Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EBAD1DA4EA811F085C4BFECDAE4EC9C.roa
File: 1EBAD1DA4EA811F085C4BFECDAE4EC9C.roa (raw, json)
Hash identifier: OlpHKcIN6j7bwJobxR5eoY/LABmhEbMQTp8VzlY2Z0U=
Subject key identifier: 54:2F:44:01:FF:98:55:8C:B3:B1:36:D4:3C:95:BA:C6:E3:D6:D3:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EBAD1DA4EA811F085C4BFECDAE4EC9C.roa
Signing time: Sat 21 Jun 2025 14:00:42 +0000
ROA not before: Sat 21 Jun 2025 14:00:38 +0000
ROA not after: Thu 31 Jul 2025 14:00:38 +0000
asID: 62240
IP address blocks: 154.223.209.0/24 maxlen: 24
154.223.210.0/24 maxlen: 24
154.223.211.0/24 maxlen: 24
154.223.212.0/24 maxlen: 24
154.223.214.0/24 maxlen: 24
154.223.217.0/24 maxlen: 24
154.223.218.0/24 maxlen: 24
154.223.219.0/24 maxlen: 24
154.223.220.0/24 maxlen: 24
154.223.221.0/24 maxlen: 24
154.223.222.0/24 maxlen: 24
154.223.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Jun 2025 17:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100314 (0x187da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 14:00:38 2025 GMT
Not After : Jul 31 14:00:38 2025 GMT
Subject: CN=6856bb0a-d9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:da:e3:47:49:2a:ab:c9:fc:f8:5c:04:34:
40:dd:2a:28:c2:31:3f:93:28:ee:96:c5:a6:c5:64:
1b:0b:48:3f:91:8d:09:28:4d:01:79:61:43:de:82:
36:59:c1:9c:75:82:29:02:9e:1c:f4:69:4c:35:3f:
54:9a:af:7d:58:93:6d:95:c5:d2:25:28:0c:81:71:
b9:bd:b6:52:a7:36:9f:15:99:8e:1b:42:b0:62:b4:
82:ff:1b:31:8a:49:f5:60:27:1d:ca:b8:77:1e:08:
1f:38:93:2d:c2:92:a4:df:b5:63:a7:58:28:c8:e5:
2d:6c:38:82:7e:ee:88:d7:3a:3a:eb:e6:f6:8d:e6:
4e:89:f7:63:ce:fb:ba:e2:44:e0:48:97:9d:3f:64:
14:d4:eb:53:60:cf:ce:12:dd:9f:30:47:ed:54:6a:
e5:8e:28:ce:25:21:81:d5:41:b6:48:25:29:fc:f9:
4e:83:3d:c3:da:15:7b:8c:1e:49:6b:ac:26:a1:7d:
77:a9:e8:0b:1a:0a:07:4a:2a:e4:d5:5e:d9:c7:59:
3f:06:f3:6e:5c:2b:3e:83:37:02:f1:90:52:e1:04:
70:73:33:7e:a8:da:ab:18:b5:27:a1:aa:02:14:76:
4a:af:b3:56:b2:de:63:9f:e6:f0:f3:67:e3:b0:a0:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2F:44:01:FF:98:55:8C:B3:B1:36:D4:3C:95:BA:C6:E3:D6:D3:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EBAD1DA4EA811F085C4BFECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.209.0-154.223.212.255
154.223.214.0/24
154.223.217.0-154.223.223.255
Signature Algorithm: sha256WithRSAEncryption
a4:d6:5e:97:71:fd:f0:7f:4a:1a:f7:b8:03:1f:79:b4:09:45:
af:b7:d5:5f:dd:f2:f5:00:78:ae:d4:94:7f:a1:36:9d:3a:42:
49:b3:d8:88:fe:3d:6f:c9:0f:a0:5c:f5:4f:5d:0d:bc:7e:87:
fa:bc:3b:90:44:82:c4:47:11:09:89:a6:2b:b0:69:91:5d:9b:
75:9f:87:2d:b2:2b:a9:73:3b:db:be:bd:c2:cc:7c:50:8f:66:
1b:7e:9a:03:85:d6:f6:1c:b7:63:81:78:a6:3c:bf:c2:b2:66:
74:d1:57:07:f5:2f:3a:26:d2:d0:1f:9a:ff:3b:2a:ca:54:30:
71:1b:92:79:6b:26:2b:11:56:55:6f:da:50:e1:ee:00:94:07:
d1:93:0c:28:69:80:cc:1b:91:99:ac:de:60:d7:ba:e2:c0:2a:
42:df:87:3b:e8:b3:4d:bd:32:31:85:0c:30:32:29:f1:8f:88:
65:f5:81:9a:71:9d:1b:2f:69:33:50:93:38:e4:f5:4f:60:f0:
1a:3d:86:4b:d9:a8:38:e6:ed:83:da:89:ba:25:bc:ac:a7:4a:
d0:78:ed:e7:23:8d:25:4c:57:58:f0:aa:0f:74:09:af:4b:46:
3e:95:63:c2:0c:87:d8:c1:fd:ef:c9:20:b7:16:c5:87:c3:c0:
59:ab:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:35:39 2025 by rpki-client