Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF4E68A2F2611F08E2C49EADAE4EC9C.roa
File: BBF4E68A2F2611F08E2C49EADAE4EC9C.roa (raw, json)
Hash identifier: XH70ChzFSwyg8VLNn9PWUSYz6yn5MXquCl4jGeH3Kak=
Subject key identifier: 4D:A9:55:BF:28:84:DB:7F:04:40:28:62:12:B1:09:CB:F9:34:2C:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FF9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF4E68A2F2611F08E2C49EADAE4EC9C.roa
Signing time: Mon 12 May 2025 11:46:26 +0000
ROA not before: Mon 12 May 2025 11:46:21 +0000
ROA not after: Tue 20 May 2025 11:46:21 +0000
asID: 9009
IP address blocks: 154.218.195.0/24 maxlen: 24
154.218.202.0/24 maxlen: 24
154.218.223.0/24 maxlen: 24
154.218.230.0/24 maxlen: 24
154.218.234.0/24 maxlen: 24
154.218.235.0/24 maxlen: 24
154.218.241.0/24 maxlen: 24
154.218.245.0/24 maxlen: 24
154.218.250.0/24 maxlen: 24
154.218.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98297 (0x17ff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 11:46:21 2025 GMT
Not After : May 20 11:46:21 2025 GMT
Subject: CN=6821df92-27f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:dd:c9:9c:89:73:08:35:11:3d:73:54:41:
4a:d9:e1:74:43:13:12:84:8f:76:f8:bd:ad:78:84:
cf:84:1d:45:03:bc:b9:46:26:b9:ec:74:04:a3:1c:
2b:27:41:33:99:8b:00:6f:37:1b:80:1a:2b:65:bf:
90:63:b8:8f:f5:b3:ad:52:e7:a3:fe:7e:8c:f2:f7:
d8:d4:e9:66:ed:36:42:81:cf:0e:4b:6d:3a:e3:70:
5e:01:2b:82:42:fd:67:76:d4:8a:2a:7e:8d:7d:78:
49:99:2b:55:62:f4:0e:bc:39:4a:17:a8:86:7f:f6:
7e:48:f5:58:86:b3:34:20:28:98:ca:cd:04:8c:de:
94:d7:96:34:b5:30:60:91:33:b9:9a:cf:64:7d:b8:
6b:08:2f:39:38:34:b5:af:1c:1e:a6:c6:65:8b:c1:
82:c8:17:ff:78:fc:c0:2e:35:11:42:ac:6d:61:c2:
81:a8:a7:d2:f4:27:a8:18:17:af:7b:6b:a8:25:7f:
43:84:f1:88:8d:5d:e6:e8:df:f3:1c:1b:81:c3:d5:
c7:88:2c:b0:78:d2:75:68:fd:cc:9a:cc:93:cf:fe:
0c:d8:00:60:55:6e:99:f0:31:d6:a3:a4:c5:aa:50:
f1:17:d6:03:3c:ed:46:24:7b:38:b1:c6:85:41:07:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A9:55:BF:28:84:DB:7F:04:40:28:62:12:B1:09:CB:F9:34:2C:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF4E68A2F2611F08E2C49EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.195.0/24
154.218.202.0/24
154.218.223.0/24
154.218.230.0/24
154.218.234.0/23
154.218.241.0/24
154.218.245.0/24
154.218.250.0/24
154.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:35:79:54:43:27:4b:c1:b5:b7:ca:e5:67:c1:ef:64:24:c6:
02:57:c7:83:6b:20:55:90:5d:49:2c:ff:1e:2c:0c:7b:00:20:
2d:82:3b:ec:a4:36:26:44:ef:af:a5:b3:98:9c:56:62:13:72:
81:ec:6f:12:cc:42:b7:8d:a8:e4:0f:71:cb:34:70:11:6c:74:
51:b8:14:4a:61:44:a4:c7:a9:c2:7b:04:77:5d:f8:d8:8a:1b:
bb:04:5b:3c:97:c5:1c:50:f8:0b:1f:ee:bc:94:af:03:0e:16:
c2:69:db:41:80:ff:a5:33:d4:ee:67:8f:be:99:d9:75:01:b2:
dc:29:c0:9c:6d:eb:4e:2c:50:db:f0:61:e7:6e:68:79:92:ca:
dd:95:ee:f9:fa:47:2b:51:1b:da:ae:58:90:67:e3:cc:b0:2d:
8f:60:54:b1:24:1b:b6:17:91:8a:cf:71:2f:15:92:2f:8e:09:
d9:67:42:78:87:67:e8:d4:97:1d:d5:74:5d:20:d9:f6:c5:e0:
37:86:46:a4:e8:1c:9b:a9:6d:15:85:c3:26:c2:1f:22:e1:c1:
fc:7e:09:e4:49:4f:8b:ab:5c:92:57:81:48:1d:e6:74:49:df:
bd:86:c1:76:df:69:6f:7d:3f:aa:61:68:15:49:04:59:b4:ed:
2c:ab:e5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:54:41 2025 by rpki-client