ie266jwv6XcCCXZmP5RiKbw
iUqqfg==
-----END CERTIFICATE-----
Generated at Sun May 11 20:06:15 2025 by rpki-client