Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2119F66424DB11F08860518EDAE4EC9C.roa
File: 2119F66424DB11F08860518EDAE4EC9C.roa (raw, json)
Hash identifier: Ta6HZnDm8gUfGfDfBYO+ZBwtZtItXOZrdXau/yi1tbw=
Subject key identifier: 95:D3:A8:64:EB:32:74:0C:E2:47:B5:89:97:19:5E:ED:EC:8A:3A:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2119F66424DB11F08860518EDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 09:20:02 +0000
ROA not before: Tue 29 Apr 2025 09:19:57 +0000
ROA not after: Mon 23 Jun 2025 09:19:57 +0000
asID: 138915
IP address blocks: 154.90.32.0/23 maxlen: 24
154.90.34.0/23 maxlen: 24
154.90.36.0/23 maxlen: 24
154.90.38.0/23 maxlen: 24
154.90.40.0/23 maxlen: 24
154.90.42.0/23 maxlen: 24
154.90.48.0/23 maxlen: 24
154.90.52.0/23 maxlen: 24
154.90.54.0/23 maxlen: 24
154.90.56.0/23 maxlen: 24
154.93.32.0/24 maxlen: 24
154.93.33.0/24 maxlen: 24
154.93.50.0/24 maxlen: 24
154.93.51.0/24 maxlen: 24
154.93.58.0/24 maxlen: 24
154.93.59.0/24 maxlen: 24
154.93.60.0/24 maxlen: 24
154.93.61.0/24 maxlen: 24
154.93.62.0/24 maxlen: 24
154.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97485 (0x17ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 09:19:57 2025 GMT
Not After : Jun 23 09:19:57 2025 GMT
Subject: CN=681099c2-cab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:0f:fb:71:65:0e:a1:4d:5f:57:8f:24:aa:
70:1a:71:8d:ae:a8:5a:11:11:fa:d2:8d:8f:bc:d4:
a5:74:ad:85:db:ff:2e:86:90:c9:d5:51:a2:31:84:
3d:d8:3c:8a:cf:fe:d1:82:21:41:13:c5:7b:0d:13:
c9:f4:51:87:21:7a:af:c5:7e:c8:f5:1d:d7:ef:6e:
71:3c:b8:31:0a:0a:9e:e3:39:05:1a:4b:5f:51:48:
44:3f:39:8b:ae:5c:2a:2f:80:95:56:ed:d0:79:de:
eb:15:35:08:88:6f:40:bd:0a:a1:28:d2:06:06:56:
fe:5b:ed:c9:d0:a2:cd:79:a7:b7:de:65:b1:0f:69:
97:23:f2:2f:df:15:30:2b:99:24:e3:fe:f1:7c:55:
af:8d:fa:50:a4:be:07:d8:77:b7:21:ce:0a:d3:85:
92:c8:70:04:6c:db:7e:26:44:81:11:bc:b6:0b:da:
a3:92:82:b1:e6:8e:a6:5d:8a:f0:a0:98:18:a3:be:
a2:28:75:df:59:e1:d2:13:dd:26:b8:17:87:4d:30:
37:5a:53:98:23:25:66:ce:db:14:38:1d:3b:be:f3:
8b:9f:d2:c8:6b:95:de:d2:19:f3:0c:46:dc:79:6e:
9d:da:df:f8:83:7d:f5:fc:12:37:82:50:90:1e:47:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:A8:64:EB:32:74:0C:E2:47:B5:89:97:19:5E:ED:EC:8A:3A:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2119F66424DB11F08860518EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0-154.90.43.255
154.90.48.0/23
154.90.52.0-154.90.57.255
154.93.32.0/23
154.93.50.0/23
154.93.58.0-154.93.63.255
Signature Algorithm: sha256WithRSAEncryption
51:0b:49:63:a4:9b:5f:a0:54:d1:7e:93:ab:3a:5d:56:c7:ab:
e7:d9:6d:42:28:96:fc:85:47:ba:a1:0c:90:0e:5b:49:de:36:
a8:08:bc:ec:8a:41:85:77:9d:c9:cd:65:1d:7c:e3:70:09:32:
08:70:b0:7e:1b:b0:5f:fe:46:41:c9:14:91:88:38:df:87:85:
74:29:f8:2a:5e:07:fc:ee:cc:3a:23:0f:f1:d4:67:72:87:2b:
e9:9a:8d:94:e1:ca:9d:8d:ce:28:55:1d:06:e9:a5:de:ed:2e:
4c:00:86:c6:80:91:c8:ca:0b:78:ef:ff:65:a7:6b:f8:2e:7e:
ae:a0:32:3b:8c:cc:0a:01:f8:48:ed:71:58:0b:1d:a4:e6:ab:
f2:0e:c7:bc:fe:b4:6d:56:39:4d:62:26:30:7d:88:cb:5b:18:
ae:c8:aa:c5:c4:1f:41:84:8f:8e:23:7f:c6:1d:d5:96:e9:83:
8c:b1:ab:95:38:fa:4b:7c:13:11:c0:67:ab:41:1a:dd:7c:0e:
67:c2:8f:8d:1b:17:7d:33:e0:0d:6d:15:c9:7f:6a:48:db:c9:
8f:d9:79:9a:c6:03:93:f8:dd:c3:ce:50:54:3c:3d:ef:7b:f5:
cc:c7:05:b4:17:d6:d5:06:19:93:27:42:6c:61:b5:71:bf:40:
3d:33:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:16:12 2025 by rpki-client