Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA2F86EC7F5E11F09AC078AEDAE4EC9C.roa
File: BA2F86EC7F5E11F09AC078AEDAE4EC9C.roa (raw, json)
Hash identifier: CkwFj46+ZOuQ4hvZ8t1jR02LCnHAHpszwlwM1PyZHbs=
Subject key identifier: 23:BD:F7:6D:E0:87:50:0F:DE:90:E5:9E:2A:F8:06:7D:21:19:C9:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0194BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA2F86EC7F5E11F09AC078AEDAE4EC9C.roa
Signing time: Fri 22 Aug 2025 13:48:48 +0000
ROA not before: Fri 22 Aug 2025 13:48:43 +0000
ROA not after: Thu 01 Oct 2026 13:48:43 +0000
asID: 142629
IP address blocks: 154.82.130.0/24 maxlen: 24
154.82.131.0/24 maxlen: 24
154.82.151.0/24 maxlen: 24
154.82.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103614 (0x194be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 22 13:48:43 2025 GMT
Not After : Oct 1 13:48:43 2026 GMT
Subject: CN=68a87540-405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:2d:17:4e:2f:b6:95:a6:f1:08:86:ba:cf:
98:5e:d6:97:8e:3b:16:2b:4a:a9:49:ef:a1:ea:30:
d5:06:63:a3:22:84:dc:7b:36:98:be:c5:e2:5e:ba:
b3:ff:83:80:71:3f:91:b4:05:4e:85:6f:07:66:6f:
ea:e6:64:2f:fe:8f:75:25:59:a6:ef:b6:37:f4:f2:
ed:9a:70:18:ec:2a:b7:4c:0e:1c:f1:d3:45:37:01:
a4:3f:ed:fd:c7:c0:fc:d2:65:d1:d6:7a:1a:32:a3:
f1:83:8a:17:b9:52:9f:eb:67:dc:3f:c3:ee:31:6b:
dc:b1:f5:bf:2c:cb:1c:e4:f6:75:95:48:d9:b4:d4:
a6:04:1e:20:6d:13:cb:42:31:48:a5:17:5b:bb:75:
d7:e6:e7:c4:ef:67:30:00:66:21:87:54:cf:5f:fd:
11:a8:9c:18:58:f4:63:de:ad:2e:81:b0:2d:3a:f7:
87:95:92:57:b8:af:ac:d7:15:66:05:bf:33:90:54:
17:6e:34:86:85:86:cd:a2:a7:9c:b3:91:dd:3c:c3:
08:b0:3f:a2:4b:6f:e9:6e:0e:d7:1a:0d:2f:3a:52:
f6:a4:f6:0d:23:2a:4a:6c:26:a0:ce:bd:c7:ca:b2:
bf:d1:ba:09:8d:5a:20:30:64:8a:1d:40:9d:b7:95:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:F7:6D:E0:87:50:0F:DE:90:E5:9E:2A:F8:06:7D:21:19:C9:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA2F86EC7F5E11F09AC078AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.130.0/23
154.82.151.0-154.82.152.255
Signature Algorithm: sha256WithRSAEncryption
9b:98:31:a9:20:9d:59:6d:3f:b8:31:60:28:e9:a8:ba:5b:b7:
1b:80:39:a3:8b:d4:02:1a:41:b7:2b:db:44:66:b4:7a:b6:8a:
bc:fc:70:ab:0b:3e:42:a9:81:3e:af:dd:79:b6:61:3f:01:ee:
2f:92:65:24:4d:89:9a:08:63:5e:ce:39:28:3e:9b:d5:07:38:
88:ad:52:f9:3b:fc:43:3f:17:b8:a5:b8:ff:b1:87:14:aa:cb:
91:d4:56:c5:0c:23:76:04:73:7c:db:86:46:c8:b5:71:c4:66:
5e:4c:99:06:77:cd:78:4b:91:fc:4d:40:0f:9e:6e:d5:46:83:
49:4b:36:5b:c0:4a:50:4e:8c:2c:7d:39:23:ec:3e:3f:94:40:
07:32:45:83:3f:e5:ef:22:3d:6a:7d:96:89:26:21:4e:ed:35:
02:30:e5:64:a0:66:7d:aa:f4:f7:68:c5:fc:b0:92:c6:6f:3c:
c7:6c:14:14:9e:52:91:e1:dc:bb:53:d9:57:d0:8f:bf:bc:c5:
eb:22:10:8a:68:ad:13:c5:80:4f:56:4e:ed:7e:93:f6:02:b7:
b9:1b:1f:fe:67:19:ca:34:b2:4f:c6:d4:a7:aa:cf:d7:ac:80:
30:4a:4a:ed:a7:d8:cc:77:26:0b:ca:6c:92:4f:34:e8:7a:f1:
28:04:07:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:05 2025 by rpki-client