Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FEF34725CAA11F0BABC8E96DAE4EC9C.roa
File: 2FEF34725CAA11F0BABC8E96DAE4EC9C.roa (raw, json)
Hash identifier: TWL233e9pWx37FEi3namAZnxU84nrT84jEtOyE35GDM=
Subject key identifier: 1D:47:22:D0:2D:79:D3:86:2C:27:7A:F9:9E:56:25:28:6F:27:26:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FEF34725CAA11F0BABC8E96DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 09:50:47 +0000
ROA not before: Wed 09 Jul 2025 09:50:42 +0000
ROA not after: Thu 07 Aug 2025 09:50:42 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101536 (0x18ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 09:50:42 2025 GMT
Not After : Aug 7 09:50:42 2025 GMT
Subject: CN=686e3b77-0a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:d6:e5:eb:00:ca:c7:da:a6:f0:57:c6:dc:
e9:45:8e:13:c4:e9:69:d5:4a:a2:d1:13:50:92:bb:
63:42:67:ef:f6:e3:8e:db:61:6b:27:d5:8e:81:4c:
05:72:34:7a:b2:3f:69:d2:2b:bf:28:97:69:87:fa:
7c:c4:e7:9e:5a:89:25:16:25:26:77:7a:de:0c:3c:
07:d7:c8:25:b5:bf:d0:fd:ae:1b:3e:43:bb:c0:04:
b3:22:be:4b:e9:b4:6e:e9:a7:a8:c3:5d:d4:97:bc:
8a:24:ad:3b:cc:69:59:9c:d7:e5:ca:51:c0:31:37:
e4:73:5e:e9:1c:3a:1e:15:ec:4b:bf:71:27:ec:5c:
38:87:d9:f6:7f:cb:76:50:74:90:84:30:11:a6:65:
a4:da:1f:c8:24:07:0e:38:d9:dc:51:62:e5:30:18:
de:d2:f7:4e:4c:44:b4:b6:94:9b:da:14:81:ca:f7:
7e:ca:a2:6a:8e:44:29:e9:4a:15:4d:b7:d4:96:41:
7d:98:ff:c9:ef:43:fb:04:89:d1:85:cb:ac:8e:9e:
e2:16:5c:9c:ce:d7:4c:eb:76:b4:aa:84:ff:f1:18:
8d:af:8f:2a:4b:a2:36:3e:b6:76:36:74:1f:57:78:
20:39:f1:56:bc:01:38:45:85:92:c7:de:e4:ec:2f:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:47:22:D0:2D:79:D3:86:2C:27:7A:F9:9E:56:25:28:6F:27:26:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FEF34725CAA11F0BABC8E96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
68:95:49:e7:31:07:87:6e:d8:c1:df:83:6d:6c:1d:9a:76:7c:
e7:93:bc:e9:81:2a:1c:80:9e:b2:39:ad:db:15:1d:4d:e7:1f:
ff:b0:89:6f:3f:7f:54:9c:52:01:4d:ed:ce:ea:f8:53:19:cf:
e7:18:cd:61:36:bb:8a:90:b7:b5:5b:dd:d9:11:f3:04:90:cd:
a9:03:f2:1e:2c:40:75:cc:5b:f8:da:d3:45:74:94:d3:52:7d:
1d:dd:c5:40:88:13:4a:8b:0f:8f:cb:ab:1d:1b:11:3b:7c:60:
26:8b:3a:a4:d0:2f:7f:c8:17:dc:b3:41:72:c8:38:01:e7:ae:
1c:00:21:d6:e1:10:49:c8:27:e2:fc:b6:03:a7:fd:3c:8c:40:
80:1d:6e:12:71:62:6b:fe:8e:1f:d0:92:42:4e:96:07:6a:a9:
96:95:0d:e1:58:24:e4:34:26:d6:06:99:4c:5f:87:96:ba:8d:
93:8e:36:ab:56:fd:a4:cf:76:43:60:23:c7:a7:f3:86:90:45:
2b:0f:2b:68:bd:bc:5d:dc:ca:0a:d8:df:a0:41:fc:6b:e6:5c:
ad:d8:98:74:e0:f1:11:01:07:42:91:cf:ba:70:35:f4:dd:95:
3c:ac:7e:be:00:98:f1:18:94:dd:c8:44:be:04:a0:78:8c:e7:
a8:93:38:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:43 2025 by rpki-client