Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2ED5F85B4611F0BF8B4785DAE4EC9C.roa
File: CE2ED5F85B4611F0BF8B4785DAE4EC9C.roa (raw, json)
Hash identifier: SBLguAKrwyEXxZPPthcjtjTdyLZ0dUM+59Y7Aslc9s4=
Subject key identifier: 39:2F:59:4D:6C:DA:D6:F6:DB:4E:42:13:66:0E:3A:ED:55:32:E8:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2ED5F85B4611F0BF8B4785DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 15:26:52 +0000
ROA not before: Mon 07 Jul 2025 15:26:46 +0000
ROA not after: Thu 14 Aug 2025 15:26:46 +0000
asID: 203020
IP address blocks: 154.201.37.0/24 maxlen: 24
154.201.38.0/24 maxlen: 24
154.202.91.0/24 maxlen: 24
154.202.101.0/24 maxlen: 24
154.202.103.0/24 maxlen: 24
154.202.104.0/24 maxlen: 24
154.202.106.0/24 maxlen: 24
154.203.32.0/21 maxlen: 24
154.203.40.0/22 maxlen: 24
154.207.32.0/20 maxlen: 24
154.207.48.0/22 maxlen: 24
154.207.52.0/23 maxlen: 24
154.207.54.0/24 maxlen: 24
154.207.56.0/23 maxlen: 24
154.207.59.0/24 maxlen: 24
154.207.60.0/22 maxlen: 24
154.209.224.0/20 maxlen: 24
154.209.240.0/21 maxlen: 24
154.209.248.0/23 maxlen: 24
154.209.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101410 (0x18c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 15:26:46 2025 GMT
Not After : Aug 14 15:26:46 2025 GMT
Subject: CN=686be73c-e4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:87:a0:52:6d:98:c7:e0:01:30:22:54:76:
e1:27:4f:05:16:5a:da:45:c7:a1:1a:72:6c:b6:32:
c5:cb:ac:62:a9:9e:f0:b5:e1:00:8d:44:83:b5:73:
e8:05:77:91:0f:02:b7:1e:a3:91:af:ab:10:52:96:
d0:a0:39:ef:0b:eb:6d:43:64:98:1a:02:ae:31:4c:
f4:32:df:7a:11:e7:4d:ce:9a:8e:42:86:76:93:1c:
a5:d4:2a:18:45:04:93:fd:e1:91:40:a7:e4:4e:02:
c6:8d:89:dd:66:72:13:6f:77:14:34:41:2b:c2:4c:
42:65:95:78:67:97:3b:8c:59:77:76:e2:5f:4d:c3:
25:e3:ff:6a:bd:cb:8d:22:19:2c:7e:99:b5:09:88:
a2:86:80:97:15:c5:f6:1c:67:87:7e:91:ab:da:28:
01:8c:93:f6:22:a2:13:1e:4d:e5:d2:b0:39:30:bd:
cd:bd:8d:e4:94:27:a2:c1:49:6a:8e:f0:6e:0f:e6:
7b:3d:6f:87:1d:de:19:67:67:f1:7f:88:2c:80:e1:
7e:d8:d9:44:01:bd:d2:41:35:97:95:80:4b:44:8d:
fe:69:7d:4c:2a:dc:27:bf:f3:42:71:29:09:e5:8b:
30:d6:c1:c2:94:4a:9e:96:af:6d:aa:30:77:d2:e7:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2F:59:4D:6C:DA:D6:F6:DB:4E:42:13:66:0E:3A:ED:55:32:E8:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2ED5F85B4611F0BF8B4785DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.37.0-154.201.38.255
154.202.91.0/24
154.202.101.0/24
154.202.103.0-154.202.104.255
154.202.106.0/24
154.203.32.0-154.203.43.255
154.207.32.0-154.207.54.255
154.207.56.0/23
154.207.59.0-154.207.63.255
154.209.224.0-154.209.250.255
Signature Algorithm: sha256WithRSAEncryption
51:96:7e:51:1e:ce:87:f5:14:73:5f:88:32:a8:c6:c8:c9:94:
fd:ea:1d:09:bf:39:3b:14:e8:38:e9:8c:72:32:af:a3:bc:b0:
1c:4c:6f:b2:44:52:83:7d:0f:8e:48:04:33:d8:9b:7f:49:d2:
6c:72:e1:6d:58:4f:dd:c5:50:69:64:6b:a7:78:e9:25:bb:85:
80:99:e3:b8:9f:cc:b7:38:61:35:86:32:5f:5c:96:f9:2e:9d:
eb:31:ca:c6:18:e3:a4:da:e2:fd:07:f0:af:3c:10:12:7e:c0:
09:18:6a:22:3f:c3:fa:f5:24:ad:0f:ff:19:b9:3d:34:cc:7c:
2b:50:e3:fb:ae:ff:5e:f7:4d:22:04:10:3e:21:b5:2d:e5:7e:
30:55:43:55:ec:f7:73:2b:8f:9f:01:79:7e:68:73:18:93:c0:
b8:c4:2e:cf:17:40:29:e1:73:d6:d5:4d:17:cc:ea:d5:be:75:
b0:73:4b:27:e5:2b:73:a2:69:ac:82:6a:b4:49:33:06:32:ae:
cc:5b:c9:cf:9c:39:29:c3:30:1e:c8:8e:a8:db:02:9b:bc:bc:
20:b0:14:99:41:51:4c:b0:02:6b:78:a3:cf:46:da:98:83:08:
71:6a:2c:e7:a9:3e:4b:8c:63:54:dd:d6:5f:00:9a:33:68:1f:
3b:5d:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:48 2025 by rpki-client