Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF0EEDA269811F093D813AFDAE4EC9C.roa
File: DFF0EEDA269811F093D813AFDAE4EC9C.roa (raw, json)
Hash identifier: 4JliFmwXkV0YauuCZHRQwsr+2IZuLNJm95s7qK5nlzs=
Subject key identifier: BF:62:33:EF:51:3B:DE:78:7E:A2:7D:82:02:F3:43:6E:B0:D8:CE:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF0EEDA269811F093D813AFDAE4EC9C.roa
Signing time: Thu 01 May 2025 14:30:49 +0000
ROA not before: Thu 01 May 2025 14:30:43 +0000
ROA not after: Fri 28 Apr 2028 14:30:43 +0000
asID: 17561
IP address blocks: 154.93.215.0/24 maxlen: 24
154.93.216.0/24 maxlen: 24
154.93.217.0/24 maxlen: 24
154.93.218.0/24 maxlen: 24
154.93.219.0/24 maxlen: 24
154.93.220.0/24 maxlen: 24
154.93.221.0/24 maxlen: 24
154.93.222.0/24 maxlen: 24
154.93.223.0/24 maxlen: 24
154.93.224.0/24 maxlen: 24
154.93.225.0/24 maxlen: 24
154.93.226.0/24 maxlen: 24
154.93.227.0/24 maxlen: 24
154.93.229.0/24 maxlen: 24
154.93.230.0/24 maxlen: 24
154.93.231.0/24 maxlen: 24
154.93.232.0/24 maxlen: 24
154.93.234.0/24 maxlen: 24
154.93.235.0/24 maxlen: 24
154.93.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97820 (0x17e1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 14:30:43 2025 GMT
Not After : Apr 28 14:30:43 2028 GMT
Subject: CN=68138599-8d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:39:b4:28:72:db:ad:bb:77:e3:6a:a7:26:c1:
15:ff:55:41:ce:9f:32:96:6b:88:58:4b:e0:f2:a3:
c0:21:9f:03:fc:6d:92:5a:00:7b:5d:bf:dc:97:1c:
15:d1:5c:34:2e:4c:53:80:4c:90:54:43:49:05:07:
7f:79:23:ad:a6:16:64:43:f0:96:0c:49:35:01:46:
ec:36:c1:41:51:43:94:f9:b1:d4:ac:c9:84:b5:ba:
80:41:fd:68:02:1d:de:7c:ce:3c:c5:58:36:48:52:
62:15:18:b0:d8:11:a0:0c:ee:77:9e:5a:23:40:69:
51:cb:1f:b9:a1:d5:2f:84:b5:78:42:f3:e4:92:0d:
39:d1:b1:e5:39:12:3e:53:ee:cf:f8:b7:13:80:bc:
d2:2d:ca:2d:6b:fa:9c:ce:a5:7f:c1:8a:3f:e2:54:
62:d4:e5:fb:47:e4:bf:a4:dc:e6:77:c6:e4:d4:fd:
ad:d8:2e:d9:36:ae:81:10:5f:b0:60:84:5c:d7:b0:
16:b2:0f:b9:38:b9:bc:44:3e:2b:1f:a8:28:52:60:
5f:23:e4:c1:cb:87:77:e2:bc:49:42:94:dd:db:c9:
d7:a3:d9:88:c7:bf:3d:95:bf:57:1b:95:84:a3:07:
c0:69:e2:6e:16:08:7c:ed:91:53:67:73:7f:86:e3:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:62:33:EF:51:3B:DE:78:7E:A2:7D:82:02:F3:43:6E:B0:D8:CE:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF0EEDA269811F093D813AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.215.0-154.93.227.255
154.93.229.0-154.93.232.255
154.93.234.0-154.93.236.255
Signature Algorithm: sha256WithRSAEncryption
9a:6a:8a:66:d2:17:62:03:03:3c:cd:b6:3d:60:19:cd:17:bf:
3d:87:c4:2a:5a:37:be:f0:df:06:97:42:a7:2c:79:86:e6:89:
e2:22:de:0d:ae:64:7b:7a:ab:47:07:c4:4b:2a:a5:68:11:1e:
cb:d5:22:56:8e:3d:6c:69:4b:ff:2d:31:dd:c1:3c:1f:34:fc:
32:bf:61:b7:d3:a5:3a:21:37:ee:93:b0:ff:62:40:43:9d:53:
5d:5a:d4:e8:ab:77:1d:c2:fe:e6:45:2b:5b:46:a5:c0:91:41:
14:79:3f:f3:44:10:93:ef:a2:80:54:70:fc:94:d9:37:da:84:
cb:b0:d0:28:0f:53:b6:64:66:d0:b7:00:35:14:59:5d:17:7e:
64:cd:df:16:5e:e0:f5:e7:77:bf:63:eb:d6:d6:80:7f:13:ea:
dc:ad:8f:0c:62:a3:ca:a0:f5:ca:2a:d3:64:05:85:c0:4d:bb:
94:da:52:c4:8e:b9:b1:d7:85:8c:a3:cd:4e:d8:6e:c3:ec:f8:
ec:1d:89:8c:bb:e3:84:c5:12:76:b5:05:a6:0e:7f:c7:4f:d8:
17:d5:f9:0f:92:4e:5b:e9:1f:4d:b8:d1:af:79:a6:e5:85:1d:
32:f9:92:00:66:61:ca:ed:b0:04:2c:06:12:0c:22:a4:dc:93:
29:fd:d7:f8
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIDAX4cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTAxMTQzMDQzWhcNMjgwNDI4MTQzMDQzWjAYMRYw
FAYDVQQDEw02ODEzODU5OS04ZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4Tm0KHLbrbt342qnJsEV/1VBzp8ylmuIWEvg8qPAIZ8D/G2SWgB7Xb/c
lxwV0Vw0LkxTgEyQVENJBQd/eSOtphZkQ/CWDEk1AUbsNsFBUUOU+bHUrMmEtbqA
Qf1oAh3efM48xVg2SFJiFRiw2BGgDO53nlojQGlRyx+5odUvhLV4QvPkkg050bHl
ORI+U+7P+LcTgLzSLcota/qczqV/wYo/4lRi1OX7R+S/pNzmd8bk1P2t2C7ZNq6B
EF+wYIRc17AWsg+5OLm8RD4rH6goUmBfI+TBy4d34rxJQpTd28nXo9mIx789lb9X
G5WEowfAaeJuFgh87ZFTZ3N/huPFrQIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFL9i
M+9RO954fqJ9ggLzQ26w2M7AMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERkYwRUVEQTI2OTgxMUYwOTNEODEzQUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBACaXdcDBAKaXeAwDAME
AJpd5QMEAJpd6DAMAwQBml3qAwQAml3sMA0GCSqGSIb3DQEBCwUAA4IBAQCaaopm
0hdiAwM8zbY9YBnNF789h8QqWje+8N8Gl0KnLHmG5oniIt4NrmR7eqtHB8RLKqVo
ER7L1SJWjj1saUv/LTHdwTwfNPwyv2G306U6ITfuk7D/YkBDnVNdWtToq3cdwv7m
RStbRqXAkUEUeT/zRBCT76KAVHD8lNk32oTLsNAoD1O2ZGbQtwA1FFldF35kzd8W
XuD153e/Y+vW1oB/E+rcrY8MYqPKoPXKKtNkBYXATbuU2lLEjrmx14WMo81O2G7D
7PjsHYmMu+OExRJ2tQWmDn/HT9gX1fkPkk5b6R9NuNGveablhR0y+ZIAZmHK7bAE
LAYSDCKk3JMp/df4
-----END CERTIFICATE-----
Generated at Sat May 10 18:46:11 2025 by rpki-client