Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20A09F4298F11F09F6E948BDAE4EC9C.roa
File: F20A09F4298F11F09F6E948BDAE4EC9C.roa (raw, json)
Hash identifier: jBbqov7ggvNItOGkTH5apcClOJBIhQXkPpYYpOnq+oM=
Subject key identifier: 0D:AF:F1:27:F5:12:EB:36:22:A4:D1:DD:D9:1A:4D:4B:38:5B:2D:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20A09F4298F11F09F6E948BDAE4EC9C.roa
Signing time: Mon 05 May 2025 09:04:27 +0000
ROA not before: Mon 05 May 2025 09:04:22 +0000
ROA not after: Thu 10 Jul 2025 09:04:22 +0000
asID: 203020
IP address blocks: 154.217.7.0/24 maxlen: 24
154.217.8.0/24 maxlen: 24
154.217.9.0/24 maxlen: 24
154.217.10.0/24 maxlen: 24
154.217.11.0/24 maxlen: 24
154.217.12.0/24 maxlen: 24
154.217.13.0/24 maxlen: 24
154.217.14.0/24 maxlen: 24
154.217.15.0/24 maxlen: 24
154.217.21.0/24 maxlen: 24
154.217.22.0/24 maxlen: 24
154.217.23.0/24 maxlen: 24
154.217.24.0/23 maxlen: 24
154.217.26.0/23 maxlen: 24
154.217.28.0/24 maxlen: 24
154.217.29.0/24 maxlen: 24
154.217.62.0/24 maxlen: 24
154.217.63.0/24 maxlen: 24
154.217.128.0/22 maxlen: 24
154.217.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98037 (0x17ef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 09:04:22 2025 GMT
Not After : Jul 10 09:04:22 2025 GMT
Subject: CN=68187f1b-79cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:43:ce:e4:42:a1:6c:50:b7:a9:a0:da:7f:
f2:dc:1d:f0:68:82:1e:cf:58:54:61:85:7c:0b:6d:
dd:01:62:61:31:6d:d7:fc:9f:66:02:8e:3a:17:ef:
24:d7:a2:03:ad:a2:fd:52:00:c4:0b:77:25:e3:c7:
7c:77:ec:c8:63:dd:11:cd:a4:5e:46:bc:ff:98:dd:
09:98:6e:7f:04:85:f6:91:27:c5:93:d6:62:c3:e4:
f8:95:05:a8:4a:7f:d5:85:48:a5:cd:73:95:ac:f2:
76:c9:d7:33:09:8a:ad:10:d1:c5:3c:86:2a:0f:19:
59:83:6e:f0:8f:6f:55:f0:c9:a9:e5:a6:f5:3f:f5:
12:f6:91:85:ee:bf:79:30:35:94:a5:8a:b1:46:04:
8c:62:d9:a2:b0:c2:21:37:fe:ae:f6:04:19:da:8d:
30:58:43:38:ff:44:a6:ef:33:3f:da:63:7f:c9:d8:
36:28:26:35:b9:33:1b:f0:5e:33:27:4e:ff:5b:cc:
79:f9:24:8c:2f:66:07:61:43:07:3f:45:de:20:10:
d5:7f:7b:a3:05:dc:89:ea:cc:5c:2c:21:f2:d3:67:
22:3c:12:9a:4b:db:97:8c:aa:d7:06:b8:5c:6e:1e:
c5:db:60:4c:f3:be:e4:c6:e8:19:fc:f2:1b:78:e2:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AF:F1:27:F5:12:EB:36:22:A4:D1:DD:D9:1A:4D:4B:38:5B:2D:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20A09F4298F11F09F6E948BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.7.0-154.217.15.255
154.217.21.0-154.217.29.255
154.217.62.0/23
154.217.128.0-154.217.133.255
Signature Algorithm: sha256WithRSAEncryption
90:35:b6:c3:bd:d8:f9:f3:44:6a:ce:49:b9:dd:03:a5:09:5c:
19:40:84:e2:e8:0d:52:e6:ca:d3:77:d7:01:12:6a:85:ec:4c:
35:0a:64:6c:67:a0:32:58:c9:f9:e5:db:5f:54:68:24:3f:84:
97:78:1d:bc:1a:2f:27:e2:46:c6:05:19:3b:9e:3e:88:ae:5c:
c2:f2:df:1f:69:f0:a5:45:17:d9:c1:12:bf:c6:fb:ab:6c:8f:
94:75:28:52:25:54:8b:65:a7:85:50:45:99:ba:4f:da:29:75:
15:73:14:63:4f:36:d9:85:18:55:4e:41:19:14:e7:06:ca:3a:
33:55:fe:84:ec:5f:6c:bd:d7:1a:31:ca:3e:92:68:c0:cf:8e:
44:4f:7f:1c:14:a4:01:e4:9a:fa:c6:16:62:54:98:71:2b:c6:
f9:7c:5c:ce:7d:ac:cf:1b:f2:7f:34:15:a8:43:6a:b5:50:8c:
37:38:2b:00:98:db:ff:ab:17:db:60:e3:47:1e:28:80:45:49:
12:29:5a:d7:53:2f:32:21:ec:b9:2f:67:c5:10:36:7b:91:77:
46:d1:8f:49:a4:50:79:fe:f7:54:12:3d:73:e6:b8:83:50:11:
56:f8:3c:7b:9e:24:96:1b:98:08:a8:f2:45:36:22:14:fe:10:
b7:99:e7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:39:55 2025 by rpki-client