Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7429B28E42D311F0AA4C5DD8DAE4EC9C.roa
File: 7429B28E42D311F0AA4C5DD8DAE4EC9C.roa (raw, json)
Hash identifier: 7RVGl27an4+nSnw4kkwYNZLBkvkbIXKTnkeSkqL2Qyw=
Subject key identifier: 69:B6:EB:C4:FB:16:D6:05:31:E0:F5:06:B9:E3:26:DB:38:D7:4E:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018524
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7429B28E42D311F0AA4C5DD8DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 12:40:41 +0000
ROA not before: Fri 06 Jun 2025 12:40:35 +0000
ROA not after: Sun 31 Aug 2025 12:40:35 +0000
asID: 399077
IP address blocks: 154.91.67.0/24 maxlen: 24
154.91.68.0/24 maxlen: 24
154.91.69.0/24 maxlen: 24
154.91.70.0/24 maxlen: 24
154.91.71.0/24 maxlen: 24
154.91.72.0/24 maxlen: 24
154.91.73.0/24 maxlen: 24
154.91.74.0/24 maxlen: 24
154.91.75.0/24 maxlen: 24
154.91.76.0/24 maxlen: 24
154.91.77.0/24 maxlen: 24
154.91.78.0/24 maxlen: 24
154.91.79.0/24 maxlen: 24
154.91.80.0/24 maxlen: 24
154.91.81.0/24 maxlen: 24
154.91.82.0/24 maxlen: 24
154.91.83.0/24 maxlen: 24
154.91.84.0/24 maxlen: 24
154.91.85.0/24 maxlen: 24
154.91.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99620 (0x18524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 12:40:35 2025 GMT
Not After : Aug 31 12:40:35 2025 GMT
Subject: CN=6842e1c9-71ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:a7:e7:de:30:9f:b9:22:1b:5b:c8:89:71:
bb:02:1a:d2:87:0b:68:f3:d0:c4:23:d6:cf:4b:d2:
1c:7f:30:ea:ad:f0:7b:c6:f3:8a:0e:0d:ea:89:a5:
7c:f5:73:d7:f2:db:56:e9:13:a0:ad:3d:f7:55:12:
e1:e5:c8:e1:96:a6:82:be:c8:c9:5a:7b:fc:13:c7:
a3:db:a5:52:5d:bc:c8:23:95:94:7c:ef:b1:19:d7:
d5:57:8f:b2:c7:fd:6d:c2:f4:b3:ae:ef:28:30:3f:
e0:f3:70:6a:ef:fe:6f:dc:3b:6e:bf:2a:df:1b:cf:
23:c8:fd:74:3a:3a:f8:de:73:c5:5d:f6:c1:c8:33:
30:e9:67:66:1b:17:bd:55:04:1e:73:5c:d3:4a:10:
8f:8d:ec:a8:af:47:a0:7c:e2:ca:a1:b2:b4:a9:21:
ca:32:2c:63:dd:54:a7:e6:a9:46:f5:0d:4f:da:b9:
80:75:47:4e:2f:79:e7:12:37:0a:13:7a:80:65:a2:
80:88:5e:6d:36:5b:fd:87:d4:ce:4d:f6:34:e8:50:
f3:94:a0:7e:ce:dd:35:c5:a3:c0:9e:fa:6e:48:b8:
ba:ea:c0:26:6e:91:9a:7a:13:87:fc:44:c1:4f:9f:
1b:12:6c:63:4c:f0:47:27:ee:44:0b:34:31:09:30:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B6:EB:C4:FB:16:D6:05:31:E0:F5:06:B9:E3:26:DB:38:D7:4E:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7429B28E42D311F0AA4C5DD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.67.0-154.91.86.255
Signature Algorithm: sha256WithRSAEncryption
bf:ba:38:ab:36:4d:06:bb:67:92:8f:40:c8:3e:72:19:a6:03:
8a:fc:ef:70:b5:c3:bc:cd:b2:0a:08:d8:d7:32:ab:12:e1:68:
1c:a6:9b:c6:e6:f8:c6:f6:35:ee:92:52:52:b1:c7:f1:08:c7:
a6:32:95:c6:71:99:55:7b:65:6c:c0:bc:60:44:95:77:d9:e9:
99:22:91:23:21:e0:ef:ef:28:b2:fa:fa:bf:52:83:bd:83:7d:
e8:06:74:c2:80:d9:5e:6c:4f:a6:23:5a:ec:3e:19:62:2b:81:
7a:48:be:1d:27:d6:75:15:1d:36:47:92:27:d8:cf:b6:2c:53:
44:bc:bd:37:d5:b0:b6:0b:4e:c9:ff:3d:a7:24:0c:07:3e:11:
38:95:93:f5:0e:26:8c:d0:b4:f4:c8:86:b3:e4:a0:19:fa:05:
c2:39:ef:cb:bd:5d:76:b6:98:a0:8e:1c:1d:0c:0d:8b:46:22:
c4:54:e7:a9:9b:dc:fc:d4:ff:cb:4c:c0:9d:f8:83:f3:6e:14:
48:70:03:cf:aa:e1:63:0d:c8:e6:88:74:90:ca:fe:6c:9d:d5:
1e:87:36:fe:4b:81:94:a2:19:35:83:20:c5:98:27:87:93:0d:
e2:6d:4a:d2:0d:a7:a0:4c:01:37:54:b4:90:c2:d4:54:dd:7e:
a5:74:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:58:03 2025 by rpki-client