Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F34F30E42D111F0910E0CC9DAE4EC9C.roa
File: 0F34F30E42D111F0910E0CC9DAE4EC9C.roa (raw, json)
Hash identifier: S11gWkS1tMqwZoi3bDZDVaM6BhrpAaZdxUq1Vm+HIE0=
Subject key identifier: 57:84:93:DC:41:3E:1C:8B:BC:59:B2:EF:8A:96:0C:A7:90:28:94:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018520
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F34F30E42D111F0910E0CC9DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 12:23:32 +0000
ROA not before: Fri 06 Jun 2025 12:23:27 +0000
ROA not after: Sun 31 Aug 2025 12:23:27 +0000
asID: 399077
IP address blocks: 154.91.107.0/24 maxlen: 24
154.91.108.0/24 maxlen: 24
154.91.109.0/24 maxlen: 24
154.91.110.0/24 maxlen: 24
154.91.111.0/24 maxlen: 24
154.91.112.0/24 maxlen: 24
154.91.113.0/24 maxlen: 24
154.91.114.0/24 maxlen: 24
154.91.115.0/24 maxlen: 24
154.91.116.0/24 maxlen: 24
154.91.117.0/24 maxlen: 24
154.91.118.0/24 maxlen: 24
154.91.119.0/24 maxlen: 24
154.91.120.0/24 maxlen: 24
154.91.121.0/24 maxlen: 24
154.91.122.0/24 maxlen: 24
154.91.123.0/24 maxlen: 24
154.91.124.0/24 maxlen: 24
154.91.125.0/24 maxlen: 24
154.91.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99616 (0x18520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 12:23:27 2025 GMT
Not After : Aug 31 12:23:27 2025 GMT
Subject: CN=6842ddc4-42f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a7:30:e2:56:4a:dd:6c:51:f5:37:e1:7e:e6:
cd:6a:a3:4a:d2:b9:db:e4:46:7b:b8:ed:c7:21:f3:
4e:2a:13:0d:11:15:7e:eb:78:19:36:27:dc:46:52:
00:92:21:e2:18:82:42:79:1a:e0:4a:38:fb:38:3f:
70:c9:be:56:7c:1c:48:94:88:ee:8f:0c:3e:0c:7a:
b6:8c:7e:9a:91:be:f5:54:2f:c3:13:64:bd:1c:8f:
d8:43:90:72:08:d2:c6:c9:4d:03:9e:e0:06:2d:99:
4c:ae:5e:76:0d:b3:db:01:39:66:8f:c8:4b:43:16:
a9:9d:25:a2:df:df:cd:19:69:2f:e0:04:e0:d7:76:
10:24:4f:bc:39:bd:48:84:57:6f:e2:3b:48:e5:00:
6e:dd:65:50:bb:fb:5a:b8:51:a1:f9:01:44:2a:2b:
22:8b:e1:86:76:04:9e:c2:26:93:e1:d1:89:af:32:
dc:fd:2a:ef:d9:70:23:53:d3:d0:a5:9b:2c:6a:14:
c5:2c:d0:41:e0:7e:d6:85:3a:88:8c:e8:ca:1c:0e:
27:80:6d:6b:04:64:13:ec:3b:96:0b:e8:4d:09:0d:
8e:dd:f7:db:50:bf:d2:19:70:da:cb:e8:9c:18:07:
76:5f:31:29:e3:6c:f5:70:b1:9e:9a:af:9b:c9:e0:
e5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:93:DC:41:3E:1C:8B:BC:59:B2:EF:8A:96:0C:A7:90:28:94:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F34F30E42D111F0910E0CC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.107.0-154.91.126.255
Signature Algorithm: sha256WithRSAEncryption
02:b2:ec:55:88:51:35:c0:b5:2d:de:df:e7:9e:21:d7:eb:7c:
76:23:0a:49:e5:de:bd:f1:37:8e:2a:c5:38:c2:cc:60:5d:49:
2b:95:2e:4a:74:20:92:10:d1:73:a6:fb:21:0b:3b:56:5d:7b:
5b:1d:3f:ce:85:3b:ab:99:2b:a3:d5:d5:d3:0d:90:88:ef:a6:
f7:b5:bd:16:ac:8c:55:c6:06:33:74:7c:d0:6d:1f:e2:bb:0f:
76:a5:20:2a:71:2c:8f:98:c8:34:a7:d6:19:b9:c1:13:9e:e7:
47:a8:cc:86:5e:4c:15:e5:e4:12:75:68:21:d7:e5:e8:9e:e6:
20:cc:ae:05:38:64:22:98:3d:b7:13:f3:62:af:e2:b4:a5:c7:
61:3a:4b:4c:4e:76:4e:57:d9:92:73:2b:e7:7c:85:f5:84:96:
40:57:a9:81:85:f1:14:aa:7c:b0:ed:39:27:a7:e6:3e:1b:24:
0f:5e:04:30:00:44:f6:ed:97:50:a6:99:2a:c5:e7:a0:17:41:
a7:55:df:4f:04:a9:10:1c:d6:70:78:6f:02:1b:af:58:28:51:
10:be:a4:3a:0b:99:65:7e:dd:22:35:48:10:fb:c0:43:db:60:
ad:65:19:f9:6e:09:0a:a4:46:45:b2:fa:2d:89:d7:8a:77:93:
39:32:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:31:40 2025 by rpki-client