Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B08670885ABA11F097ED83EBDAE4EC9C.roa
File: B08670885ABA11F097ED83EBDAE4EC9C.roa (raw, json)
Hash identifier: 7QDC3ye48+sovMMZ9adJspvgsdEJ5cf7S1ayYzhmjxo=
Subject key identifier: 53:A4:1E:CE:B0:55:D8:68:C5:54:88:C2:F6:0B:1E:84:10:EB:13:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B08670885ABA11F097ED83EBDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 22:43:54 +0000
ROA not before: Sun 06 Jul 2025 22:43:48 +0000
ROA not after: Wed 03 Sep 2025 22:43:48 +0000
asID: 46071
IP address blocks: 154.209.6.0/24 maxlen: 24
154.209.7.0/24 maxlen: 24
154.210.203.0/24 maxlen: 24
154.210.204.0/24 maxlen: 24
154.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101332 (0x18bd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 22:43:48 2025 GMT
Not After : Sep 3 22:43:48 2025 GMT
Subject: CN=686afc29-bf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:c6:46:3c:da:60:d9:22:21:9a:06:eb:4e:
a4:6c:cf:8e:45:b5:be:8f:c7:84:04:c4:9f:2d:61:
90:15:d5:b1:07:3c:d8:c4:00:d3:fd:52:34:19:c0:
4a:1b:98:f9:65:9d:3b:ef:57:ad:55:88:80:31:af:
ff:c1:ac:ce:77:c4:ed:3a:54:6a:1d:07:56:0e:50:
27:65:ee:98:f9:b5:bc:0b:6c:46:8f:96:7b:03:a9:
e8:00:2c:fb:f2:be:53:de:5b:7f:38:f7:94:46:f0:
20:ec:ec:94:9b:33:7f:96:9e:9f:5d:8e:37:39:dd:
04:c0:6b:ca:cd:46:7e:19:75:37:ca:44:85:62:12:
dd:dd:fb:08:98:49:cf:e3:bb:32:f5:ef:3d:ff:de:
72:8b:38:a7:3e:38:1e:73:1e:82:d5:63:12:f2:f1:
04:d2:4d:7e:fb:b4:fe:f5:88:1e:5f:ab:35:5d:bb:
fc:e7:b3:91:5d:28:6f:8a:81:62:28:00:d5:09:62:
ed:30:57:4c:8b:00:a7:ce:cb:2a:a7:04:fa:85:79:
cc:4d:fe:1e:47:a6:0c:b9:6e:d7:c5:ee:d3:be:ba:
06:c5:11:41:da:25:df:72:3a:dd:51:38:bb:b2:bb:
db:95:85:fb:75:d3:0b:fa:2b:e7:8c:05:71:7b:04:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A4:1E:CE:B0:55:D8:68:C5:54:88:C2:F6:0B:1E:84:10:EB:13:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B08670885ABA11F097ED83EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.6.0/23
154.210.203.0-154.210.204.255
154.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5a:5d:e4:ef:a8:a2:34:5c:b9:23:3d:4a:86:f5:7e:df:91:
11:1f:d5:0a:61:36:32:d1:5f:b8:93:9d:f5:09:06:35:6a:54:
93:71:c5:44:44:9f:cb:87:78:72:26:67:ed:62:66:c5:74:08:
2b:c8:80:8b:82:2f:8d:e4:44:bd:d6:f2:7b:f0:ed:62:f1:b4:
76:c7:3f:53:84:fc:bb:ce:0f:74:b8:ec:02:04:fb:71:8d:93:
8f:ed:bd:83:14:ea:41:e8:b2:88:0c:74:e1:42:98:97:50:a9:
04:dc:db:f1:73:23:50:ca:3c:58:47:2a:60:82:a0:1d:2a:d7:
a1:f6:6f:55:10:dc:d3:35:ce:9b:1a:6f:6c:f8:8e:ad:aa:87:
84:4c:24:cb:ec:cf:10:4a:e6:da:1e:01:9f:85:8b:d7:81:82:
be:7c:5a:0f:36:18:2e:62:41:b9:3a:12:fa:b3:5f:c9:11:2d:
a5:3d:a9:65:13:cb:fa:c0:1a:85:ef:43:1f:01:fd:e5:9d:b8:
43:5c:da:69:0c:57:e4:4d:fe:16:32:dd:b4:69:f5:70:f1:f9:
33:05:f5:54:63:8b:70:40:9e:f8:5d:c8:54:e3:56:1e:05:59:
b4:15:cd:37:a8:97:c4:40:6b:a0:71:8e:09:08:87:7f:8a:93:
e4:e5:0b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:05 2025 by rpki-client