Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC3232502BEE11F089A063E6DAE4EC9C.roa
File: BC3232502BEE11F089A063E6DAE4EC9C.roa (raw, json)
Hash identifier: G/CDTGNzIsE2CGnB5rrGEUF1JJO+kxdg9RblIG+6wlI=
Subject key identifier: 9E:E0:81:AC:A7:61:E5:6D:2E:FA:9E:81:C8:04:94:BB:9E:A5:B5:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC3232502BEE11F089A063E6DAE4EC9C.roa
Signing time: Thu 08 May 2025 09:28:01 +0000
ROA not before: Thu 08 May 2025 09:27:57 +0000
ROA not after: Mon 09 Jun 2025 09:27:57 +0000
asID: 200373
IP address blocks: 154.82.150.0/24 maxlen: 24
154.82.168.0/22 maxlen: 24
154.86.112.0/24 maxlen: 24
154.86.113.0/24 maxlen: 24
154.86.114.0/24 maxlen: 24
154.91.171.0/24 maxlen: 24
154.94.12.0/24 maxlen: 24
154.94.13.0/24 maxlen: 24
154.94.14.0/24 maxlen: 24
154.94.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98184 (0x17f88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 09:27:57 2025 GMT
Not After : Jun 9 09:27:57 2025 GMT
Subject: CN=681c7921-eddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:1c:c9:34:6b:34:b9:42:f9:c2:35:47:cd:
05:4f:ad:8f:46:a9:93:36:ef:60:40:4e:aa:d9:ab:
89:4e:13:c3:1f:0f:c5:96:d7:3b:f0:68:d7:b3:69:
fe:c1:14:38:9f:8a:df:74:2c:87:18:ca:c3:9f:bd:
30:18:f4:b0:b7:5d:79:d8:d5:69:c4:3b:cd:ef:f2:
20:f3:0d:d1:06:c5:90:f6:a3:71:48:03:42:74:a2:
da:68:6d:3f:01:ec:99:9f:db:35:66:e0:2b:aa:86:
4f:dd:74:4f:6e:14:85:20:da:5e:1a:e8:df:27:06:
8f:91:35:3c:64:fe:62:ca:7d:f2:ee:d9:07:62:42:
2d:25:03:65:0f:6b:47:9b:34:ff:c4:88:ad:79:ef:
db:f0:a9:f8:d4:7b:94:c6:df:5b:41:d1:57:2b:e9:
88:79:83:6b:90:5e:ca:1d:1a:c5:21:b2:ef:94:83:
69:f5:94:f5:32:92:49:69:d3:a5:26:e6:2a:26:a5:
2e:6a:1f:c1:23:d7:35:87:26:68:13:3a:ec:e2:cc:
f6:e1:dd:6b:a2:ac:a9:5e:1b:f3:5c:e2:96:39:de:
f2:95:08:c0:21:87:24:7a:57:88:67:53:71:11:8a:
9c:25:50:56:25:65:19:d5:ef:c8:cd:00:5f:16:9c:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E0:81:AC:A7:61:E5:6D:2E:FA:9E:81:C8:04:94:BB:9E:A5:B5:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC3232502BEE11F089A063E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.150.0/24
154.82.168.0/22
154.86.112.0-154.86.114.255
154.91.171.0/24
154.94.12.0/22
Signature Algorithm: sha256WithRSAEncryption
81:ad:b8:d9:8f:ba:cd:a4:41:78:ba:52:19:b7:94:11:67:ef:
c7:b8:d9:a0:db:dc:96:4c:7f:9f:e0:49:9c:b0:bc:7b:87:7a:
30:19:78:69:ed:f6:91:e2:d6:16:c4:bf:89:5f:66:ef:ad:ea:
3e:3b:cc:d2:99:12:08:50:bd:e6:d1:71:dd:99:d6:e7:a4:8b:
44:ed:09:e8:73:60:37:e0:f3:80:dc:c5:dd:9a:5d:58:c5:c4:
f1:19:3a:2f:09:43:76:78:e8:9d:c7:f1:fd:51:35:1b:ab:ee:
e0:27:c1:40:d5:dd:7d:45:51:a0:50:e6:f2:3a:6e:f1:eb:8b:
f4:4f:82:56:d0:08:81:d1:e7:c7:52:72:ca:63:49:43:1d:5e:
2c:ab:fe:6a:4f:96:ab:e2:d1:7e:2e:93:6e:2b:14:06:c3:66:
a3:ba:4d:55:51:d9:12:15:dc:3e:58:bd:85:34:1d:ed:00:2d:
c0:88:ca:13:8a:d3:26:54:6d:64:af:af:09:3d:f3:fd:cf:25:
5c:57:d0:81:68:31:a8:51:36:7f:b9:87:16:61:4b:4a:48:06:
df:d0:f4:45:aa:6c:bd:62:28:8e:e2:16:2b:2e:6c:ef:28:30:
95:23:b5:4e:aa:51:db:6d:ff:3b:32:62:83:2f:7f:cb:42:9e:
bf:fa:49:cb
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAX+IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA4MDkyNzU3WhcNMjUwNjA5MDkyNzU3WjAYMRYw
FAYDVQQDEw02ODFjNzkyMS1lZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4zAcyTRrNLlC+cI1R80FT62PRqmTNu9gQE6q2auJThPDHw/Fltc78GjX
s2n+wRQ4n4rfdCyHGMrDn70wGPSwt1152NVpxDvN7/Ig8w3RBsWQ9qNxSANCdKLa
aG0/AeyZn9s1ZuArqoZP3XRPbhSFINpeGujfJwaPkTU8ZP5iyn3y7tkHYkItJQNl
D2tHmzT/xIitee/b8Kn41HuUxt9bQdFXK+mIeYNrkF7KHRrFIbLvlINp9ZT1MpJJ
adOlJuYqJqUuah/BI9c1hyZoEzrs4sz24d1roqypXhvzXOKWOd7ylQjAIYckeleI
Z1NxEYqcJVBWJWUZ1e/IzQBfFpy8CQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFJ7g
gaynYeVtLvqegcgElLuepbUEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQzMyMzI1MDJCRUUxMUYwODlBMDYzRTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAmlKWAwQCmlKoMAwDBASa
VnADBACaVnIDBACaW6sDBAKaXgwwDQYJKoZIhvcNAQELBQADggEBAIGtuNmPus2k
QXi6Uhm3lBFn78e42aDb3JZMf5/gSZywvHuHejAZeGnt9pHi1hbEv4lfZu+t6j47
zNKZEghQvebRcd2Z1ueki0TtCehzYDfg84Dcxd2aXVjFxPEZOi8JQ3Z46J3H8f1R
NRur7uAnwUDV3X1FUaBQ5vI6bvHri/RPglbQCIHR58dScspjSUMdXiyr/mpPlqvi
0X4uk24rFAbDZqO6TVVR2RIV3D5YvYU0He0ALcCIyhOK0yZUbWSvrwk98/3PJVxX
0IFoMahRNn+5hxZhS0pIBt/Q9EWqbL1iKI7iFisubO8oMJUjtU6qUdtt/zsyYoMv
f8tCnr/6Scs=
-----END CERTIFICATE-----
Generated at Thu May 15 23:43:55 2025 by rpki-client