Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C51FF7A82C0711F086DD898DDAE4EC9C.roa
File: C51FF7A82C0711F086DD898DDAE4EC9C.roa (raw, json)
Hash identifier: 3CykLaYXsvX/g6yqceh7CJ2EjlEEHoNT2XkfEIRhxY8=
Subject key identifier: AF:03:63:D3:51:31:AE:19:ED:E8:76:7B:A5:37:E3:8C:C7:4D:B1:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C51FF7A82C0711F086DD898DDAE4EC9C.roa
Signing time: Thu 08 May 2025 12:27:14 +0000
ROA not before: Thu 08 May 2025 12:27:09 +0000
ROA not after: Sun 25 May 2025 12:27:09 +0000
asID: 9009
IP address blocks: 154.85.100.0/22 maxlen: 24
154.85.124.0/24 maxlen: 24
154.85.125.0/24 maxlen: 24
154.85.126.0/23 maxlen: 24
154.92.112.0/21 maxlen: 24
154.92.120.0/24 maxlen: 24
154.92.121.0/24 maxlen: 24
154.92.122.0/24 maxlen: 24
154.92.123.0/24 maxlen: 24
154.92.124.0/24 maxlen: 24
154.92.125.0/24 maxlen: 24
154.92.126.0/24 maxlen: 24
154.92.127.0/24 maxlen: 24
154.95.0.0/23 maxlen: 24
154.95.32.0/22 maxlen: 24
154.95.36.0/23 maxlen: 24
154.95.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98196 (0x17f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 12:27:09 2025 GMT
Not After : May 25 12:27:09 2025 GMT
Subject: CN=681ca321-5195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:d7:04:16:44:76:e9:16:3c:aa:af:4a:4d:
66:66:a2:74:19:22:77:f0:a2:db:ff:40:ce:cb:46:
27:06:57:ea:19:5b:77:1c:17:0c:d9:87:2c:5e:61:
6f:df:bc:c2:ce:fd:18:b5:6c:97:af:ca:3f:0a:1e:
44:02:15:66:b6:4b:49:86:72:20:ee:33:94:0d:96:
9c:bd:e5:ba:94:d1:a1:5c:b5:4f:f9:8e:72:06:a3:
60:b0:7f:be:99:cd:e5:45:e3:0c:16:9d:0d:56:1c:
40:d5:d0:94:5a:a2:c7:b9:73:41:db:f6:5f:99:73:
c6:ac:ef:51:df:b6:7a:73:40:65:67:40:30:cb:64:
cb:f6:2d:ef:8d:25:fc:57:c7:63:7b:0f:e9:d8:c0:
c8:4d:4f:3a:e4:d7:04:dd:f7:25:ac:87:e8:61:af:
d0:c5:f6:df:ff:54:06:c9:a5:43:ab:66:54:69:cf:
a3:3b:ea:f6:a6:72:5b:44:67:f6:13:da:7c:7e:e7:
57:39:3a:b6:05:dc:73:aa:d5:f7:b1:70:89:e6:b4:
c9:c4:52:b6:e6:43:64:0b:96:37:db:a4:92:48:05:
4a:8e:cc:46:4a:b3:c8:ca:a6:87:53:be:af:79:72:
ed:c3:2f:4d:33:1e:df:0d:f5:86:4d:f6:90:f2:80:
2a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:03:63:D3:51:31:AE:19:ED:E8:76:7B:A5:37:E3:8C:C7:4D:B1:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C51FF7A82C0711F086DD898DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.100.0/22
154.85.124.0/22
154.92.112.0/20
154.95.0.0/23
154.95.32.0/21
Signature Algorithm: sha256WithRSAEncryption
d3:24:a7:6a:1f:29:14:55:81:9d:f0:01:15:a1:a2:10:69:01:
f8:7c:e8:c8:6a:73:c7:b3:17:7b:96:4d:1a:ab:3c:ec:b7:36:
e7:b4:84:0d:3b:7b:5b:3f:e6:69:d4:db:4c:fe:b0:59:a6:28:
6e:13:70:a3:0d:0c:22:43:ff:6e:e2:99:4a:94:8b:7d:32:5f:
f6:3f:8c:ef:03:6b:8f:68:e2:4e:bb:a7:87:4b:d1:26:64:6f:
71:cd:a0:37:11:0a:ac:6c:60:cd:f6:7f:74:81:a0:55:ad:73:
f4:3a:52:43:4b:f8:c8:61:3e:77:f7:c9:22:4e:85:eb:3a:f8:
d2:cf:5a:0c:28:ba:08:c2:1d:9f:4d:ef:33:21:ff:37:ba:69:
c8:d9:5c:d6:52:de:10:0a:a5:c9:76:9e:aa:67:17:42:f2:25:
68:30:73:b2:98:84:fd:90:38:6f:4f:09:4d:e9:97:9f:f7:88:
b6:fb:09:e6:3b:24:25:59:46:ff:26:9e:cc:64:17:c8:ba:3e:
a5:a6:e8:76:ac:bd:e9:26:4e:a7:0d:03:de:4d:a0:35:46:3e:
a7:5e:24:11:fc:1f:88:95:3c:06:42:be:d8:27:24:0b:53:b3:
f1:3b:76:0b:3a:30:a0:b5:97:97:06:b7:06:cf:35:b3:e2:03:
3d:a8:56:21
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDAX+UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA4MTIyNzA5WhcNMjUwNTI1MTIyNzA5WjAYMRYw
FAYDVQQDEw02ODFjYTMyMS01MTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmjPXBBZEdukWPKqvSk1mZqJ0GSJ38KLb/0DOy0YnBlfqGVt3HBcM2Ycs
XmFv37zCzv0YtWyXr8o/Ch5EAhVmtktJhnIg7jOUDZacveW6lNGhXLVP+Y5yBqNg
sH++mc3lReMMFp0NVhxA1dCUWqLHuXNB2/ZfmXPGrO9R37Z6c0BlZ0Awy2TL9i3v
jSX8V8djew/p2MDITU865NcE3fclrIfoYa/Qxfbf/1QGyaVDq2ZUac+jO+r2pnJb
RGf2E9p8fudXOTq2BdxzqtX3sXCJ5rTJxFK25kNkC5Y326SSSAVKjsxGSrPIyqaH
U76veXLtwy9NMx7fDfWGTfaQ8oAqkQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFK8D
Y9NRMa4Z7eh2e6U344zHTbEGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNTFGRjdBODJDMDcxMUYwODZERDg5OEREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCmlVkAwQCmlV8AwQEmlxw
AwQBml8AAwQDml8gMA0GCSqGSIb3DQEBCwUAA4IBAQDTJKdqHykUVYGd8AEVoaIQ
aQH4fOjIanPHsxd7lk0aqzzstzbntIQNO3tbP+Zp1NtM/rBZpihuE3CjDQwiQ/9u
4plKlIt9Ml/2P4zvA2uPaOJOu6eHS9EmZG9xzaA3EQqsbGDN9n90gaBVrXP0OlJD
S/jIYT5398kiToXrOvjSz1oMKLoIwh2fTe8zIf83umnI2VzWUt4QCqXJdp6qZxdC
8iVoMHOymIT9kDhvTwlN6Zef94i2+wnmOyQlWUb/Jp7MZBfIuj6lpuh2rL3pJk6n
DQPeTaA1Rj6nXiQR/B+IlTwGQr7YJyQLU7PxO3YLOjCgtZeXBrcGzzWz4gM9qFYh
-----END CERTIFICATE-----
Generated at Thu May 15 23:45:03 2025 by rpki-client