Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C215F8065CEE11F0B5BA61CCDAE4EC9C.roa
File: C215F8065CEE11F0B5BA61CCDAE4EC9C.roa (raw, json)
Hash identifier: Y4Irj+dr7p+PQbLjyM7PHIa9sktVUgG4/Koaelj8AxU=
Subject key identifier: DF:E7:36:E6:2D:E6:DC:41:C2:98:FB:D0:BD:29:B4:68:63:FF:D4:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C215F8065CEE11F0B5BA61CCDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 18:01:38 +0000
ROA not before: Wed 09 Jul 2025 18:01:33 +0000
ROA not after: Tue 09 Sep 2025 18:01:33 +0000
asID: 395793
IP address blocks: 154.83.8.0/24 maxlen: 24
154.83.9.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.11.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
154.91.152.0/24 maxlen: 24
154.91.153.0/24 maxlen: 24
154.91.154.0/24 maxlen: 24
154.91.155.0/24 maxlen: 24
154.91.156.0/24 maxlen: 24
154.93.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101626 (0x18cfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 18:01:33 2025 GMT
Not After : Sep 9 18:01:33 2025 GMT
Subject: CN=686eae82-6c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cc:0c:a6:d5:8f:16:72:4f:e4:6b:f9:06:79:
85:16:80:45:31:ce:c6:17:11:45:20:1a:01:09:48:
d8:bb:ac:49:40:8d:24:e7:95:04:96:b0:bd:13:b7:
78:a3:0a:12:cc:9b:55:39:16:7b:d2:b9:b0:bb:55:
dc:07:d4:46:b0:f8:3e:53:9b:dc:ac:2d:43:b1:b3:
af:c7:3d:98:a1:86:d1:1e:1f:da:28:3a:14:6a:3f:
64:af:2b:bb:1e:04:75:c4:1f:93:2f:00:01:bb:78:
ed:53:28:70:c5:87:97:dc:54:eb:8c:79:6f:53:8b:
6f:f8:de:08:5a:eb:56:8a:bf:52:fc:90:7a:e1:cf:
3a:9e:46:7f:82:e0:32:30:3c:68:8a:c3:39:af:2f:
04:f5:4e:60:2c:cf:84:a8:34:79:78:62:2b:a6:7c:
a2:1f:81:67:02:c3:2a:4f:c8:70:4e:64:dc:9b:c2:
22:64:bd:44:3f:ce:b3:66:ae:72:35:70:bc:4e:59:
09:34:3f:9b:07:8c:7c:82:e4:93:69:3b:69:82:3f:
37:ea:91:68:84:35:2f:fa:c1:41:dd:81:ac:b8:9f:
4f:0b:61:ca:6c:b9:f5:27:91:80:f8:ad:f4:95:2f:
c6:c2:a2:5d:6d:aa:ce:4d:2e:8a:ee:26:6a:54:6e:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E7:36:E6:2D:E6:DC:41:C2:98:FB:D0:BD:29:B4:68:63:FF:D4:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C215F8065CEE11F0B5BA61CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.8.0/22
154.83.24.0/24
154.91.152.0-154.91.156.255
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:21:d3:7a:e5:da:3d:72:25:45:13:6b:af:d5:73:93:d2:10:
42:af:3b:78:1d:dc:0b:52:23:57:77:83:79:80:17:bd:1a:ca:
b0:d2:ea:5e:0b:91:e0:62:30:a4:50:6d:6b:fb:91:58:75:ad:
97:d3:97:53:8f:19:f1:a7:9e:df:45:ea:31:fe:c3:af:30:a0:
63:46:e3:5c:70:c8:12:36:30:70:ce:33:c3:6a:31:78:92:b9:
58:ea:7f:cf:91:a1:5b:5f:f3:4b:5b:e6:b2:aa:49:40:c8:63:
7e:aa:43:e2:2e:35:0c:f1:f0:7f:a7:bb:ce:9e:5a:56:98:9a:
16:14:36:c1:02:30:8c:18:37:5b:19:33:ab:73:29:1d:b4:a6:
bb:62:67:c2:d1:03:31:81:60:0a:53:14:13:df:d9:f0:dc:d8:
1b:7d:43:f5:c7:56:17:30:4f:7c:ba:2a:f6:2d:ba:62:d8:50:
67:47:6c:1d:62:46:e9:5e:07:98:93:83:46:b3:03:6b:ca:75:
b6:b0:2e:0a:a4:0b:d7:85:aa:09:52:13:c4:6d:c3:2d:bb:9a:
13:e6:90:f7:45:4e:57:85:c5:ac:63:96:a2:c9:e8:2c:d3:16:
6f:dc:56:f1:7d:2f:9f:1e:37:f6:59:c9:9a:c2:b6:4c:5b:34:
0a:b1:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:13:26 2025 by rpki-client