Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1F0246E25CB11F0A41AE8D3DAE4EC9C.roa
File: C1F0246E25CB11F0A41AE8D3DAE4EC9C.roa (raw, json)
Hash identifier: uk3rwg9sXvZXpnXUcoN/EWPBqQ9roVs5Yq1QegbBpXE=
Subject key identifier: 4B:DB:21:1F:3E:4A:F9:5F:2C:0D:46:18:E2:9F:A9:CF:84:CF:6F:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1F0246E25CB11F0A41AE8D3DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 14:02:31 +0000
ROA not before: Wed 30 Apr 2025 14:02:27 +0000
ROA not after: Tue 28 Apr 2026 14:02:27 +0000
asID: 984
IP address blocks: 154.80.202.0/24 maxlen: 24
154.80.203.0/24 maxlen: 24
154.80.204.0/24 maxlen: 24
154.80.205.0/24 maxlen: 24
154.80.206.0/24 maxlen: 24
154.80.207.0/24 maxlen: 24
154.80.208.0/24 maxlen: 24
154.80.209.0/24 maxlen: 24
154.80.210.0/24 maxlen: 24
154.80.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97671 (0x17d87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:02:27 2025 GMT
Not After : Apr 28 14:02:27 2026 GMT
Subject: CN=68122d77-d18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:7a:a9:e9:0f:a3:57:24:2c:81:66:4b:a1:
74:e5:1c:06:ec:59:4d:45:3a:af:17:eb:09:a7:d2:
80:9f:e7:2f:5d:a9:ad:7b:37:91:41:58:c5:6e:f6:
25:e9:5d:2f:9d:42:4b:cb:e1:6d:19:5d:e5:21:dd:
67:5a:b3:cb:d7:2e:ed:e8:81:99:a0:37:1b:84:82:
9f:fe:2c:83:64:e0:91:be:a6:12:3f:26:42:50:6b:
f5:96:97:c8:d9:f2:05:8c:4c:23:dc:08:cc:af:ad:
07:21:36:4b:57:70:bf:e9:d9:48:51:02:1c:4f:c0:
20:39:dd:09:61:08:50:4b:d5:9a:8c:f2:d1:d3:54:
b8:a6:6d:5e:df:9f:e9:db:1b:e5:76:fd:59:23:ee:
d2:3d:75:be:cb:94:ff:3c:9e:2e:2c:4e:15:05:ac:
84:4c:7a:ad:df:08:1f:28:fd:94:6e:0c:8d:2a:fe:
23:b2:d5:70:eb:7f:09:7a:28:85:7a:d2:a0:21:0e:
81:f5:4d:db:36:2f:09:4f:ad:8f:ec:9b:6e:aa:d0:
9c:c4:24:ae:e5:37:c9:c7:e1:a3:23:1c:bb:73:a7:
d0:63:0e:65:c8:43:4b:7d:ec:ff:af:55:c0:65:4e:
0b:4e:3d:da:05:61:72:47:3d:39:ae:5f:01:cd:f6:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DB:21:1F:3E:4A:F9:5F:2C:0D:46:18:E2:9F:A9:CF:84:CF:6F:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1F0246E25CB11F0A41AE8D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.202.0-154.80.211.255
Signature Algorithm: sha256WithRSAEncryption
1b:51:87:ee:cf:b5:4c:49:90:fc:cc:7f:cd:a3:a7:e1:49:aa:
f9:7c:66:b7:21:3d:cf:b5:90:8a:c6:e1:82:1e:ad:15:1d:79:
df:e5:71:2d:68:f4:45:e2:6f:39:4a:f8:b6:21:70:d1:4c:90:
85:83:c7:4d:42:cf:c2:85:41:a8:48:88:14:d2:5b:60:b7:69:
8f:06:30:b0:77:09:76:61:9d:1a:30:cd:ee:ac:e4:8b:06:c3:
41:97:3f:9e:b5:b6:3d:f4:bf:f2:f1:cb:f8:38:aa:bf:95:f1:
dd:85:89:29:c4:f2:8b:bb:b8:61:12:22:12:1f:02:33:d4:23:
6b:b6:f2:0f:d3:89:7b:d3:f7:e6:db:12:29:cd:46:70:37:9c:
9d:c2:b6:00:74:0b:a2:60:11:c0:b9:56:42:57:8b:bc:91:1f:
fd:89:b7:ee:64:ab:1c:01:ff:56:d4:ad:7a:c2:b4:09:8c:8c:
ed:d9:3c:69:84:78:c6:4e:d7:bc:cd:2c:4b:7a:b5:2b:c6:e8:
1b:9b:25:24:89:a0:24:75:36:91:cb:95:3b:2d:49:85:4a:59:
24:26:70:45:19:b2:4c:c6:94:b6:84:f7:6b:13:f9:6a:e1:6b:
fe:0a:be:d7:33:d2:90:32:ce:c1:88:69:84:b9:de:e7:8a:47:
82:69:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:16:30 2025 by rpki-client