Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BEEE04E58E911F0AAB50B9EDAE4EC9C.roa
File: 7BEEE04E58E911F0AAB50B9EDAE4EC9C.roa (raw, json)
Hash identifier: uDSx3SE7N24YNiEZkBorHhuXiksAbnYsiuo4fcBIHzg=
Subject key identifier: 93:BC:A6:3D:98:CA:4A:40:4C:57:09:EF:C0:B6:31:21:D5:C9:EF:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BEEE04E58E911F0AAB50B9EDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 15:13:48 +0000
ROA not before: Fri 04 Jul 2025 15:13:42 +0000
ROA not after: Fri 17 Jul 2026 15:13:42 +0000
asID: 18013
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100974 (0x18a6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 15:13:42 2025 GMT
Not After : Jul 17 15:13:42 2026 GMT
Subject: CN=6867efac-018e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:39:15:a3:a4:f4:20:11:1e:62:4e:1a:98:
b1:cd:5a:58:de:77:10:f6:ed:08:77:a6:3b:31:28:
76:2a:bb:97:1d:af:45:6e:fc:43:92:e8:40:a9:d3:
64:67:c7:01:9b:63:1a:78:9d:fc:1e:34:b2:15:a9:
74:54:44:4f:de:f9:11:0f:8a:4e:26:f6:92:22:cf:
03:31:69:7e:d9:df:1f:a1:69:d4:a5:5f:b7:12:19:
56:38:0e:56:f6:c5:46:ce:d9:e6:17:6c:57:f2:62:
d7:1a:1d:54:a7:f4:ac:fb:2d:40:4c:c6:59:4e:a4:
a2:69:89:74:24:1f:78:fb:48:1b:af:03:0a:29:69:
f9:cf:ca:02:c9:19:59:ed:d6:5e:92:6a:02:7d:a1:
be:c0:06:d6:75:ad:07:3b:23:03:c8:f9:40:ec:20:
24:9f:03:ab:3d:e6:df:55:75:e9:56:80:24:d5:5a:
79:c6:d5:8e:7d:b3:3c:f6:55:f1:5d:d9:12:5b:2b:
9e:52:4e:c2:b7:6a:4f:50:a1:b2:04:e1:15:94:18:
39:37:75:d4:7b:bc:3d:ac:93:f0:05:80:f6:cf:ba:
dd:8e:ca:fe:cd:6c:66:73:fe:bd:fe:df:68:2b:39:
58:8b:92:68:f9:64:1b:90:77:7e:20:e6:2d:cb:9e:
08:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BC:A6:3D:98:CA:4A:40:4C:57:09:EF:C0:B6:31:21:D5:C9:EF:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BEEE04E58E911F0AAB50B9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
82:33:00:c9:fe:ff:31:ce:ea:62:45:0e:3b:e0:f0:4a:51:b4:
0e:22:81:80:b4:b2:e6:03:5b:7d:08:7f:2f:69:26:41:54:d7:
f0:13:7f:2a:af:35:55:bc:4b:28:d9:b4:01:c7:84:ab:2f:ac:
e2:6b:5c:d7:c6:76:7e:49:6b:73:32:5c:23:56:2a:0f:43:a5:
fe:5b:a8:13:3a:fe:c6:16:8a:b2:5f:e7:0a:15:77:ac:27:a3:
4f:62:00:06:69:2b:12:99:d6:42:35:b8:d2:88:08:8a:13:3d:
79:5f:1a:84:0f:d8:5b:7e:cc:c6:e5:34:9c:8d:d0:11:a2:74:
a2:a3:27:80:c9:7c:98:2d:b3:52:48:bf:5c:f8:c5:ec:59:9f:
f3:a6:dd:92:50:29:13:b6:02:78:ff:a0:6d:6c:a1:43:57:47:
7f:fb:68:35:c1:e5:a6:c8:fd:5a:74:06:be:ab:8c:bb:3f:de:
dd:f2:49:06:56:34:a8:cd:52:6a:02:78:a4:58:e9:d3:a6:50:
02:cc:53:7b:40:0c:5b:8d:83:5c:a2:21:ee:e1:12:61:b3:16:
d5:a8:23:17:a4:d8:9f:a9:e3:02:13:a0:3a:c2:4d:b7:89:38:
5f:f2:cc:3d:4d:39:3c:f3:2a:51:60:30:8d:35:f0:1d:3c:b5:
14:73:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:44 2025 by rpki-client