Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5237926447A011F09A75A68FDAE4EC9C.roa
File: 5237926447A011F09A75A68FDAE4EC9C.roa (raw, json)
Hash identifier: ASbCnSxgUewMpqjzP3m0lRV9aFWeGBs3wsxHeRxF3Sw=
Subject key identifier: D4:34:36:35:96:82:44:94:4E:96:AE:C9:60:7A:FD:CD:23:F8:43:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01863B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5237926447A011F09A75A68FDAE4EC9C.roa
Signing time: Thu 12 Jun 2025 15:17:15 +0000
ROA not before: Thu 12 Jun 2025 15:17:10 +0000
ROA not after: Fri 01 May 2026 15:17:10 +0000
asID: 984
IP address blocks: 154.218.65.0/24 maxlen: 24
154.218.66.0/24 maxlen: 24
154.218.67.0/24 maxlen: 24
154.218.68.0/24 maxlen: 24
154.218.69.0/24 maxlen: 24
154.218.70.0/24 maxlen: 24
154.218.71.0/24 maxlen: 24
154.218.72.0/24 maxlen: 24
154.218.73.0/24 maxlen: 24
154.221.182.0/24 maxlen: 24
154.221.183.0/24 maxlen: 24
154.221.184.0/24 maxlen: 24
154.221.185.0/24 maxlen: 24
154.221.186.0/24 maxlen: 24
154.221.187.0/24 maxlen: 24
154.221.188.0/24 maxlen: 24
154.221.189.0/24 maxlen: 24
154.221.190.0/24 maxlen: 24
154.221.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99899 (0x1863b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 15:17:10 2025 GMT
Not After : May 1 15:17:10 2026 GMT
Subject: CN=684aef7b-4501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:53:96:4f:bb:28:00:97:88:c6:c4:6c:fd:
8c:74:19:a4:0f:0a:3c:c2:c4:21:c3:fd:40:a0:38:
4e:8e:07:d1:d9:ff:70:bf:a0:9c:6f:cb:00:15:62:
78:62:23:3c:f6:35:66:4f:4f:84:06:cb:2e:cd:2a:
d9:e9:33:d3:4e:39:e2:84:d0:02:5e:c9:19:b0:85:
24:b7:8c:2a:d9:93:4a:f4:98:15:7f:0a:dd:66:4d:
6a:07:58:d8:c6:91:f2:82:b5:aa:f0:f0:d0:0e:89:
df:2f:7a:18:be:3f:1c:d2:af:06:74:68:b6:67:a4:
3d:c9:14:b2:2b:0f:f7:c5:5b:ca:c7:99:ed:1a:94:
74:86:ec:fd:0b:ae:43:6b:b5:f5:c8:80:81:05:43:
ad:1c:08:6d:ec:0e:3c:31:8b:bc:87:60:2c:de:49:
13:79:4d:5a:a3:23:de:e2:f6:4a:f1:2b:4b:de:aa:
53:5f:7d:c6:5a:9b:dc:6b:b9:76:96:1e:fa:0d:22:
80:0c:6a:b7:71:56:55:c9:b8:01:dc:37:7f:ad:47:
fe:b9:a3:59:4f:12:f2:1a:5e:48:e0:f1:2a:96:17:
8c:40:3f:7a:9c:15:ef:84:1b:6b:8d:ae:32:33:09:
ad:91:9b:cf:0d:f6:5e:67:cd:57:81:76:71:b8:54:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:36:35:96:82:44:94:4E:96:AE:C9:60:7A:FD:CD:23:F8:43:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5237926447A011F09A75A68FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.65.0-154.218.73.255
154.221.182.0-154.221.191.255
Signature Algorithm: sha256WithRSAEncryption
a6:10:fd:78:1f:57:55:f7:fe:b5:6a:77:ed:a1:38:0c:79:83:
bf:c2:e5:43:38:ed:93:77:81:87:28:57:c5:2f:bc:43:f2:e1:
4e:88:b3:1c:1c:fd:a5:ed:90:5a:a5:ea:18:95:f7:58:f7:7b:
2a:01:e5:8f:28:99:08:96:06:be:c2:70:bc:95:9e:3a:92:63:
23:d6:85:e9:78:20:10:3f:3f:3c:1d:34:ad:0f:c9:e5:67:d4:
5c:84:f6:0a:b0:76:10:8c:48:d3:45:e0:ad:1f:ef:6a:51:6f:
45:c3:4e:84:15:7f:71:64:8d:92:ac:54:5e:f0:46:5e:87:2b:
a3:35:7b:55:b4:e6:aa:78:1d:63:cb:8e:99:bf:8e:5a:57:d1:
4d:ae:e0:7a:5b:59:34:e0:9e:b1:0f:3c:42:e9:d6:ea:43:90:
7f:1e:11:0a:fd:07:97:f5:48:7b:ef:0b:43:6c:6c:d6:0b:da:
dd:a0:9a:c4:b1:ab:56:5b:09:69:68:45:0b:46:28:62:a2:19:
01:9e:45:1c:0e:03:80:72:cf:86:a2:92:cc:6a:f9:56:f4:00:
97:88:1c:8e:93:6b:8b:2a:0f:3c:5b:91:8a:f7:03:da:e2:6c:
74:50:6e:bf:60:c5:60:84:bf:ec:bb:04:e0:89:55:22:52:0d:
61:3d:73:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:48:51 2025 by rpki-client