Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D6A2E745B7411F0A663DAA8DAE4EC9C.roa
File: 6D6A2E745B7411F0A663DAA8DAE4EC9C.roa (raw, json)
Hash identifier: LLyaS6iXrmPmCEr5FsfnUxr6OCEAsYRiB+0YFmQnFoM=
Subject key identifier: 92:D8:3F:DC:5F:34:BE:F3:79:FE:E7:92:AB:21:21:5B:0E:28:FA:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D6A2E745B7411F0A663DAA8DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 20:53:26 +0000
ROA not before: Mon 07 Jul 2025 20:53:21 +0000
ROA not after: Thu 04 Sep 2025 20:53:21 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.90.224.0/19 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101478 (0x18c66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 20:53:21 2025 GMT
Not After : Sep 4 20:53:21 2025 GMT
Subject: CN=686c33c6-368a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:34:0c:1d:ad:4b:c7:a1:57:ab:79:ad:58:
c6:ea:43:e6:70:93:06:cb:19:e4:68:0e:0c:f8:51:
ae:fc:ca:e8:70:3c:34:9f:7c:24:a2:c3:9a:e6:e1:
ad:a1:a5:46:df:60:4b:29:06:4a:c4:1c:00:a0:f7:
7a:0f:10:e7:b3:af:2b:a0:a3:dc:20:81:01:af:92:
80:59:af:d3:fa:16:2f:3d:c7:db:6f:0f:a5:9b:22:
42:29:7a:df:bd:bd:5f:86:3b:a9:e6:78:b4:c4:df:
b7:31:a3:dc:41:4a:6f:25:50:8d:15:34:77:8f:ce:
35:b4:f4:1e:c0:11:8c:c7:8f:bb:63:35:a9:11:e6:
af:da:c6:39:b4:e7:c8:3d:1b:9c:80:7e:78:33:91:
70:2c:de:c8:55:0b:21:17:db:7c:a3:64:f9:27:4a:
35:28:e1:0f:51:79:68:c4:89:be:26:39:17:cc:b3:
76:1e:24:a4:31:50:1e:53:31:34:3b:72:f8:af:b9:
39:4c:db:ff:b3:da:3a:0e:48:1b:2d:13:d3:d5:85:
e9:3f:35:38:c2:6c:87:c0:ab:77:16:61:79:15:b7:
5d:f1:08:83:c4:98:3a:ca:84:24:ed:15:bd:42:56:
54:5c:49:de:b4:84:67:61:fc:d3:80:4d:aa:17:7a:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D8:3F:DC:5F:34:BE:F3:79:FE:E7:92:AB:21:21:5B:0E:28:FA:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D6A2E745B7411F0A663DAA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.90.224.0/19
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:8c:9f:f7:8a:b1:8b:3c:6a:c8:86:64:70:0e:9e:8a:fa:34:
f9:7d:d0:02:97:5f:38:f9:df:6e:7a:16:67:e3:89:c5:40:a3:
e1:d9:e5:f1:7a:1d:b2:8b:1f:61:c1:dd:cf:e7:50:d7:6f:70:
79:36:b0:f0:be:1d:90:cc:0a:86:cf:6c:9a:96:56:83:2f:31:
24:2c:b9:4a:74:f5:d8:56:2d:37:54:8d:d5:d9:ce:02:c3:b1:
6f:a3:07:a0:0e:95:ba:d2:40:d1:48:06:c4:9c:05:2c:9a:3f:
03:6c:cb:2b:94:2d:dc:d5:92:16:89:4c:7c:c3:a6:96:b6:17:
a8:eb:28:46:16:ca:8e:14:d7:ea:aa:41:30:7f:69:f8:2b:58:
ab:b4:e4:f9:b2:7d:ec:9b:16:00:6b:6d:1f:97:7c:6d:12:80:
7e:5a:4c:fc:f6:a2:a3:96:24:76:ee:63:e9:fd:18:6f:c2:2b:
2f:2f:07:d0:5e:da:ef:bd:44:4d:a0:f9:e4:c5:0d:d3:c0:42:
be:af:7b:18:3a:3b:ea:8b:55:8e:9a:3c:9c:3f:bb:08:70:1f:
a9:2b:55:64:e0:c2:92:d0:65:37:a9:4b:8b:4f:ac:04:da:28:
f3:d5:1f:79:c2:de:be:ab:f6:c3:0c:0d:c2:85:0b:fd:73:52:
7c:28:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:19 2025 by rpki-client