Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26157C384EA711F0A71525E6DAE4EC9C.roa
File: 26157C384EA711F0A71525E6DAE4EC9C.roa (raw, json)
Hash identifier: /FjeTpRuJdf3wj7Jfx8c6yxRdag7WHJfZpAt2xui2KI=
Subject key identifier: AB:78:AD:A8:D0:5D:27:E5:93:F8:5E:36:5D:93:D4:F6:EB:3F:2E:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26157C384EA711F0A71525E6DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 13:53:45 +0000
ROA not before: Sat 21 Jun 2025 13:53:41 +0000
ROA not after: Thu 31 Jul 2025 13:53:41 +0000
asID: 62240
IP address blocks: 154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.194.117.0/24 maxlen: 24
154.195.113.0/24 maxlen: 24
154.195.141.0/24 maxlen: 24
154.195.142.0/24 maxlen: 24
154.196.68.0/24 maxlen: 24
154.196.70.0/24 maxlen: 24
154.196.76.0/24 maxlen: 24
154.196.77.0/24 maxlen: 24
154.196.78.0/24 maxlen: 24
154.196.79.0/24 maxlen: 24
154.196.80.0/24 maxlen: 24
154.196.81.0/24 maxlen: 24
154.196.87.0/24 maxlen: 24
154.223.208.0/24 maxlen: 24
154.223.213.0/24 maxlen: 24
154.223.215.0/24 maxlen: 24
154.223.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 10:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100312 (0x187d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 13:53:41 2025 GMT
Not After : Jul 31 13:53:41 2025 GMT
Subject: CN=6856b969-672f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:d9:a8:7f:19:40:5e:fa:3b:58:41:a2:58:
1c:dc:0a:a4:73:a2:b0:6a:55:93:8f:81:f0:71:f5:
ca:28:e1:a8:e4:5c:e8:ef:29:a8:1f:d5:e6:f5:a7:
5a:61:8b:07:09:59:ae:e2:e6:53:56:e0:ae:bb:cf:
bb:53:bf:41:ae:bd:1f:b7:ab:83:cb:a3:e4:ed:a5:
70:ff:61:fa:63:84:97:16:ed:b6:c2:0a:5a:da:8e:
65:db:eb:c9:66:4d:01:f2:55:8d:81:e9:46:f1:5d:
57:e6:51:40:e1:82:bc:7c:c4:3b:82:41:5e:ec:8a:
35:d1:74:82:6e:a2:de:2d:0e:7c:62:d1:95:7b:49:
47:40:4f:e2:f9:53:8d:30:ba:e1:9e:b2:bf:a3:01:
8c:25:66:9e:da:36:1e:7a:0e:1c:7c:2e:ca:9c:80:
95:8f:94:ec:97:a6:e4:a2:a7:90:85:7a:ad:b3:d5:
27:eb:02:e7:94:53:22:11:7d:69:f3:9a:64:72:68:
1e:85:52:cc:c1:0d:7f:6e:b0:78:e8:aa:57:a0:15:
81:4a:66:77:19:3b:33:49:23:01:68:7d:b2:0c:38:
21:fb:18:4f:cd:63:b0:6a:33:e3:5e:2c:b6:51:67:
ce:81:54:43:bf:24:0a:b9:69:d8:df:3a:f9:b3:de:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:AD:A8:D0:5D:27:E5:93:F8:5E:36:5D:93:D4:F6:EB:3F:2E:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26157C384EA711F0A71525E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.109.0-154.194.111.255
154.194.117.0/24
154.195.113.0/24
154.195.141.0-154.195.142.255
154.196.68.0/24
154.196.70.0/24
154.196.76.0-154.196.81.255
154.196.87.0/24
154.223.208.0/24
154.223.213.0/24
154.223.215.0-154.223.216.255
Signature Algorithm: sha256WithRSAEncryption
93:38:36:e8:87:2d:50:74:d9:81:b9:a2:6d:7c:74:ad:52:ab:
4a:ea:0c:a3:a6:b3:3c:45:39:b2:48:1a:7a:31:22:fe:0c:0a:
cd:83:53:23:57:c2:e0:6d:98:b9:94:85:90:ae:5e:f5:2d:04:
2c:f9:50:60:13:d1:2c:50:bf:d6:52:c3:f4:f1:08:66:9c:0c:
92:92:db:44:5b:33:78:65:9e:c0:09:56:d7:cc:97:e2:c3:29:
77:b3:1b:a9:14:c0:6d:49:78:79:7c:d6:54:99:32:6f:91:ac:
32:66:88:5d:08:95:e2:1c:26:e8:9f:79:90:d3:ae:48:e7:4e:
4c:bc:36:87:df:11:06:59:17:1c:09:d1:51:7b:c7:cc:db:38:
e1:21:19:d9:f3:f1:eb:b6:e6:53:8d:73:42:40:8e:1e:03:a2:
f6:85:c3:1a:8f:a7:b6:ca:e0:6d:75:1d:de:0f:77:50:96:24:
44:e8:e2:e1:95:5e:ab:1f:95:27:bb:bd:92:7a:48:4d:65:28:
e1:20:ae:69:2e:85:05:96:b9:66:ff:d6:8f:c2:44:e9:4d:1d:
ce:1a:9b:37:ea:b7:f7:af:58:15:74:61:8b:ce:57:70:c2:76:
30:e9:0e:32:15:63:39:35:ae:ac:8e:1a:c8:e2:a8:b2:d4:39:
66:10:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:41:03 2025 by rpki-client