Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC2E219626A411F0AB7C1E7EDAE4EC9C.roa
File: BC2E219626A411F0AB7C1E7EDAE4EC9C.roa (raw, json)
Hash identifier: rOm8WfPaI8VREODfO+GpJSRKBhExD2tX946YhuM9UKA=
Subject key identifier: C0:78:80:C8:75:BD:CE:F0:B9:F7:D1:72:04:29:C9:F3:69:3F:35:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC2E219626A411F0AB7C1E7EDAE4EC9C.roa
Signing time: Thu 01 May 2025 15:55:43 +0000
ROA not before: Thu 01 May 2025 15:55:37 +0000
ROA not after: Mon 01 May 2028 15:55:37 +0000
asID: 17561
IP address blocks: 154.208.210.0/24 maxlen: 24
154.208.211.0/24 maxlen: 24
154.208.212.0/24 maxlen: 24
154.208.213.0/24 maxlen: 24
154.208.214.0/24 maxlen: 24
154.208.215.0/24 maxlen: 24
154.208.216.0/24 maxlen: 24
154.208.217.0/24 maxlen: 24
154.208.218.0/24 maxlen: 24
154.208.219.0/24 maxlen: 24
154.208.220.0/24 maxlen: 24
154.208.221.0/24 maxlen: 24
154.208.222.0/24 maxlen: 24
154.208.223.0/24 maxlen: 24
154.208.224.0/24 maxlen: 24
154.208.225.0/24 maxlen: 24
154.208.226.0/24 maxlen: 24
154.208.227.0/24 maxlen: 24
154.208.228.0/24 maxlen: 24
154.208.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97840 (0x17e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 15:55:37 2025 GMT
Not After : May 1 15:55:37 2028 GMT
Subject: CN=6813997e-bd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:0c:b5:d7:0f:aa:0b:f1:8a:c0:d1:4f:ec:
f1:d7:c7:d7:7e:16:65:2b:97:ad:56:36:db:c2:5c:
61:4c:d5:25:60:3d:f4:8d:c6:4a:18:e8:cd:b5:a7:
e7:48:ba:d2:d4:00:3e:21:04:d5:34:19:9b:a6:5b:
28:58:84:d7:88:af:4c:d9:34:31:ee:26:29:07:70:
5f:08:82:1a:1f:d0:ba:cf:9f:fc:81:0c:46:f6:44:
f8:af:aa:32:a9:6e:b2:d7:42:a4:c7:36:d7:4a:d4:
ef:d5:28:57:12:47:fc:bf:04:d8:cc:29:5f:b9:58:
0e:18:dd:03:fc:bc:73:ef:bf:c6:04:3f:5e:4d:2d:
6b:bc:ae:1d:bd:91:15:10:83:d6:45:71:30:45:58:
e1:88:23:6f:c8:81:dd:2b:94:8b:4a:73:b1:1e:ca:
f4:fd:f4:86:ff:e7:27:4c:0c:b9:1e:71:f6:19:35:
26:b4:57:73:e6:55:e7:91:c9:b8:c9:97:bd:22:fa:
98:0c:c2:2a:b2:2a:d7:aa:1b:e3:16:4b:ca:a7:7e:
de:c7:93:92:89:49:06:60:d5:d8:1e:fd:36:a6:a1:
df:ca:76:36:13:f4:a0:51:af:11:21:44:bc:ae:f4:
ca:76:dd:6b:c4:df:85:d9:6c:e1:20:e5:a3:7f:e2:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:80:C8:75:BD:CE:F0:B9:F7:D1:72:04:29:C9:F3:69:3F:35:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC2E219626A411F0AB7C1E7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.210.0-154.208.229.255
Signature Algorithm: sha256WithRSAEncryption
9b:21:0d:31:e4:88:e7:ea:96:9b:29:35:0f:95:06:a8:41:57:
5b:2f:e3:41:cc:22:61:59:e7:1c:1e:4b:fb:e2:f5:0a:1a:dc:
43:8c:7a:63:cf:28:9b:63:ed:91:41:5b:02:df:61:40:43:73:
c4:85:c1:1f:e0:54:84:6d:64:c0:66:cd:e2:c9:3b:24:f6:d6:
4a:03:2f:39:57:c4:11:7c:03:bc:be:3c:54:e3:0c:90:b3:c2:
e5:d5:02:0a:09:92:ff:27:f9:62:bf:09:7a:e6:9c:11:de:6b:
f2:dc:c0:49:1c:91:7e:56:07:a8:dd:9f:46:c4:d5:89:cb:58:
7e:da:64:90:93:72:a3:28:f3:e9:bd:5d:45:65:30:13:99:2c:
d3:73:ab:b6:d2:53:72:51:38:9e:66:ef:17:1b:a6:79:6d:a0:
c1:b5:8c:80:24:6f:2f:22:d7:e9:fb:44:8d:c6:20:cb:e2:b1:
48:62:49:66:9f:48:60:7d:56:7f:cb:ef:21:ff:01:9c:36:46:
5b:dd:6e:8f:5d:08:5f:62:83:61:56:d3:11:26:ae:40:23:57:
c5:86:77:37:e2:2f:21:cc:d8:27:c2:04:0b:bd:bf:86:27:8b:
42:d9:9b:76:22:be:87:b8:a0:76:a3:51:a9:98:af:08:b3:4b:
68:15:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:32:51 2025 by rpki-client