Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07EFEC6688B311F0A7B7797EDAE4EC9C.roa
File: 07EFEC6688B311F0A7B7797EDAE4EC9C.roa (raw, json)
Hash identifier: tUppwGKnGmAOFi314ZMnIM+VCe8MVxB0ccQhRlpNEC8=
Subject key identifier: 6A:57:7D:41:7C:9E:6E:FF:C0:1D:EB:BD:5B:D6:3A:D9:B9:AC:01:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07EFEC6688B311F0A7B7797EDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 10:44:56 +0000
ROA not before: Wed 03 Sep 2025 10:44:52 +0000
ROA not after: Fri 10 Oct 2025 10:44:52 +0000
asID: 203020
IP address blocks: 154.217.0.0/24 maxlen: 24
154.217.1.0/24 maxlen: 24
154.217.2.0/24 maxlen: 24
154.217.3.0/24 maxlen: 24
154.217.4.0/24 maxlen: 24
154.217.96.0/19 maxlen: 24
154.217.148.0/22 maxlen: 24
154.217.152.0/22 maxlen: 24
154.217.156.0/23 maxlen: 24
154.217.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105700 (0x19ce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 10:44:52 2025 GMT
Not After : Oct 10 10:44:52 2025 GMT
Subject: CN=68b81c28-fe27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:0f:a1:79:95:29:30:ce:5d:4c:ba:c5:f8:
d1:42:f3:fd:82:23:b0:a7:89:fb:ae:5a:c3:6b:c2:
e6:75:29:9c:8e:2d:67:09:e4:46:66:52:e5:e1:7d:
c8:7b:03:2b:e5:2f:a0:99:de:93:73:e4:64:93:43:
4c:82:6c:e5:a3:9b:f5:f0:30:8e:c4:35:17:4b:2f:
72:dd:33:36:d1:0f:6d:9a:73:99:d9:2e:5f:ac:fe:
5f:ac:af:b2:da:66:cd:e1:af:f1:2f:78:54:b7:09:
1c:69:ac:d2:44:79:ce:37:33:e6:ce:ea:b5:05:56:
bb:00:7d:be:21:df:dd:d6:45:a8:ab:d3:f4:0f:52:
25:7e:38:2a:44:9b:79:34:7e:b9:0c:c6:89:d0:ca:
c6:6c:0e:46:08:95:53:2f:fe:56:66:e0:cd:34:fd:
91:d0:fb:d6:38:43:b3:c1:b8:78:ef:e8:8c:9f:67:
ca:37:f1:74:63:5d:58:0c:a9:ec:1f:bb:7a:d5:99:
38:a7:87:40:92:3a:fa:6f:43:6a:e5:57:1d:03:2d:
e5:92:14:a5:0d:33:2d:9a:77:ad:ba:12:fb:da:52:
72:31:cb:b7:ea:8c:69:58:c7:90:04:f7:28:b8:a5:
43:90:1b:9a:27:06:16:36:e9:70:42:d2:4d:dd:54:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:7D:41:7C:9E:6E:FF:C0:1D:EB:BD:5B:D6:3A:D9:B9:AC:01:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07EFEC6688B311F0A7B7797EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.0.0-154.217.4.255
154.217.96.0/19
154.217.148.0-154.217.159.255
Signature Algorithm: sha256WithRSAEncryption
0c:bc:22:73:ab:71:06:4c:c5:3c:d9:24:42:df:a6:ab:81:38:
85:d4:15:c5:c6:65:a9:1b:68:91:34:73:2b:a8:89:2e:61:7c:
18:4f:c3:fb:32:b9:0e:40:41:a1:71:61:48:01:b3:4f:8d:ef:
7b:6e:da:87:50:e0:00:25:99:c5:76:54:1e:87:17:40:41:6e:
4d:41:37:be:16:56:9e:1e:01:28:c1:6a:5b:47:0a:4a:68:59:
24:20:75:8c:a0:c2:27:b2:94:da:77:bb:e4:66:b3:01:22:82:
ef:b5:10:37:d2:72:13:72:6c:8b:e8:66:74:28:fc:8a:55:b1:
45:c2:e6:23:fa:39:5c:45:4f:d1:f6:49:08:cb:4c:0e:de:12:
ab:a9:9d:78:4d:23:bb:64:62:7f:05:3b:1f:f6:6b:08:c9:28:
d6:06:7b:12:70:1f:0e:92:f1:dc:d0:fa:9b:0e:d9:4c:87:23:
12:9a:16:43:94:6f:7f:5a:f8:7c:3a:e8:d3:d6:ca:b0:6c:33:
54:29:08:54:30:ff:7d:d4:2d:b8:e4:79:91:e3:cd:e6:90:31:
6c:29:01:e7:1e:c4:aa:98:8a:37:b5:c6:ba:25:a7:1d:34:f5:
3a:d4:4d:79:7a:ed:83:b6:dd:cb:18:d6:8e:23:e2:70:d2:3d:
76:7e:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:38 2025 by rpki-client