Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88D1A318491D11F08B22F3CFDAE4EC9C.roa
File: 88D1A318491D11F08B22F3CFDAE4EC9C.roa (raw, json)
Hash identifier: PmtLdA2nt286ICK+YCMYIw9/Vn+49chbSnkT8kNa/wo=
Subject key identifier: 42:3B:61:17:AA:AC:21:4A:5C:8E:56:DB:B4:C2:7E:47:83:A7:3A:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01869D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88D1A318491D11F08B22F3CFDAE4EC9C.roa
Signing time: Sat 14 Jun 2025 12:46:05 +0000
ROA not before: Sat 14 Jun 2025 12:46:00 +0000
ROA not after: Sat 21 Jun 2025 12:46:00 +0000
asID: 153656
IP address blocks: 154.197.141.0/24 maxlen: 24
154.197.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99997 (0x1869d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 14 12:46:00 2025 GMT
Not After : Jun 21 12:46:00 2025 GMT
Subject: CN=684d6f0d-b4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:cf:a5:8e:bd:fc:d3:1e:e4:6b:30:f8:ae:
a9:e7:df:02:aa:31:5c:3b:fc:66:95:07:5a:70:e6:
6d:e1:de:7f:4d:6c:c8:f7:f3:19:6c:1d:e3:74:06:
2d:e3:78:cd:a7:ef:3d:f5:0c:11:ea:6b:68:90:71:
81:d2:69:74:a2:38:79:ba:92:b7:25:43:5c:e6:ae:
eb:d8:bf:fc:3f:65:c8:26:ce:f6:48:1b:66:21:ee:
bc:84:6b:d1:81:d0:b4:2c:c9:8b:2e:cb:5a:e4:db:
71:38:19:1c:ff:86:e4:1a:87:4b:2b:6c:74:4b:c4:
f2:97:b5:a0:91:ea:b2:35:8e:6e:cd:db:d0:c8:cb:
f9:23:26:ff:df:2c:00:36:d0:8a:5d:fd:07:52:7b:
b4:59:9b:30:ff:67:73:5a:6d:22:db:9b:cb:ec:fd:
06:f1:74:b0:7f:77:ea:5f:02:3e:ab:07:7f:dd:45:
a4:95:32:7b:af:91:06:ba:a0:71:65:1d:2e:46:2c:
9f:f0:2e:46:d4:29:be:27:30:f5:05:4f:7f:27:ea:
6c:f0:13:ce:d5:3b:33:0c:83:57:7d:a5:0a:5d:97:
df:ab:f0:77:bd:aa:63:e3:10:78:c6:d9:62:93:61:
fe:31:b1:a6:7d:ab:1e:94:39:c2:32:af:60:f1:4c:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3B:61:17:AA:AC:21:4A:5C:8E:56:DB:B4:C2:7E:47:83:A7:3A:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88D1A318491D11F08B22F3CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.141.0/24
154.197.154.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ca:a4:02:00:b5:9b:fb:52:d5:05:eb:48:9a:fd:61:21:83:
f8:83:4b:52:91:1b:a7:46:b7:ff:89:a5:b0:70:d0:ee:b6:24:
0c:ea:c8:ea:43:e3:5b:a8:ca:8f:bc:5a:53:51:d0:7b:b9:f9:
72:a8:dc:26:04:14:29:28:28:bb:9e:f8:64:eb:c0:a9:76:12:
57:1a:13:2c:7f:6b:88:14:3d:5b:f1:c6:fa:2c:66:3c:f3:b6:
03:fb:b6:1f:27:de:a3:90:69:a6:72:a1:1b:80:89:2b:e0:b6:
d7:0e:e7:46:db:80:f1:da:0a:fb:42:9e:09:90:61:d7:3d:b4:
9a:d5:23:c3:cd:5e:44:b0:96:39:b0:aa:b1:7d:76:9f:81:13:
08:12:2c:1a:9a:99:69:45:36:ad:51:72:9e:a6:e4:f1:3c:f0:
36:28:95:9a:97:c0:e3:63:df:7a:78:a2:a6:31:86:29:9a:1a:
cc:2c:20:c2:a5:ed:52:db:3d:66:bb:42:07:b0:47:54:39:fe:
d5:4f:dc:34:67:20:13:dd:56:29:f7:65:db:6e:86:f6:8e:bb:
4d:39:ec:84:ec:26:e1:19:d5:d1:94:90:fe:7b:22:5c:21:5b:
fa:91:0a:32:b5:bf:98:1e:cf:25:7b:55:d3:56:90:75:8e:b1:
4e:16:59:95
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYadMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE0MTI0NjAwWhcNMjUwNjIxMTI0NjAwWjAYMRYw
FAYDVQQDEw02ODRkNmYwZC1iNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArXzPpY69/NMe5Gsw+K6p598CqjFcO/xmlQdacOZt4d5/TWzI9/MZbB3j
dAYt43jNp+899QwR6mtokHGB0ml0ojh5upK3JUNc5q7r2L/8P2XIJs72SBtmIe68
hGvRgdC0LMmLLsta5NtxOBkc/4bkGodLK2x0S8Tyl7WgkeqyNY5uzdvQyMv5Iyb/
3ywANtCKXf0HUnu0WZsw/2dzWm0i25vL7P0G8XSwf3fqXwI+qwd/3UWklTJ7r5EG
uqBxZR0uRiyf8C5G1Cm+JzD1BU9/J+ps8BPO1TszDINXfaUKXZffq/B3vapj4xB4
xtlik2H+MbGmfaselDnCMq9g8UyCswIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFEI7
YReqrCFKXI5W27TCfkeDpzp+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OEQxQTMxODQ5MUQxMUYwOEIyMkYzQ0ZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsWNAwQAmsWaMA0GCSqG
SIb3DQEBCwUAA4IBAQCQyqQCALWb+1LVBetImv1hIYP4g0tSkRunRrf/iaWwcNDu
tiQM6sjqQ+NbqMqPvFpTUdB7uflyqNwmBBQpKCi7nvhk68CpdhJXGhMsf2uIFD1b
8cb6LGY887YD+7YfJ96jkGmmcqEbgIkr4LbXDudG24Dx2gr7Qp4JkGHXPbSa1SPD
zV5EsJY5sKqxfXafgRMIEiwamplpRTatUXKepuTxPPA2KJWal8DjY996eKKmMYYp
mhrMLCDCpe1S2z1mu0IHsEdUOf7VT9w0ZyAT3VYp92Xbbob2jrtNOeyE7CbhGdXR
lJD+eyJcIVv6kQoytb+YHs8le1XTVpB1jrFOFlmV
-----END CERTIFICATE-----
Generated at Tue Jun 17 00:01:38 2025 by rpki-client