Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/655A52B25E4511F08BDB18D0DAE4EC9C.roa
File: 655A52B25E4511F08BDB18D0DAE4EC9C.roa (raw, json)
Hash identifier: TLRkLT53R98kn9b28QKJlLSUd3Dxiv+t6XBBfsx2tRw=
Subject key identifier: A1:BF:24:34:6A:3B:56:24:E9:D5:20:40:BB:1B:9B:B1:53:52:58:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/655A52B25E4511F08BDB18D0DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 10:54:20 +0000
ROA not before: Fri 11 Jul 2025 10:54:15 +0000
ROA not after: Sat 16 Aug 2025 10:54:15 +0000
asID: 22773
IP address blocks: 154.198.29.0/24 maxlen: 24
154.198.30.0/24 maxlen: 24
154.198.31.0/24 maxlen: 24
154.198.44.0/24 maxlen: 24
154.198.45.0/24 maxlen: 24
154.198.46.0/24 maxlen: 24
154.198.47.0/24 maxlen: 24
154.202.2.0/24 maxlen: 24
154.202.5.0/24 maxlen: 24
154.202.12.0/24 maxlen: 24
154.202.13.0/24 maxlen: 24
154.202.14.0/24 maxlen: 24
154.202.15.0/24 maxlen: 24
154.202.16.0/24 maxlen: 24
154.202.17.0/24 maxlen: 24
154.202.18.0/24 maxlen: 24
154.202.19.0/24 maxlen: 24
154.202.20.0/24 maxlen: 24
154.202.21.0/24 maxlen: 24
154.202.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101722 (0x18d5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 10:54:15 2025 GMT
Not After : Aug 16 10:54:15 2025 GMT
Subject: CN=6870ed5c-adaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:39:65:57:fb:60:ca:12:20:2f:8e:a8:d1:3c:
48:f1:d0:db:29:5e:e9:95:1e:87:f4:74:1e:2c:09:
3f:01:1f:b9:ab:83:e5:20:d8:bb:6b:d5:98:20:35:
18:25:66:e5:8b:51:38:83:fa:c3:75:f3:11:87:1a:
02:42:0f:f7:4d:56:5c:d0:8e:1d:72:0a:38:e1:d0:
de:52:10:f5:cb:16:2b:7e:1e:52:8a:5a:b8:0f:b0:
b7:7b:b5:ce:bd:8d:5b:19:34:d7:21:98:b8:3a:89:
75:0c:91:17:9c:39:df:12:37:a4:e0:4f:aa:63:3e:
65:b9:39:e4:d2:f5:c5:6d:cd:3a:0c:1d:49:8f:57:
99:a9:1a:ce:ee:7c:ec:d3:33:3f:55:e7:d7:82:ea:
d5:48:e0:ad:e5:a5:c9:58:9e:32:d3:4a:78:a7:58:
cf:61:21:c4:92:d3:e2:c4:2a:c3:68:6e:9e:04:3b:
fb:b4:04:a1:39:47:07:00:65:31:2e:97:e6:a5:8d:
4b:1d:e6:ac:0b:c2:1d:a5:d0:49:41:78:d0:41:ec:
df:28:94:30:98:10:de:9b:11:1b:6f:2e:fe:e0:6a:
4b:87:3d:cd:22:ac:c7:07:0c:63:a8:2b:b5:2d:ed:
92:46:e7:50:81:95:dc:7d:a3:f8:f3:8e:d0:44:51:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:24:34:6A:3B:56:24:E9:D5:20:40:BB:1B:9B:B1:53:52:58:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/655A52B25E4511F08BDB18D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.29.0-154.198.31.255
154.198.44.0/22
154.202.2.0/24
154.202.5.0/24
154.202.12.0-154.202.22.255
Signature Algorithm: sha256WithRSAEncryption
1e:aa:c7:ca:c8:46:e0:4d:e2:50:9a:b3:f8:4f:96:05:9f:07:
b1:0a:f7:63:ad:de:13:94:57:b9:90:2f:7b:84:0d:96:ea:7f:
1d:c8:c9:63:7c:e7:83:d7:36:f2:72:35:3c:92:5a:5f:9e:65:
c3:61:04:bd:75:93:2d:91:e6:b0:a8:52:d1:49:f2:51:4c:8f:
a3:3c:0a:c3:52:65:3b:66:cd:90:ea:ff:85:f0:f6:a9:8e:e6:
5d:f5:30:97:68:84:c5:ce:41:da:60:8d:78:e9:89:9f:54:0d:
4e:a8:6e:0a:62:62:3e:f3:cf:84:e3:57:b9:80:6d:55:9f:b2:
7b:f1:f9:8c:d5:5a:d2:31:83:1f:a2:18:e4:be:df:7e:ab:00:
2f:01:35:2f:92:5d:c4:91:c9:f2:c3:03:da:9d:a2:e9:de:a3:
37:2c:ab:6f:37:6b:a8:c6:30:86:3f:2a:fa:30:be:30:ab:34:
69:34:1d:e7:d6:b0:80:89:6e:2d:36:49:7c:77:f6:58:2b:d7:
a9:da:ba:14:cc:a1:1e:3a:83:1b:a4:59:45:3e:15:4f:c8:14:
1c:dc:d7:78:fc:d1:2e:66:88:3b:15:8e:77:67:f3:f7:00:8f:
9a:3b:97:0a:45:a1:8a:30:57:32:66:67:bf:94:96:23:36:4c:
53:bd:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:06 2025 by rpki-client