Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6FE31E5B6E11F0B372D987DAE4EC9C.roa
File: FF6FE31E5B6E11F0B372D987DAE4EC9C.roa (raw, json)
Hash identifier: Z6hnmaHILB+8FpS1Gcgrb1RT1WzezlYE355FD14YB9E=
Subject key identifier: A5:A6:A4:9C:7F:CD:33:AF:43:DE:6E:C8:57:6D:BA:D6:32:3D:D5:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6FE31E5B6E11F0B372D987DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 20:14:34 +0000
ROA not before: Mon 07 Jul 2025 20:14:29 +0000
ROA not after: Wed 03 Sep 2025 20:14:29 +0000
asID: 18229
IP address blocks: 154.210.141.0/24 maxlen: 24
154.210.142.0/24 maxlen: 24
154.210.143.0/24 maxlen: 24
154.210.144.0/24 maxlen: 24
154.210.145.0/24 maxlen: 24
154.210.146.0/24 maxlen: 24
154.210.147.0/24 maxlen: 24
154.210.148.0/24 maxlen: 24
154.210.149.0/24 maxlen: 24
154.210.166.0/24 maxlen: 24
154.210.167.0/24 maxlen: 24
154.210.168.0/24 maxlen: 24
154.210.169.0/24 maxlen: 24
154.210.170.0/24 maxlen: 24
154.210.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101466 (0x18c5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 20:14:29 2025 GMT
Not After : Sep 3 20:14:29 2025 GMT
Subject: CN=686c2aaa-f825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:61:6a:4f:88:02:11:0e:e9:fe:8b:67:a4:
55:03:79:7f:60:1c:14:85:c2:5f:4d:1d:ec:57:c1:
87:3d:78:14:2d:db:ef:bd:f3:0f:5c:f7:3e:c3:c8:
f4:3e:1e:2a:4f:a2:49:6d:20:14:51:54:02:6a:fa:
14:38:99:75:e3:04:56:1a:2a:67:79:b6:31:63:e8:
17:05:71:6e:76:37:b6:e3:8f:89:1a:64:3c:65:e9:
8d:ae:ad:fa:63:15:e6:11:88:dc:ba:ad:e0:68:58:
4a:ff:0a:02:0b:0d:37:93:c3:b2:a9:95:2b:c1:18:
1c:d7:74:f4:3b:07:a5:06:82:27:cf:6b:78:73:bb:
16:26:da:d4:96:cb:59:69:b4:44:23:ac:50:dc:5c:
36:77:96:da:48:84:67:24:0b:ea:7a:cc:77:98:c4:
57:92:fd:a7:8b:1f:b9:74:36:8b:0a:72:e4:ee:37:
00:15:fc:08:52:49:4a:fb:78:7e:83:4c:91:ff:51:
ef:59:a4:87:c3:8a:08:88:56:c0:42:a2:02:dc:81:
63:38:ae:19:c1:75:c3:08:74:18:4c:71:73:7b:fa:
cb:f7:58:0e:d4:b6:d7:fc:cb:97:b4:87:64:2f:a4:
b1:00:bf:f4:c1:3a:d6:2e:d2:61:2e:57:6b:5e:0d:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:A4:9C:7F:CD:33:AF:43:DE:6E:C8:57:6D:BA:D6:32:3D:D5:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6FE31E5B6E11F0B372D987DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.141.0-154.210.149.255
154.210.166.0-154.210.171.255
Signature Algorithm: sha256WithRSAEncryption
0b:fa:b0:e1:99:ec:98:26:2d:c6:8b:43:d8:50:d3:75:6e:39:
fd:38:06:ff:3d:b9:f8:32:35:a6:a4:40:38:9f:ad:d0:f5:6d:
1b:25:48:42:a9:15:77:96:58:00:a0:8f:60:20:6d:82:36:c5:
99:24:7f:7e:b2:bf:0d:99:b4:44:8f:b2:32:a0:f4:58:86:6c:
8b:59:66:ac:df:12:fc:ac:d9:cf:2b:91:0e:8f:40:dc:27:ab:
6a:0a:16:02:9c:d6:e0:a1:82:28:8c:a5:91:9d:92:a6:fd:d5:
5b:cb:b8:15:cd:5c:64:8c:9a:58:71:a7:1e:6f:dd:67:2c:5f:
4c:be:40:cb:a4:87:96:5a:80:a2:33:4b:b7:36:8e:53:b3:86:
c1:59:17:6f:68:62:eb:ac:27:c3:8e:f1:57:2f:0d:c3:b3:fb:
dc:97:0f:3f:e7:4c:91:24:43:80:fe:2b:b7:fb:20:b5:1a:22:
14:8d:42:fb:61:4c:f7:52:e3:16:02:c4:5c:d1:2e:f4:0f:80:
50:c4:40:44:45:12:94:d0:df:99:44:25:e4:6b:ec:5e:a3:10:
61:5c:68:be:be:7a:68:4b:43:0d:d6:13:8c:39:02:86:be:25:
df:93:02:03:6e:2c:35:e0:df:2e:6b:69:2f:41:55:ca:3d:8d:
1b:37:8e:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:35:45 2025 by rpki-client