Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F7BAA5858EA11F0902BB3A2DAE4EC9C.roa
File: 6F7BAA5858EA11F0902BB3A2DAE4EC9C.roa (raw, json)
Hash identifier: zxDPF1ZQHiTKQ8JOkqMDwGMYecjnDwEkDvxvEkWzZx0=
Subject key identifier: 7C:FE:E7:8C:AC:FE:A6:BE:E2:8F:5A:07:CD:13:46:BF:74:91:ED:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F7BAA5858EA11F0902BB3A2DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 15:20:37 +0000
ROA not before: Fri 04 Jul 2025 15:20:32 +0000
ROA not after: Fri 17 Jul 2026 15:20:32 +0000
asID: 55020
IP address blocks: 154.193.192.0/18 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100976 (0x18a70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 15:20:32 2025 GMT
Not After : Jul 17 15:20:32 2026 GMT
Subject: CN=6867f145-e84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:01:10:09:39:e4:96:81:03:93:d4:d9:d6:
b6:6d:9a:ab:47:3d:88:1e:d5:06:89:77:7c:35:3f:
13:26:2e:80:15:de:0b:13:51:72:27:1a:f2:d5:b5:
e3:4f:db:af:21:90:bf:92:21:b9:91:8d:81:26:ed:
35:9b:b2:69:cb:74:32:7f:5c:16:cd:85:32:91:03:
e4:38:b1:c0:fb:a0:28:82:b3:eb:e9:48:1e:fb:33:
00:49:5e:83:11:1e:9d:dd:e6:15:e7:be:6b:3d:77:
3b:b2:9d:13:b2:17:08:df:11:2f:d0:69:e9:a1:f3:
c5:a6:04:5d:c4:22:7e:62:8f:0b:d4:79:22:e1:d9:
c5:b2:63:60:5f:cc:8a:86:32:61:8f:3b:cd:57:6e:
72:be:d6:dc:75:e9:64:48:bb:cf:2c:a0:ed:1b:a9:
ad:67:4c:e3:0c:c0:4b:aa:27:f5:74:cd:bb:16:28:
00:1d:41:50:c4:c3:a7:75:73:4a:a8:5a:2e:d8:aa:
e2:ad:8e:5c:39:50:15:b5:e7:b8:ea:a4:b2:7a:c3:
65:d8:c3:ae:0e:ff:b6:8f:cb:85:f2:45:c1:4b:cd:
58:fb:2e:3f:25:6f:e4:1f:f9:2f:cb:66:89:7b:4e:
78:96:91:db:e2:ed:2f:f9:70:89:01:b0:85:db:af:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FE:E7:8C:AC:FE:A6:BE:E2:8F:5A:07:CD:13:46:BF:74:91:ED:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F7BAA5858EA11F0902BB3A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.202.117.0/24
154.202.120.0/21
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
19:ff:b8:57:bd:e7:1b:03:3e:f1:ce:f9:2f:38:d8:77:a5:48:
8a:32:c5:70:dd:8b:bb:1a:03:47:04:3e:1a:28:c8:dc:59:b7:
fe:41:a0:1f:0c:c2:e1:37:86:07:af:70:f1:1c:04:47:81:1d:
e8:8e:3e:6c:64:22:28:e1:eb:97:10:a0:8b:37:a4:fa:7a:43:
63:3f:59:05:58:b6:6d:13:6b:e8:5d:1a:e9:6b:da:b1:d2:15:
82:e6:7e:7a:19:5b:19:99:40:7b:f5:b8:6f:f0:82:cc:d8:61:
ab:b9:e8:28:29:3b:63:da:ad:f7:43:ca:2b:24:a1:a7:a2:42:
f2:de:fa:c8:bc:b5:d6:a1:97:5b:db:da:52:7c:fe:90:ab:57:
83:f6:3a:d8:f9:cd:87:12:5d:22:24:ff:f9:25:5b:55:41:51:
d9:f6:09:83:2c:5f:ad:4f:4f:5e:0f:34:d9:04:e5:cd:e9:c1:
41:60:99:28:fe:d5:cf:1a:8a:de:0c:7b:ee:28:6d:71:c8:63:
66:f9:f7:0f:73:2a:ed:fb:e8:05:a6:21:a6:eb:06:aa:6a:18:
6c:4c:cb:b2:38:93:3f:35:04:8e:c6:5f:b2:4e:81:16:bf:6b:
2c:f2:8a:a5:c3:23:8e:49:23:e0:5e:e6:85:8d:75:58:19:37:
0b:6a:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:05 2025 by rpki-client