Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FA0669C599C11F09BC4ECAEDAE4EC9C.roa
File: 6FA0669C599C11F09BC4ECAEDAE4EC9C.roa (raw, json)
Hash identifier: 16zBQVyTdmuk2igX9qEVYnOZmjmD88wIo/H073JpJ4E=
Subject key identifier: EB:E0:D2:4A:FB:D8:42:7D:B9:56:C7:C5:EB:F9:4E:1E:D2:C4:C7:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FA0669C599C11F09BC4ECAEDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 12:34:47 +0000
ROA not before: Sat 05 Jul 2025 12:34:42 +0000
ROA not after: Sun 17 Aug 2025 12:34:42 +0000
asID: 6079
IP address blocks: 154.210.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101110 (0x18af6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 12:34:42 2025 GMT
Not After : Aug 17 12:34:42 2025 GMT
Subject: CN=68691be7-bd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:27:70:7b:83:e0:f8:fe:ed:31:26:73:03:
26:d2:da:a2:87:e1:32:e0:9e:44:8c:e5:b5:dd:4f:
24:22:37:87:7f:24:c7:5e:d8:80:b1:71:ce:2d:44:
63:68:f8:41:85:be:fe:d4:1a:c9:73:0e:22:b0:33:
bb:25:ae:1f:bb:91:ee:c1:a9:d3:71:87:af:aa:c5:
0a:7b:aa:07:33:cd:83:bb:77:53:30:1c:29:41:c5:
c9:34:d8:92:a7:05:36:03:cb:04:77:5b:a2:b1:98:
f5:b8:bb:ab:bb:be:29:43:a8:f2:9a:37:a3:ef:1b:
1c:1c:01:ae:56:25:45:fc:c4:ac:80:6f:07:98:a8:
eb:af:eb:90:fd:06:fc:76:7d:9a:65:a9:8c:8d:0c:
d8:9f:40:3e:51:63:ed:08:29:7c:cf:21:1b:7c:49:
f7:28:c7:8b:39:3e:5f:bd:2b:fa:dd:53:cc:47:22:
03:d4:b3:e2:30:bd:d7:cd:86:a8:4c:b7:8b:5f:f1:
d9:3d:71:50:b1:7e:5d:1b:21:ec:6b:0c:4b:2d:04:
a3:e5:be:af:34:39:6b:72:3d:ca:42:9e:0e:03:6b:
3c:0f:d3:e4:67:c8:14:bb:9e:9f:1f:f0:fd:e1:43:
d8:29:64:f0:a3:b9:a7:5d:b2:63:2f:ee:c8:39:49:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E0:D2:4A:FB:D8:42:7D:B9:56:C7:C5:EB:F9:4E:1E:D2:C4:C7:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FA0669C599C11F09BC4ECAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.96.0/19
Signature Algorithm: sha256WithRSAEncryption
06:15:09:f5:df:6b:1d:16:10:2b:62:30:4a:04:65:dc:ef:47:
05:4e:f5:c4:b0:38:c2:f2:58:4b:a6:2d:52:3f:15:26:c3:1e:
29:c0:08:e2:e3:00:48:bc:76:51:b0:0f:39:42:a7:3f:3f:56:
25:fd:d3:61:a2:19:1c:db:28:9d:75:b3:57:f6:17:62:dc:20:
8f:ca:15:04:35:9e:89:ca:9f:8d:b5:69:a1:70:25:64:df:50:
42:76:f1:54:44:2a:23:87:d5:a1:a2:db:c5:72:d2:79:7b:45:
df:9c:78:60:81:60:10:3e:ab:44:e8:5d:b7:6d:13:46:35:90:
af:4c:81:aa:6f:c4:4f:9b:8c:ad:b7:07:98:8e:fd:8a:f5:65:
99:c4:cc:c6:27:af:df:3e:12:58:2b:cf:bf:9d:bd:01:13:7b:
98:28:e3:b5:b6:71:bc:17:37:f4:11:92:cd:e8:46:27:43:be:
93:7a:2a:e6:ad:d7:28:d7:86:a2:80:7d:2f:ca:da:09:75:68:
37:f3:82:13:a0:3d:75:47:c8:3d:97:f8:3f:45:45:a3:ec:23:
be:ae:5c:ad:0a:5e:27:f7:ab:5c:1b:54:bb:73:07:60:16:52:
d6:1c:40:c8:18:5d:52:24:19:0e:f8:fe:bf:58:1f:6c:8d:f7:
22:8a:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:41 2025 by rpki-client