Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1901EDE59BB11F09CE7DC78DAE4EC9C.roa
File: B1901EDE59BB11F09CE7DC78DAE4EC9C.roa (raw, json)
Hash identifier: TO9KATiIWlasgdEBlsALIjJ4FSheAdFKneFfr/5gVCE=
Subject key identifier: C2:4D:DF:F9:A3:7C:A7:F3:20:D9:28:E6:C0:4B:ED:C2:4F:D4:90:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1901EDE59BB11F09CE7DC78DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 16:18:32 +0000
ROA not before: Sat 05 Jul 2025 16:18:28 +0000
ROA not after: Wed 03 Sep 2025 16:18:28 +0000
asID: 18229
IP address blocks: 154.206.23.0/24 maxlen: 24
154.210.177.0/24 maxlen: 24
154.210.178.0/24 maxlen: 24
154.210.179.0/24 maxlen: 24
154.210.180.0/24 maxlen: 24
154.210.181.0/24 maxlen: 24
154.210.183.0/24 maxlen: 24
154.210.184.0/24 maxlen: 24
154.210.185.0/24 maxlen: 24
154.210.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101148 (0x18b1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 16:18:28 2025 GMT
Not After : Sep 3 16:18:28 2025 GMT
Subject: CN=68695058-0cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:b9:f0:66:98:80:04:93:9d:2e:9b:55:5f:
e8:a9:7d:77:f3:25:62:e8:4b:a3:62:ec:7f:8c:bb:
7b:48:46:53:4e:07:c9:4b:02:8d:79:02:46:63:55:
76:6d:10:7b:de:c0:2b:42:34:27:b7:4d:09:e4:da:
68:a0:72:c5:f9:66:3f:e6:52:ed:c8:40:ee:7d:8c:
0b:a3:07:f0:a9:7c:fb:b9:0f:c5:41:a5:a0:1b:b7:
54:41:cc:ac:9e:77:de:54:63:31:99:65:d4:f5:44:
bc:2b:89:40:83:35:bf:bf:b5:6d:e5:45:db:38:41:
63:7a:6d:3a:96:43:d0:24:9e:68:ef:75:b3:6e:d1:
94:b2:11:1b:8b:6c:73:55:2c:68:eb:a8:b4:7e:21:
1f:7f:47:a2:7c:96:49:8b:6a:5c:6b:32:a9:a4:a4:
bc:96:9c:17:32:96:88:32:a7:ce:1e:fe:9e:ed:f6:
1d:8d:70:d2:89:80:41:5e:37:8f:c5:0c:eb:da:43:
ef:e1:d6:8b:49:22:93:d5:f4:1e:ba:c1:55:03:35:
92:6b:69:2a:bd:22:ce:11:d3:a6:71:6e:c8:29:ef:
b9:96:99:33:c7:c8:a5:6f:f0:6f:32:0a:a8:f7:93:
cf:b4:d8:ad:fb:85:0a:2a:38:ab:ea:90:f6:b7:b5:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4D:DF:F9:A3:7C:A7:F3:20:D9:28:E6:C0:4B:ED:C2:4F:D4:90:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1901EDE59BB11F09CE7DC78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.23.0/24
154.210.177.0-154.210.181.255
154.210.183.0-154.210.185.255
154.210.190.0/24
Signature Algorithm: sha256WithRSAEncryption
86:67:a0:a7:37:87:f8:4f:b8:5c:e4:65:48:72:4b:99:1c:7c:
b0:b6:61:ec:cc:ab:28:a8:40:ac:61:93:6a:19:dd:22:88:16:
58:52:1b:af:71:4b:28:a5:bc:ba:f1:76:9c:30:fd:a7:c1:96:
07:19:cc:4c:1c:7d:19:89:d3:d2:01:73:74:ff:a0:39:c1:8c:
8b:fc:d1:1b:1f:42:c9:39:2f:23:a1:22:21:1d:d9:d9:62:de:
d2:4d:3b:02:db:22:c0:36:15:67:9d:67:c9:ed:d1:47:e6:3a:
f7:2b:d0:76:c7:4b:1c:ec:94:7b:43:20:65:48:6a:ee:03:ef:
2f:c2:2d:47:8f:de:cf:83:66:71:c7:f6:1f:7c:b3:3a:9e:90:
d3:57:0f:7e:7c:cd:e8:d7:b7:c1:5d:47:ab:51:a1:ee:e4:e8:
db:e1:34:35:8b:e4:d5:2f:fe:6d:83:40:a5:39:c7:d6:25:15:
26:eb:a3:8c:d0:17:9c:50:09:4d:e3:eb:a9:9f:e3:a2:34:52:
23:4f:1b:6f:0d:b3:02:df:89:b6:be:ad:5f:91:31:22:42:2c:
e6:3b:16:5e:05:40:8c:7d:f4:bd:30:d2:c8:64:2b:ea:21:87:
2f:d3:ed:fc:98:4c:d9:f2:f8:71:42:89:29:04:59:9e:49:bf:
d3:83:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:45 2025 by rpki-client