Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD271AE382F11F094B57C9ADAE4EC9C.roa
File: 9FD271AE382F11F094B57C9ADAE4EC9C.roa (raw, json)
Hash identifier: hh+raiYUKmeFQaIjcJ8Ezi2Jmc7+dAuug+lhoA/F4sA=
Subject key identifier: 1F:79:9D:91:F0:18:B7:14:51:C6:A0:51:7E:57:EB:CF:96:97:A5:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01827D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD271AE382F11F094B57C9ADAE4EC9C.roa
Signing time: Fri 23 May 2025 23:42:45 +0000
ROA not before: Fri 23 May 2025 23:42:40 +0000
ROA not after: Fri 26 Feb 2027 23:42:40 +0000
asID: 140951
IP address blocks: 154.193.186.0/23 maxlen: 24
154.196.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98941 (0x1827d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 23:42:40 2025 GMT
Not After : Feb 26 23:42:40 2027 GMT
Subject: CN=683107f5-5454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:de:df:12:a1:79:1f:96:0b:b3:c6:3e:0d:
04:a5:bc:92:c4:48:a8:a4:22:43:24:42:3f:a3:90:
1a:bb:cf:ee:cc:3c:d9:0d:44:9b:62:75:f5:35:bd:
cc:94:cf:e3:ef:ef:13:1c:9e:99:5e:19:83:a0:ab:
2c:6c:50:3b:ab:d5:13:56:eb:97:62:dc:7b:fd:86:
30:63:b0:f5:42:02:a5:e1:5e:96:c8:e7:71:92:1d:
58:a0:3b:9f:63:9d:f3:bc:eb:3a:19:05:cb:ae:ae:
f9:d0:33:e5:65:9d:15:db:0b:2c:ce:06:33:4e:f8:
94:80:fa:e7:3e:12:62:93:05:4b:59:3b:55:1f:34:
31:53:df:38:76:7d:7a:e4:80:51:de:b1:1f:ea:e6:
71:d5:9f:63:67:7b:f6:64:77:0f:bc:4f:0e:87:e7:
d3:a2:30:7a:95:ab:42:20:9d:fe:c9:cb:76:7b:d5:
63:49:9f:ac:6d:67:e3:29:64:46:18:6c:7f:ec:85:
77:d3:b3:66:4c:eb:d6:b6:90:b3:8e:81:9c:cd:93:
e9:7a:ab:46:51:72:23:a7:a7:c9:b3:53:76:2f:38:
be:82:0f:3f:60:4b:40:66:28:08:a3:35:1c:0e:d2:
e9:a2:03:7a:5c:62:9b:6d:29:4c:33:03:95:c8:8f:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:79:9D:91:F0:18:B7:14:51:C6:A0:51:7E:57:EB:CF:96:97:A5:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD271AE382F11F094B57C9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.186.0/23
154.196.252.0/23
Signature Algorithm: sha256WithRSAEncryption
14:68:97:9f:8b:79:e7:9e:be:4d:20:67:82:a6:84:8b:2e:6f:
f2:6b:d4:b7:94:16:96:a1:77:60:7c:ee:0e:16:92:1f:ef:5b:
f9:b7:3e:1c:17:53:93:61:25:49:ff:ec:c7:8b:c9:66:8c:38:
45:60:ba:b7:3c:75:59:3a:6a:56:12:c6:07:60:42:1c:c3:6d:
d7:04:46:0d:e8:e4:00:09:00:58:8c:c1:1a:8b:06:a7:a2:c8:
94:15:78:a7:2a:e9:a2:2b:51:d5:76:53:8f:4f:d6:ae:9a:f6:
d8:40:c6:7f:a8:90:b7:9e:50:b2:d3:fb:c2:ff:43:8f:5a:7a:
69:55:e0:71:18:78:99:45:9d:c4:d1:6b:bc:5e:34:62:4c:a7:
d4:8e:1f:01:65:d7:63:2b:bf:7d:fe:8e:cd:0b:c4:f6:8d:b7:
cb:f7:e3:28:ac:c7:69:b8:62:fd:d0:72:ec:76:fe:e3:35:fc:
e1:97:0f:36:26:81:22:06:7c:f4:95:8f:b3:2c:86:5c:2b:b7:
72:3e:1b:05:68:7c:d7:07:4f:73:08:56:54:5b:bd:8d:fc:6b:
60:76:78:fd:97:3d:ca:8e:21:08:22:99:07:f2:d1:8a:b1:32:
d5:94:f6:6b:89:36:2d:41:8a:61:4d:47:75:31:fa:30:86:00:
6c:13:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:24:09 2025 by rpki-client