Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA270ACE478E11F0BB9FAF9CDAE4EC9C.roa
File: BA270ACE478E11F0BB9FAF9CDAE4EC9C.roa (raw, json)
Hash identifier: oIJGBfXIGyr3fBWlfZUkiOA2az3uMGNoYoTLHvNfDck=
Subject key identifier: 05:52:C5:E9:A8:CA:40:74:05:45:75:F8:5A:58:C3:8B:E6:EF:36:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01862C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA270ACE478E11F0BB9FAF9CDAE4EC9C.roa
Signing time: Thu 12 Jun 2025 13:11:19 +0000
ROA not before: Thu 12 Jun 2025 13:11:14 +0000
ROA not after: Mon 16 Jun 2025 13:11:14 +0000
asID: 54600
IP address blocks: 154.91.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 13:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99884 (0x1862c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 13:11:14 2025 GMT
Not After : Jun 16 13:11:14 2025 GMT
Subject: CN=684ad1f6-1e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:d9:88:a6:e6:47:7a:f6:54:1b:e2:7a:32:
cc:b2:30:29:23:f6:1a:96:ec:b8:8c:22:1c:b8:3f:
8f:d2:12:5f:b1:be:59:0c:89:4d:8a:73:92:dd:1f:
d1:53:61:45:87:59:57:4b:5f:c4:f7:c4:c3:dc:49:
c2:96:00:9b:e0:e2:c8:01:c5:2a:a0:c5:e7:d8:79:
f6:0d:b5:93:e1:cf:ab:5e:f6:a0:be:fa:2e:32:1e:
c0:87:ee:92:c2:00:f4:90:5c:d4:be:69:bc:82:0c:
23:4c:25:bc:3a:f7:da:76:61:6e:05:76:d4:9a:44:
1a:d8:de:cd:2e:c6:0b:fb:b1:a1:a7:72:a9:6d:ab:
e0:f7:43:77:cf:a1:46:9d:db:d7:9b:78:8c:e7:05:
1a:70:25:82:00:cf:fa:8c:c7:5f:40:d8:f1:6f:b5:
5c:44:1f:82:0e:4e:9a:18:32:1b:2f:37:d0:1d:5a:
ff:5d:a5:59:f0:2b:22:c1:fd:9e:e6:3e:dc:22:21:
39:66:81:59:27:7d:1e:7a:ab:63:25:99:98:08:4f:
b9:9a:d0:bc:20:e1:c2:9b:e1:4c:7d:08:65:be:20:
fc:55:6e:49:09:d4:b8:26:23:9b:92:f0:ac:7b:2f:
d7:f0:43:47:85:1b:dc:74:e2:4d:67:5c:d6:9c:08:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:C5:E9:A8:CA:40:74:05:45:75:F8:5A:58:C3:8B:E6:EF:36:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA270ACE478E11F0BB9FAF9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
Signature Algorithm: sha256WithRSAEncryption
14:a7:bb:9f:83:16:f1:ac:a8:99:a8:d9:94:d3:9d:b3:5e:8d:
8a:6c:d2:3c:f9:59:5b:6a:c0:39:f0:91:f7:35:c2:8f:de:66:
4f:91:0a:18:fb:81:f6:7a:d7:7a:50:dc:c3:12:7a:e4:85:b0:
b9:a9:88:09:48:b2:a1:06:e3:5a:b0:9e:42:04:71:3e:68:4a:
36:9b:7f:b7:b1:2e:29:a3:ce:69:2c:b3:2d:ac:a3:91:cc:60:
b8:a4:e7:43:b6:e1:34:88:79:ca:8e:4f:95:d0:e0:0d:f7:74:
06:21:e9:ba:7c:a2:b3:dc:5e:df:96:a7:7e:33:4f:fc:76:01:
62:0f:8a:06:82:33:df:67:5b:c8:81:d4:1b:5c:49:37:ff:29:
d6:55:ce:b6:27:04:07:72:1d:80:e0:1a:73:8c:50:44:cd:a5:
f9:ec:76:f4:41:67:be:e0:62:d5:3e:24:52:10:b6:f9:94:55:
51:e3:c5:66:bf:d4:5e:22:e8:60:28:17:44:86:0b:1d:e5:0b:
5f:fe:2a:a6:ff:a5:d5:8f:ab:f8:79:50:fb:29:85:fe:58:26:
75:9e:cf:e2:1b:3c:09:75:41:48:06:13:04:cd:f0:99:d1:32:
4d:be:a4:d3:24:7e:3b:eb:e0:6c:cd:09:ce:f3:c3:26:20:8e:
21:74:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:17:27 2025 by rpki-client