Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E138BAE407B11F0B6774F9DDAE4EC9C.roa
File: 6E138BAE407B11F0B6774F9DDAE4EC9C.roa (raw, json)
Hash identifier: nA5+dnfApXYZxEj5YMfHVNpTBTRYd1eLRBfKmciWFq8=
Subject key identifier: 63:65:AD:9C:BF:06:57:74:63:67:32:E3:37:59:52:EE:CC:3F:0F:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018483
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E138BAE407B11F0B6774F9DDAE4EC9C.roa
Signing time: Tue 03 Jun 2025 13:05:32 +0000
ROA not before: Tue 03 Jun 2025 13:05:27 +0000
ROA not after: Thu 17 Jul 2025 13:05:27 +0000
asID: 138915
IP address blocks: 154.206.67.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.72.0/23 maxlen: 24
154.206.74.0/23 maxlen: 24
154.206.76.0/23 maxlen: 24
154.206.78.0/24 maxlen: 24
154.206.90.0/23 maxlen: 24
154.206.92.0/23 maxlen: 24
154.206.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99459 (0x18483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 13:05:27 2025 GMT
Not After : Jul 17 13:05:27 2025 GMT
Subject: CN=683ef31c-3758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:ab:94:44:89:c8:d8:0a:b9:a7:2c:51:c8:
dc:52:b2:21:a1:b4:f0:89:b5:f9:aa:90:d2:31:33:
52:b6:1c:fd:43:3a:12:9c:f6:09:42:71:45:52:8a:
7c:17:2d:04:24:ce:d0:7e:63:d3:a9:5d:45:36:53:
ff:6e:d8:fd:9e:6e:ea:0e:f7:b5:93:d9:a9:16:b5:
18:b9:ba:26:fb:be:a8:01:43:12:3d:da:d9:44:19:
79:7c:e9:6c:75:7b:4b:94:1a:c8:01:8c:17:71:d1:
e8:b3:34:bb:c7:3c:b3:fa:0b:e6:e9:3a:ff:9f:49:
91:bb:89:25:4e:e4:12:72:85:00:96:b2:c1:ee:53:
98:e6:ad:a8:20:c3:db:1c:25:bf:50:90:28:10:74:
a6:8e:c0:9d:5e:fc:61:f5:20:b8:b2:d4:bd:59:13:
d0:aa:0c:02:ee:5c:3f:3d:99:d3:3b:72:e0:0e:4b:
2b:fe:b2:6e:c3:be:c0:17:72:93:4b:29:65:69:8f:
5f:74:67:6a:82:bf:e7:a7:6a:b7:43:f1:ad:15:4e:
af:0c:e4:85:a2:8a:4f:4a:42:0d:de:37:b3:b4:66:
7f:21:4d:59:b1:ca:ac:49:b3:e1:ae:f3:02:9a:30:
27:d3:e2:b3:88:f4:13:54:04:19:b9:9f:4c:b6:ac:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:65:AD:9C:BF:06:57:74:63:67:32:E3:37:59:52:EE:CC:3F:0F:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E138BAE407B11F0B6774F9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.67.0-154.206.78.255
154.206.90.0-154.206.95.255
Signature Algorithm: sha256WithRSAEncryption
c5:92:2d:37:9e:ce:9a:4e:cc:8e:01:3e:c5:37:7c:d7:0b:f5:
6a:72:c2:79:f4:2b:c9:52:c9:6a:af:19:ed:cf:22:9a:a2:f2:
69:8f:8c:09:ab:ac:f2:d6:ec:d0:71:1d:5a:32:3f:69:83:b7:
f8:32:40:1c:4a:7a:23:b5:70:62:82:6b:1b:76:35:b7:c0:11:
b7:59:82:4e:de:7d:d4:66:25:5d:69:1e:b3:ca:57:0f:37:d3:
44:27:33:de:0a:f2:ac:f6:a0:f7:b8:16:30:a8:80:c0:3f:46:
ab:47:01:c0:a4:79:f4:d6:89:19:77:7f:e0:a2:63:7d:2d:87:
81:7f:36:2f:15:6f:2e:0e:f6:7d:d0:89:e9:d1:e6:1b:4e:27:
b0:a4:2a:c5:6c:08:ae:dd:2d:8b:2a:27:c9:41:27:a3:8a:d2:
a7:bd:ba:3f:94:50:d5:61:90:7e:52:13:ff:69:4d:99:ae:d6:
04:a8:32:a6:d8:c5:6e:dc:84:1f:00:90:e1:c0:5f:14:f1:20:
93:d4:5b:d1:03:98:da:80:d9:a1:4a:bf:d0:1b:31:39:3c:4e:
24:f1:69:9b:c4:ce:51:ed:ed:3c:18:7c:36:fc:d1:87:2b:95:
fd:46:91:b6:ec:52:95:c9:3a:5f:ff:7e:d3:0f:49:8c:58:5a:
4c:ba:38:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:36 2025 by rpki-client