Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0C43D7825CC11F0A02B8BD8DAE4EC9C.roa
File: B0C43D7825CC11F0A02B8BD8DAE4EC9C.roa (raw, json)
Hash identifier: W3wPuw2/t+mgX+OCd+QoZ7wSOWJwdtdPPCIhfQ0svTo=
Subject key identifier: D5:8E:9E:E8:F0:36:4C:A8:72:56:28:B9:87:2C:E2:F7:E9:72:23:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0C43D7825CC11F0A02B8BD8DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 14:09:12 +0000
ROA not before: Wed 30 Apr 2025 14:09:07 +0000
ROA not after: Tue 28 Apr 2026 14:09:07 +0000
asID: 984
IP address blocks: 154.80.212.0/24 maxlen: 24
154.80.213.0/24 maxlen: 24
154.80.214.0/24 maxlen: 24
154.80.215.0/24 maxlen: 24
154.80.216.0/24 maxlen: 24
154.80.217.0/24 maxlen: 24
154.80.218.0/24 maxlen: 24
154.80.219.0/24 maxlen: 24
154.80.220.0/24 maxlen: 24
154.80.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97673 (0x17d89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:09:07 2025 GMT
Not After : Apr 28 14:09:07 2026 GMT
Subject: CN=68122f08-6a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:c2:43:56:d0:0a:06:b2:80:48:cd:d2:0d:
93:54:b8:33:31:97:06:91:9e:f5:36:43:0e:24:b0:
f0:0e:d8:47:bf:bb:70:00:0b:21:91:72:9d:24:05:
ad:c1:cf:07:2a:35:a5:7e:a3:08:73:c4:bf:aa:82:
b8:0e:21:60:5e:d3:12:16:39:ed:a7:7f:d4:0f:0b:
ed:ca:41:f7:31:01:64:f4:55:7a:51:94:c1:e7:22:
0c:f5:91:d1:f5:8f:c2:94:5f:ee:eb:da:dd:1c:d8:
92:f5:de:ff:ba:79:6b:16:60:be:3f:fd:37:83:56:
17:77:96:01:64:b0:0c:54:42:65:83:19:71:36:96:
e0:fd:33:19:2d:b6:2c:34:c0:ae:6c:6a:a3:76:29:
00:9b:97:fb:94:f1:f9:01:26:f2:7c:f4:ae:e6:1d:
50:45:7e:8b:6c:87:2d:66:c9:b2:1e:a5:e8:8a:e7:
29:92:2e:50:ef:9c:df:74:d7:dd:be:b1:f1:41:09:
c7:31:76:e1:75:0c:0b:69:a3:75:6b:05:8d:e9:e0:
80:f0:1f:a6:ff:e8:bc:e2:90:cf:76:01:50:23:6a:
6a:de:53:21:67:74:1b:0a:a1:93:fa:20:ce:62:7e:
77:8e:75:51:31:43:ed:21:dc:9a:dc:81:2a:2b:df:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:9E:E8:F0:36:4C:A8:72:56:28:B9:87:2C:E2:F7:E9:72:23:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0C43D7825CC11F0A02B8BD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.212.0-154.80.221.255
Signature Algorithm: sha256WithRSAEncryption
27:d0:1a:84:c1:12:b3:11:29:ad:c8:47:34:bf:f7:41:a2:c7:
0c:6e:66:df:ee:06:6a:f9:27:ea:f5:bd:11:8a:38:bb:d9:c8:
7f:5e:8f:37:7c:c4:03:bb:bc:77:9b:a2:07:b6:22:c7:a4:b3:
30:e7:02:d7:db:b7:23:6f:03:c1:8f:8b:8b:cc:b2:da:af:30:
e7:2d:60:62:8d:41:ac:e9:f3:be:8c:53:6d:c3:ba:9c:a5:d9:
04:55:19:ab:eb:c0:b4:f6:1d:4f:5b:bc:7f:d5:07:98:67:8f:
ed:cc:35:7b:bc:2f:8d:ee:a5:bb:cf:0f:eb:51:9d:2c:d2:77:
90:d7:f8:d1:8d:be:84:03:cd:8d:ac:3c:fe:c1:07:2e:a4:cb:
da:9f:b7:34:b4:92:d9:c0:b7:b8:4e:31:34:39:81:56:5a:6e:
b8:27:7b:4b:be:18:f0:3f:d1:02:d4:17:44:34:d5:04:71:b0:
4d:87:cf:23:f8:d5:76:61:45:7d:19:1b:4c:f8:82:c3:49:38:
71:a2:86:82:df:2a:29:00:d3:f1:f9:89:b7:0f:26:7a:57:7e:
dd:cf:3d:b9:cb:1b:0a:b8:83:66:32:11:99:b0:55:c0:a7:93:
ac:08:f4:19:ec:8d:c3:5b:ea:d7:16:44:58:d0:69:18:07:1c:
e4:00:d5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:26:24 2025 by rpki-client