Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC7F98CE3A0311F092638E95DAE4EC9C.roa
File: BC7F98CE3A0311F092638E95DAE4EC9C.roa (raw, json)
Hash identifier: ckNgE0KIxUEBUd/ooHMxcS8Gdn4aNpUD4MWie4Sr84U=
Subject key identifier: 38:BB:17:D2:F7:63:6F:39:50:68:24:36:98:22:1F:17:62:ED:B2:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0182C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC7F98CE3A0311F092638E95DAE4EC9C.roa
Signing time: Mon 26 May 2025 07:33:37 +0000
ROA not before: Mon 26 May 2025 07:33:33 +0000
ROA not after: Sun 29 Jun 2025 07:33:33 +0000
asID: 59642
IP address blocks: 154.83.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99011 (0x182c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 07:33:33 2025 GMT
Not After : Jun 29 07:33:33 2025 GMT
Subject: CN=68341951-6984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:f6:cb:df:66:06:c7:c1:67:82:20:69:f7:
9f:5d:8d:2e:f4:18:fb:b6:ef:b5:16:b1:9d:5b:19:
9a:b9:73:10:90:55:ca:fb:38:b0:2e:cb:ba:f4:22:
3f:0a:b6:bc:be:23:57:fe:70:07:62:bb:80:ce:8b:
92:5e:f7:9e:11:81:cd:02:52:69:1c:80:d1:ba:a6:
16:68:b3:95:86:39:f9:db:e4:b5:76:28:ee:bd:9a:
29:b8:1c:dc:8f:d1:42:17:4c:f2:78:48:3b:9d:1d:
2b:93:c0:b0:78:60:2f:9c:4f:54:f7:43:4a:9e:c6:
d7:4c:77:e1:4b:5d:e7:d3:dc:35:ad:b5:02:02:69:
76:07:11:29:52:29:80:4a:7c:19:01:b3:92:50:6c:
45:c6:c0:52:1b:67:06:ca:4d:33:6a:c4:57:62:0c:
18:7f:67:49:23:9e:c3:b0:48:a1:bd:fb:01:4d:66:
09:67:8d:d5:f9:f6:c9:38:ab:2a:05:63:39:b1:1c:
0f:cd:25:40:d7:63:61:ce:5a:04:15:ee:b3:5f:04:
20:cc:aa:7f:a8:68:76:37:10:7a:62:48:21:06:f3:
68:ed:6a:04:15:b6:c7:ee:43:76:9c:a6:0c:4b:5a:
5d:28:56:d1:d5:bc:72:8e:c4:00:7c:59:e0:e0:35:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:17:D2:F7:63:6F:39:50:68:24:36:98:22:1F:17:62:ED:B2:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC7F98CE3A0311F092638E95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b6:64:be:03:fb:83:be:9c:b9:74:7e:fd:3f:05:9b:18:08:
d5:25:85:9f:32:3b:6b:55:16:e4:db:93:5c:18:d3:be:f6:60:
5a:20:70:f3:25:fb:8f:49:46:5d:e9:8a:7d:d0:f4:b4:9f:ea:
64:8e:07:a5:90:b3:8b:74:92:25:c3:4b:0c:56:f7:a4:95:ea:
26:12:9e:bd:ea:ed:b9:04:46:62:83:31:0c:a8:19:06:c7:45:
32:81:75:e0:a7:eb:d2:5e:41:13:1a:f5:53:aa:d4:4f:86:79:
99:9a:01:3c:a8:bc:6a:4d:18:28:88:a9:1e:30:d2:35:ca:6d:
ec:46:eb:7e:0d:bc:0c:e0:07:5c:01:d6:4a:09:17:95:3c:6c:
72:95:31:8a:95:8e:9b:8a:7c:0a:78:c8:9a:56:2c:c6:38:61:
2d:72:52:97:30:f4:86:7b:f6:f1:17:2f:85:68:7f:4c:ec:4f:
4d:5c:b8:0e:1f:93:e9:9c:0f:82:d2:5f:88:64:c7:b5:54:77:
9f:4a:dc:17:2a:56:e7:09:a8:f6:05:8d:7d:32:13:8d:1e:fe:
a1:40:e6:9d:12:cb:49:05:dc:e8:1a:bd:a6:1b:d1:52:dd:22:
f5:6b:ff:72:82:b3:9b:9c:e9:76:82:88:f0:0a:40:e1:ca:69:
02:0f:9a:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYLDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTI2MDczMzMzWhcNMjUwNjI5MDczMzMzWjAYMRYw
FAYDVQQDEw02ODM0MTk1MS02OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsij2y99mBsfBZ4IgafefXY0u9Bj7tu+1FrGdWxmauXMQkFXK+ziwLsu6
9CI/Cra8viNX/nAHYruAzouSXveeEYHNAlJpHIDRuqYWaLOVhjn52+S1dijuvZop
uBzcj9FCF0zyeEg7nR0rk8CweGAvnE9U90NKnsbXTHfhS13n09w1rbUCAml2BxEp
UimASnwZAbOSUGxFxsBSG2cGyk0zasRXYgwYf2dJI57DsEihvfsBTWYJZ43V+fbJ
OKsqBWM5sRwPzSVA12NhzloEFe6zXwQgzKp/qGh2NxB6YkghBvNo7WoEFbbH7kN2
nKYMS1pdKFbR1bxyjsQAfFng4DXVnwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDi7
F9L3Y285UGgkNpgiHxdi7bIiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQzdGOThDRTNBMDMxMUYwOTI2MzhFOTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlPSMA0GCSqGSIb3DQEB
CwUAA4IBAQAttmS+A/uDvpy5dH79PwWbGAjVJYWfMjtrVRbk25NcGNO+9mBaIHDz
JfuPSUZd6Yp90PS0n+pkjgelkLOLdJIlw0sMVvekleomEp696u25BEZigzEMqBkG
x0UygXXgp+vSXkETGvVTqtRPhnmZmgE8qLxqTRgoiKkeMNI1ym3sRut+DbwM4Adc
AdZKCReVPGxylTGKlY6binwKeMiaVizGOGEtclKXMPSGe/bxFy+FaH9M7E9NXLgO
H5PpnA+C0l+IZMe1VHefStwXKlbnCaj2BY19MhONHv6hQOadEstJBdzoGr2mG9FS
3SL1a/9ygrObnOl2gojwCkDhymkCD5rV
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:08:35 2025 by rpki-client