Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B18F58C483811F0AA465F81DAE4EC9C.roa
File: 6B18F58C483811F0AA465F81DAE4EC9C.roa (raw, json)
Hash identifier: FBjP+6qd0Jt5HgbLNp3GWgB5+KR//zIU4CH1lpAyfJs=
Subject key identifier: F3:D6:32:8E:79:EF:2F:01:65:5D:AA:A3:DD:33:BE:88:A0:A2:8F:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01865E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B18F58C483811F0AA465F81DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 09:26:02 +0000
ROA not before: Fri 13 Jun 2025 09:25:55 +0000
ROA not after: Sat 19 Jul 2025 09:25:55 +0000
asID: 395793
IP address blocks: 154.92.205.0/24 maxlen: 24
154.92.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99934 (0x1865e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 09:25:55 2025 GMT
Not After : Jul 19 09:25:55 2025 GMT
Subject: CN=684beeaa-f92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:12:7f:6f:b9:58:4e:12:01:42:43:ce:a5:
0a:10:51:f6:71:69:8c:59:8b:c7:9b:fc:67:70:d5:
12:33:f4:67:e9:34:5a:3b:19:d0:94:4e:b3:7a:e1:
dc:74:79:3d:f2:73:31:82:bf:6e:72:bd:a7:f1:5e:
f8:95:9e:e9:82:6e:02:4b:fe:84:a5:e6:00:03:c8:
a7:51:5e:3f:a1:55:f1:53:73:1b:9e:c0:98:56:e0:
6a:39:ee:ec:94:10:ee:0c:d2:29:60:f8:1f:f9:c0:
36:26:86:7e:76:cc:3f:95:38:99:d8:e9:e1:66:89:
bb:c3:4e:1e:08:ef:15:5a:19:0b:e2:6e:b9:e9:00:
bd:00:db:f2:4a:96:58:a9:87:b0:f9:62:8a:74:ca:
30:57:9e:88:ea:10:85:93:75:0f:e5:45:25:91:28:
8f:d6:6e:e2:bc:36:30:ca:c2:ac:e5:04:3b:b3:38:
0c:b4:af:c8:e8:48:9b:f8:d7:fb:c1:72:ac:3d:c7:
60:1a:b5:08:35:05:36:b3:8b:fd:22:3e:e4:29:96:
0e:9c:fe:5a:33:12:6f:b9:54:e9:55:78:7f:da:f0:
5b:f5:e8:b8:67:1e:71:ca:4a:ee:67:60:e9:4f:06:
5a:ec:27:06:f9:1b:26:1c:7a:b1:b3:a1:44:51:fc:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D6:32:8E:79:EF:2F:01:65:5D:AA:A3:DD:33:BE:88:A0:A2:8F:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B18F58C483811F0AA465F81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.205.0/24
154.92.207.0/24
Signature Algorithm: sha256WithRSAEncryption
51:77:1f:c0:c6:eb:a4:5d:ee:02:e4:d0:11:46:f1:b6:61:b3:
64:37:e4:a6:67:ef:82:5f:78:c9:02:28:62:c3:48:e9:3d:ab:
86:4e:4e:48:2e:8c:bc:56:d2:56:c7:8b:80:bc:97:5c:ac:f4:
3c:22:42:20:6b:21:40:ba:73:c9:85:59:64:87:35:32:5d:fb:
b0:8a:5e:9f:69:0d:88:6f:f6:99:34:90:2b:57:35:8c:b1:58:
9a:57:51:da:b2:9d:e4:fc:e0:b1:55:b2:b6:73:a2:44:19:a4:
fa:5a:63:f2:bb:4a:28:a3:3a:cd:e2:21:4b:c4:bc:89:59:f2:
50:87:34:04:09:32:9f:c1:68:65:ba:6a:7c:6d:fe:89:49:85:
47:1d:70:f9:61:b2:e9:59:36:6e:ab:84:17:9f:e6:a4:00:e2:
25:30:d7:c3:fa:04:41:c9:e0:02:2d:00:ff:f7:5f:ad:9a:b9:
a2:80:ce:3f:40:14:b9:3d:6a:87:bd:0b:e9:02:db:2b:4a:16:
55:85:35:20:29:46:57:a1:5a:d9:77:0b:54:ab:04:47:ee:c2:
90:b2:3b:e7:7a:cd:ef:25:2f:f8:b0:3c:e0:34:95:a0:49:b2:
08:93:f4:45:f5:d2:9c:59:ff:af:cf:27:56:7c:80:c6:52:10:
d1:f9:62:52
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYZeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjEzMDkyNTU1WhcNMjUwNzE5MDkyNTU1WjAYMRYw
FAYDVQQDEw02ODRiZWVhYS1mOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2TwSf2+5WE4SAUJDzqUKEFH2cWmMWYvHm/xncNUSM/Rn6TRaOxnQlE6z
euHcdHk98nMxgr9ucr2n8V74lZ7pgm4CS/6EpeYAA8inUV4/oVXxU3MbnsCYVuBq
Oe7slBDuDNIpYPgf+cA2JoZ+dsw/lTiZ2OnhZom7w04eCO8VWhkL4m656QC9ANvy
SpZYqYew+WKKdMowV56I6hCFk3UP5UUlkSiP1m7ivDYwysKs5QQ7szgMtK/I6Eib
+Nf7wXKsPcdgGrUINQU2s4v9Ij7kKZYOnP5aMxJvuVTpVXh/2vBb9ei4Zx5xykru
Z2DpTwZa7CcG+RsmHHqxs6FEUfyE9wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFPPW
Mo557y8BZV2qo90zvoigoo/9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QjE4RjU4QzQ4MzgxMUYwQUE0NjVGODFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlzNAwQAmlzPMA0GCSqG
SIb3DQEBCwUAA4IBAQBRdx/AxuukXe4C5NARRvG2YbNkN+SmZ++CX3jJAihiw0jp
PauGTk5ILoy8VtJWx4uAvJdcrPQ8IkIgayFAunPJhVlkhzUyXfuwil6faQ2Ib/aZ
NJArVzWMsViaV1Hasp3k/OCxVbK2c6JEGaT6WmPyu0ooozrN4iFLxLyJWfJQhzQE
CTKfwWhlump8bf6JSYVHHXD5YbLpWTZuq4QXn+akAOIlMNfD+gRByeACLQD/91+t
mrmigM4/QBS5PWqHvQvpAtsrShZVhTUgKUZXoVrZdwtUqwRH7sKQsjvnes3vJS/4
sDzgNJWgSbIIk/RF9dKcWf+vzydWfIDGUhDR+WJS
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:17 2025 by rpki-client