Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C398F0D2317B11F08BAACA8ADAE4EC9C.roa
File: C398F0D2317B11F08BAACA8ADAE4EC9C.roa (raw, json)
Hash identifier: caDv8m5Y6eWOSt8p5nQpQn871IhMIvaLGMTmmGeeyyY=
Subject key identifier: 82:8E:DF:BF:F4:34:85:7C:13:CC:0F:8B:55:9F:9C:DF:5C:D6:77:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C398F0D2317B11F08BAACA8ADAE4EC9C.roa
Signing time: Thu 15 May 2025 11:00:08 +0000
ROA not before: Thu 15 May 2025 11:00:04 +0000
ROA not after: Sat 05 Jul 2025 11:00:04 +0000
asID: 398993
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98522 (0x180da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 11:00:04 2025 GMT
Not After : Jul 5 11:00:04 2025 GMT
Subject: CN=6825c938-58b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:56:f5:bc:24:1a:cb:a5:f4:e7:d1:96:5c:
57:f7:2f:31:ab:2c:4f:42:b2:8d:6b:b4:31:ce:88:
06:e2:90:8f:bb:7a:d0:3e:29:5e:35:0f:d3:c6:78:
47:93:4e:51:e1:a6:ed:46:6b:02:e8:e5:1e:77:12:
7c:07:d1:a3:78:15:36:47:05:e5:85:f2:36:ac:84:
13:76:b5:d6:31:c5:7c:7a:72:c3:44:48:fa:12:4d:
ae:23:8e:5b:fc:b1:20:26:49:9a:a3:65:ca:2b:e2:
43:d2:5c:9e:ec:cf:20:b0:8b:e3:2e:4d:47:6c:47:
20:e1:67:d4:77:06:f3:00:51:3f:b6:42:a0:2f:d9:
83:d9:c0:29:67:bf:78:e7:95:fc:8b:a5:7c:3b:26:
cb:4d:ef:a1:1f:9a:74:64:7c:a9:e9:7c:3e:a7:11:
ad:cb:27:36:eb:a3:e7:a2:39:ad:79:82:c9:8b:96:
d4:80:ed:86:66:93:1e:ad:f9:ec:d8:39:a2:4e:a8:
58:7c:ab:32:f8:6b:19:d5:d2:90:fb:8f:f5:d4:83:
91:5d:a7:4e:67:71:d3:e4:6b:90:71:72:3c:5d:26:
de:dd:f7:24:e4:bb:96:20:7a:3f:c4:bd:d8:79:4c:
d8:ec:2a:f5:5b:42:79:75:9b:26:d5:9d:87:df:ea:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8E:DF:BF:F4:34:85:7C:13:CC:0F:8B:55:9F:9C:DF:5C:D6:77:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C398F0D2317B11F08BAACA8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:6d:25:1e:4e:d6:10:19:a3:9c:7c:af:ed:0d:88:bc:8a:b7:
b4:10:33:22:ff:e1:a7:f5:ee:df:0e:00:fb:f1:6e:1e:9e:b1:
3c:ed:ae:df:de:8d:69:1b:86:d4:37:86:94:e0:3c:a7:82:6a:
7f:b9:95:45:0a:1d:52:a0:1a:65:ff:52:37:19:1f:89:42:35:
9f:dd:9f:cd:7d:b5:c5:ac:6b:a4:06:d7:5b:80:21:93:46:7b:
d2:9f:28:83:6d:c7:f0:91:01:05:a9:0c:d8:ea:bd:a8:8c:1d:
92:39:fc:20:04:69:71:8f:fd:82:80:14:23:5d:8d:53:5f:77:
26:7d:15:76:69:14:27:81:48:28:49:90:ed:59:c3:d3:5f:15:
f0:91:f6:15:3e:1b:21:6a:4b:1d:f1:3b:73:97:e0:21:e9:eb:
9b:6c:c4:70:9e:c3:cb:db:5d:68:4e:02:89:92:f3:59:3c:68:
cb:64:5e:47:10:fd:11:d4:97:6b:db:4e:1b:73:67:2c:1b:c8:
e9:67:59:30:a4:3d:5c:9d:2c:29:8b:a8:d4:bb:a4:af:2b:f9:
6c:04:32:38:b2:05:bd:a5:8c:1f:3e:5f:aa:c5:74:8b:bd:fc:
6f:cd:12:28:63:8a:4f:c1:56:b8:8d:2c:b3:01:76:95:09:ef:
0b:1d:99:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYDaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE1MTEwMDA0WhcNMjUwNzA1MTEwMDA0WjAYMRYw
FAYDVQQDEw02ODI1YzkzOC01OGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyTdW9bwkGsul9OfRllxX9y8xqyxPQrKNa7QxzogG4pCPu3rQPileNQ/T
xnhHk05R4abtRmsC6OUedxJ8B9GjeBU2RwXlhfI2rIQTdrXWMcV8enLDREj6Ek2u
I45b/LEgJkmao2XKK+JD0lye7M8gsIvjLk1HbEcg4WfUdwbzAFE/tkKgL9mD2cAp
Z79455X8i6V8OybLTe+hH5p0ZHyp6Xw+pxGtyyc266PnojmteYLJi5bUgO2GZpMe
rfns2DmiTqhYfKsy+GsZ1dKQ+4/11IORXadOZ3HT5GuQcXI8XSbe3fck5LuWIHo/
xL3YeUzY7Cr1W0J5dZsm1Z2H3+rAfwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIKO
37/0NIV8E8wPi1WfnN9c1nchMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMzk4RjBEMjMxN0IxMUYwOEJBQUNBOEFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQCjbSUeTtYQGaOcfK/tDYi8ire0EDMi/+Gn9e7fDgD78W4enrE87a7f
3o1pG4bUN4aU4Dyngmp/uZVFCh1SoBpl/1I3GR+JQjWf3Z/NfbXFrGukBtdbgCGT
RnvSnyiDbcfwkQEFqQzY6r2ojB2SOfwgBGlxj/2CgBQjXY1TX3cmfRV2aRQngUgo
SZDtWcPTXxXwkfYVPhshaksd8Ttzl+Ah6eubbMRwnsPL211oTgKJkvNZPGjLZF5H
EP0R1Jdr204bc2csG8jpZ1kwpD1cnSwpi6jUu6SvK/lsBDI4sgW9pYwfPl+qxXSL
vfxvzRIoY4pPwVa4jSyzAXaVCe8LHZmp
-----END CERTIFICATE-----
Generated at Thu May 15 23:43:56 2025 by rpki-client