Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D345D0E3D5F11F08413CFE4DAE4EC9C.roa
File: 6D345D0E3D5F11F08413CFE4DAE4EC9C.roa (raw, json)
Hash identifier: ls6RvqMKlicLbwHc7DmBaMxech++Se99qWd/VHyFFpk=
Subject key identifier: 4A:7E:39:FC:97:59:78:42:CC:2D:D5:C6:48:77:EC:50:D0:8B:2B:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D345D0E3D5F11F08413CFE4DAE4EC9C.roa
Signing time: Fri 30 May 2025 14:07:32 +0000
ROA not before: Fri 30 May 2025 14:07:27 +0000
ROA not after: Mon 09 Jun 2025 14:07:27 +0000
asID: 55020
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99305 (0x183e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 14:07:27 2025 GMT
Not After : Jun 9 14:07:27 2025 GMT
Subject: CN=6839bba3-4396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:64:82:7b:a3:b1:3e:22:bb:87:77:3a:8d:
f7:e9:d2:d2:b6:cc:1a:a4:5b:be:e3:b4:63:2e:f5:
01:d9:58:aa:ac:4e:7e:8d:91:ce:bd:40:fd:35:81:
45:e7:70:c1:bf:07:a1:d3:a4:d2:cf:18:5d:9a:2a:
d6:2b:78:89:42:b7:82:4a:c4:13:39:e2:9b:29:8f:
77:e2:85:77:f8:a0:e8:66:ef:d3:98:42:c8:84:0d:
1f:14:42:e4:5b:1a:21:d9:39:42:27:c7:b8:0c:f5:
98:10:93:25:02:fc:18:84:99:4c:0d:d6:d3:c6:5b:
41:4e:88:84:dc:2b:9e:2b:ba:dc:3a:b3:94:fb:d4:
b4:09:e9:8e:72:ee:f1:e6:2a:a4:d3:55:28:4c:03:
d9:3b:28:1c:63:2c:1c:0d:4c:58:65:d2:c4:d1:39:
df:4f:93:c8:90:1a:15:30:45:89:0d:68:e8:b2:e4:
80:38:87:9a:e0:18:c7:ca:1d:46:10:f8:48:d4:bf:
74:a7:5a:2a:82:c0:87:97:0b:be:93:e9:2e:bd:a3:
ef:49:82:07:98:8d:97:58:99:00:7f:7e:f8:ff:3b:
5e:6a:f4:d2:b3:df:83:d0:5b:01:d3:6c:81:7e:7b:
dc:c0:20:88:c9:d3:0e:5a:42:6d:20:35:1c:14:99:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7E:39:FC:97:59:78:42:CC:2D:D5:C6:48:77:EC:50:D0:8B:2B:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D345D0E3D5F11F08413CFE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:3f:c2:42:6d:f0:65:14:53:61:80:0b:ff:7b:01:aa:fb:73:
3f:f2:f5:29:65:be:6e:0d:5a:69:6f:5b:d3:9d:53:be:5b:68:
f7:dc:b0:5e:b0:d8:a1:b0:eb:45:55:d0:32:6e:50:e9:18:e5:
d9:b0:32:01:bc:a8:9e:c3:ae:72:a0:2a:3f:54:27:42:a9:42:
9f:51:61:07:bf:9d:33:ee:0a:48:6c:b6:8f:85:8c:9c:27:81:
65:b3:ec:76:51:da:f7:00:4a:0c:63:26:0d:a0:f1:35:3f:d1:
e9:04:46:22:36:3f:6e:07:89:54:e7:a6:72:cc:99:9a:41:ef:
81:f9:7c:a8:d6:83:2b:6c:70:d9:cc:9e:46:9a:28:80:00:64:
40:36:06:23:99:6a:a4:19:a2:5c:18:0a:f8:c5:ad:0e:8a:c3:
35:42:a9:d3:5c:28:10:3f:73:f5:2f:39:8e:b6:0c:c7:ca:7b:
0e:54:55:d9:c8:ed:1d:ef:96:5b:56:59:71:80:b4:de:56:0e:
ac:ce:c5:26:af:79:52:26:03:22:a0:8a:a2:17:4e:32:7e:c1:
56:f4:b0:50:24:48:96:14:78:be:97:df:3f:f4:82:07:f8:28:
64:3b:26:f0:03:d1:94:0f:73:c5:d9:80:64:ef:d3:47:68:da:
45:64:d9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:39:02 2025 by rpki-client