Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A42A066A268011F0A0422191DAE4EC9C.roa
File: A42A066A268011F0A0422191DAE4EC9C.roa (raw, json)
Hash identifier: 9flWZNqG9MSRM1QdBWNqv1UotKV6zChXHp6aSDroXmI=
Subject key identifier: 68:E2:A7:A5:3C:E0:2C:B5:72:6A:CA:9E:28:E9:AB:8C:49:A5:17:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A42A066A268011F0A0422191DAE4EC9C.roa
Signing time: Thu 01 May 2025 11:37:20 +0000
ROA not before: Thu 01 May 2025 11:37:15 +0000
ROA not after: Wed 26 Apr 2028 11:37:15 +0000
asID: 17561
IP address blocks: 154.83.193.0/24 maxlen: 24
154.83.194.0/24 maxlen: 24
154.83.195.0/24 maxlen: 24
154.83.196.0/24 maxlen: 24
154.83.197.0/24 maxlen: 24
154.83.198.0/24 maxlen: 24
154.83.199.0/24 maxlen: 24
154.83.202.0/24 maxlen: 24
154.83.204.0/24 maxlen: 24
154.83.205.0/24 maxlen: 24
154.83.206.0/24 maxlen: 24
154.83.213.0/24 maxlen: 24
154.83.215.0/24 maxlen: 24
154.83.216.0/24 maxlen: 24
154.83.217.0/24 maxlen: 24
154.83.218.0/24 maxlen: 24
154.83.219.0/24 maxlen: 24
154.83.220.0/24 maxlen: 24
154.83.221.0/24 maxlen: 24
154.83.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97774 (0x17dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:37:15 2025 GMT
Not After : Apr 26 11:37:15 2028 GMT
Subject: CN=68135cf0-65b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:52:19:b9:7d:b1:a5:7a:fa:d7:22:c3:ed:
f7:cc:4c:23:f1:cd:90:a1:7f:c7:1f:3b:f0:f6:79:
84:41:98:87:71:f0:8e:55:37:b7:45:d8:2d:fc:e0:
c2:4a:31:89:96:1c:d9:97:ed:67:6b:6a:22:7d:b0:
f8:03:70:30:2c:f5:e0:d4:8d:b8:5a:eb:fd:aa:a4:
88:f6:57:10:1b:b6:02:f9:bc:b2:b1:d0:7a:a3:37:
e8:80:1a:da:51:5a:79:43:01:db:7d:69:6b:d3:fa:
1e:e5:b9:10:5b:5e:3f:44:bd:52:51:09:cd:21:df:
13:9b:e7:c1:fa:6e:82:0b:ec:e3:0e:f5:e1:8b:b0:
15:e3:9f:e9:2c:87:07:ce:51:bd:42:ba:5a:d9:42:
97:b3:cf:25:15:95:bb:90:e0:05:63:f3:a1:4e:26:
94:09:9c:c0:ef:11:d7:ea:3f:a6:2a:66:66:b7:63:
fa:76:76:1d:fc:fe:e2:26:00:25:59:9f:b4:41:36:
37:2e:e4:6f:db:a6:53:45:af:e6:99:5b:66:f4:6b:
ab:c2:9e:47:d7:2d:c8:b6:dd:38:06:6e:08:34:51:
44:00:75:65:05:66:11:31:b0:8d:ee:a8:35:52:a1:
55:cb:5d:0a:bf:1d:13:48:13:41:a1:0d:a6:f2:c5:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E2:A7:A5:3C:E0:2C:B5:72:6A:CA:9E:28:E9:AB:8C:49:A5:17:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A42A066A268011F0A0422191DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.193.0-154.83.199.255
154.83.202.0/24
154.83.204.0-154.83.206.255
154.83.213.0/24
154.83.215.0-154.83.222.255
Signature Algorithm: sha256WithRSAEncryption
8f:0d:57:c9:30:d9:d5:fd:c6:cb:54:c9:13:1b:a2:29:02:01:
98:2d:47:6d:84:22:bd:63:37:e5:5d:6a:5f:8e:61:05:32:b2:
5d:bc:6a:71:86:d3:1c:02:a8:ac:f6:33:6c:72:90:4f:bf:cd:
5a:a5:d9:34:6f:77:e3:76:c8:1c:17:7f:d2:7b:ee:49:a1:a3:
fb:8a:93:1e:59:be:90:1b:27:b4:86:b1:a5:81:f7:6c:68:07:
8d:56:ad:b7:57:46:ba:69:07:e6:6a:21:a2:58:e5:df:d5:84:
90:62:42:83:e0:bf:e7:38:e3:5e:c4:f7:7a:60:0a:b7:b2:3d:
ad:28:85:a3:ec:cf:be:0d:d4:83:3e:c5:eb:5d:bf:cc:34:96:
7a:c7:91:d6:84:13:2e:04:9f:bc:65:4f:2c:58:8f:72:32:3f:
6e:99:69:28:6c:55:e7:27:6a:21:9f:75:21:85:8f:2b:c4:1c:
79:3e:78:4e:76:e1:de:70:f5:ed:4e:e2:64:ee:8b:c2:be:49:
e5:cc:f9:56:53:02:d0:84:39:a3:0c:28:c7:8d:63:16:0e:37:
1c:79:cb:1e:c2:8d:0f:f7:ce:9c:2b:28:2e:5b:a2:86:45:5a:
c3:59:d8:19:42:ea:6c:65:f5:6e:18:8a:25:3c:2d:a8:4c:ae:
85:d3:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:03:37 2025 by rpki-client