Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB7E416E439711F0888C3CD7DAE4EC9C.roa
File: EB7E416E439711F0888C3CD7DAE4EC9C.roa (raw, json)
Hash identifier: HG4NzY+CdIBl0bBWjy98nS4JpNoto/CbmglfNyzaxRs=
Subject key identifier: 62:33:19:CA:7C:79:F7:DE:3F:10:5E:3C:DC:DC:7A:E8:28:91:9A:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01855E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB7E416E439711F0888C3CD7DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 12:07:02 +0000
ROA not before: Sat 07 Jun 2025 12:06:57 +0000
ROA not after: Mon 14 Jul 2025 12:06:57 +0000
asID: 203020
IP address blocks: 154.201.37.0/24 maxlen: 24
154.201.38.0/24 maxlen: 24
154.202.91.0/24 maxlen: 24
154.202.101.0/24 maxlen: 24
154.202.103.0/24 maxlen: 24
154.202.104.0/24 maxlen: 24
154.202.106.0/24 maxlen: 24
154.203.32.0/21 maxlen: 24
154.203.40.0/22 maxlen: 24
154.207.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99678 (0x1855e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 12:06:57 2025 GMT
Not After : Jul 14 12:06:57 2025 GMT
Subject: CN=68442b66-da07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:d4:3d:98:01:d7:ba:a7:e5:b4:14:31:d1:
36:3d:78:74:67:cc:be:1c:58:2c:df:6e:86:ae:2e:
bb:43:60:fc:c2:a4:7f:f9:af:20:cf:52:4a:45:df:
db:a9:95:cb:ec:26:61:3d:a6:4a:44:b1:f2:df:01:
fc:79:d5:40:86:3b:55:85:e7:0b:5a:9d:e2:4d:19:
ee:5f:f9:69:b4:29:93:92:c2:e8:f3:34:49:b8:08:
61:89:fa:80:1c:3d:4d:16:52:fd:3a:a8:ce:f4:55:
40:ba:9c:f2:6f:0b:b6:25:94:91:41:c7:e1:1b:67:
86:3f:32:fa:fe:f2:59:e0:36:14:23:fd:df:24:f7:
b7:69:5e:04:46:a0:47:5c:2d:7c:ef:e9:43:5d:47:
5c:e0:b6:13:e0:f5:28:78:96:d5:95:06:63:0b:ed:
f6:d2:ce:52:c1:53:9c:7c:3d:1a:5a:ef:cf:a9:98:
bd:88:04:88:c5:a8:fa:89:30:fb:e0:cd:c0:75:48:
14:bb:57:e6:05:b8:be:ee:a0:02:ab:ec:9a:a1:bd:
2b:45:c8:cb:6a:a8:f9:a1:b4:2b:1b:e6:be:76:cc:
bc:d8:4e:1f:cf:6c:1e:09:d0:21:ed:53:5f:31:21:
bf:ed:96:f2:3d:bc:50:50:83:7d:f8:e8:2e:b0:45:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:33:19:CA:7C:79:F7:DE:3F:10:5E:3C:DC:DC:7A:E8:28:91:9A:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB7E416E439711F0888C3CD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.37.0-154.201.38.255
154.202.91.0/24
154.202.101.0/24
154.202.103.0-154.202.104.255
154.202.106.0/24
154.203.32.0-154.203.43.255
154.207.54.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f4:36:2c:1a:78:7c:d4:12:7a:11:cf:0c:3e:44:16:e8:dc:
85:05:a9:ac:d5:51:2d:e7:d4:f6:24:68:a0:5d:96:5b:0e:c9:
1c:73:5a:c0:5d:0c:52:f9:f3:4d:8b:54:f1:2d:1f:73:09:33:
b5:37:e5:8b:2b:fe:d7:5b:ec:47:e7:1f:95:fc:16:a8:c7:50:
02:01:01:b9:22:4c:26:df:62:bf:aa:e2:18:a8:c5:ab:25:69:
f0:72:54:ca:cc:77:4b:46:a4:07:c7:9f:f9:33:06:53:db:d6:
2f:fd:2a:05:78:34:6e:f0:fb:32:89:d3:9e:d2:48:ec:63:e3:
87:af:77:0c:c1:27:d9:72:42:b8:54:ce:d1:b0:bc:12:5d:03:
85:17:ac:00:8f:71:89:d8:92:4f:1a:fa:05:b0:56:5f:ce:c0:
1c:92:f9:35:a2:36:cc:47:73:53:51:ee:e0:5f:a0:86:13:65:
ca:6e:f5:fc:c1:31:41:33:f7:03:a9:7f:85:ae:34:e9:78:69:
e5:67:47:23:bd:2f:36:aa:4b:e9:d4:99:11:c0:df:37:1a:90:
39:ee:e3:16:5c:0d:78:6a:b2:73:01:1d:26:34:f1:81:17:be:
03:a9:94:fa:94:59:fc:05:de:cd:95:34:8e:10:ea:a7:e0:fb:
71:35:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:59:37 2025 by rpki-client