Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90432F8816B711F0A8C4B0226EB8BCC6.roa
File: 90432F8816B711F0A8C4B0226EB8BCC6.roa (raw, json)
Hash identifier: u1QB3YoDwPrFeiBFP1GJbDD/IkpvdTjPQUh2Mpfmyh4=
Subject key identifier: D0:70:0B:4A:8F:42:FA:D4:89:63:A0:87:54:88:07:64:4B:F3:B2:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90432F8816B711F0A8C4B0226EB8BCC6.roa
Signing time: Fri 11 Apr 2025 09:30:10 +0000
ROA not before: Fri 11 Apr 2025 09:30:06 +0000
ROA not after: Thu 26 Feb 2026 09:30:06 +0000
asID: 45669
IP address blocks: 154.80.0.0/18 maxlen: 24
154.80.64.0/18 maxlen: 24
154.81.224.0/21 maxlen: 24
154.81.232.0/21 maxlen: 24
154.81.240.0/21 maxlen: 24
154.81.248.0/21 maxlen: 24
154.91.160.0/22 maxlen: 24
154.91.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96491 (0x178eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 09:30:06 2025 GMT
Not After : Feb 26 09:30:06 2026 GMT
Subject: CN=67f8e122-05b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:26:ff:8a:1e:7b:23:61:b7:34:fd:e2:35:f0:
3c:5e:c1:2d:c2:33:e8:e1:24:e0:d1:85:b4:03:cc:
88:5b:09:5a:fc:a0:c8:78:b8:26:41:6d:c1:95:4e:
02:96:02:45:56:4d:0b:fc:ba:9e:3c:c3:7d:7a:87:
71:34:2c:45:88:c9:e6:83:cd:be:40:87:ff:30:66:
a6:8d:7b:68:25:ff:3e:5c:1e:8f:26:2c:a3:93:b5:
35:7f:4e:ac:91:75:a4:92:d3:b1:de:68:89:a2:7e:
d7:24:9d:38:a9:69:c1:f0:f0:31:8a:0c:a8:7c:25:
a1:c0:db:70:78:13:22:85:f4:ff:ca:39:90:61:88:
d0:25:a9:15:e9:c5:0d:1f:69:cd:4d:c5:03:71:13:
c9:2d:32:9d:49:a2:c6:7d:ca:c0:d3:90:5b:d5:54:
04:5b:ba:fa:b7:4c:cd:05:66:38:9f:f2:67:73:f8:
28:08:82:cf:a7:d3:88:2b:e5:8d:3b:b8:cb:62:15:
6e:ce:45:11:75:e2:d2:e5:ab:6a:41:8d:f0:ff:29:
fc:a0:88:cc:4a:63:13:68:ef:0d:4a:4b:1b:b3:c6:
df:4e:35:50:d6:5d:6d:19:9a:95:40:98:3f:a6:7e:
07:6b:62:8c:d3:b1:83:63:8d:d3:e8:ae:d3:a1:eb:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:0B:4A:8F:42:FA:D4:89:63:A0:87:54:88:07:64:4B:F3:B2:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90432F8816B711F0A8C4B0226EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.0.0/17
154.81.224.0/19
154.91.160.0-154.91.165.255
Signature Algorithm: sha256WithRSAEncryption
6b:24:08:7e:56:30:68:0b:7c:3f:ec:f4:23:65:18:8e:6a:bc:
60:fd:09:f5:63:0b:fe:49:69:b7:1b:44:7a:e7:16:9d:f9:17:
05:6d:18:8c:a1:11:d4:31:45:14:e3:e4:9b:44:0f:a4:29:1a:
3b:e8:60:06:f9:4b:7d:56:86:b8:56:3b:bc:9f:f2:b9:f4:d1:
69:c8:02:b5:d4:d9:91:21:4b:ce:d2:c9:fb:91:0c:f3:2c:dc:
7b:f8:55:9b:1d:3c:e7:37:14:88:89:3d:4d:bb:f1:2a:8c:20:
bf:1f:ce:3c:81:1a:05:c2:3b:cd:30:43:70:7a:bc:5b:95:81:
02:06:f4:e6:33:a2:e7:4d:69:82:71:d8:af:b2:d2:12:33:2e:
c9:d5:10:88:c6:48:e3:7e:fb:a1:f1:c9:c7:ce:05:e9:4b:dc:
54:6c:a9:f7:61:53:4b:ca:88:1d:d0:1a:c1:2d:2c:37:c1:f3:
80:76:81:ac:55:ad:9d:45:3a:b5:bf:da:e2:04:65:97:0b:be:
a9:12:0a:02:b0:dc:66:46:52:29:20:a3:03:39:52:aa:9a:18:
17:7f:99:e2:b5:91:b8:e9:7a:a7:72:f0:5c:ee:fb:8d:5e:47:
20:30:33:1e:27:27:fe:0c:15:e1:f5:d6:da:fd:e9:4f:b0:01:
81:fd:08:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:41 2025 by rpki-client