Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA566DE6FA911F0B224E6A6DAE4EC9C.roa
File: 6EA566DE6FA911F0B224E6A6DAE4EC9C.roa (raw, json)
Hash identifier: UHzoeV7Ac4ksnKjxt/AfJP+m+rjV6qqBQWMU7BMfRJs=
Subject key identifier: DE:00:68:4D:4E:C1:39:15:25:0A:EF:A8:CB:0B:59:11:26:A6:65:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019040
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA566DE6FA911F0B224E6A6DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 14:03:15 +0000
ROA not before: Sat 02 Aug 2025 14:03:10 +0000
ROA not after: Sun 07 Sep 2025 14:03:10 +0000
asID: 9009
IP address blocks: 154.194.8.0/23 maxlen: 24
154.194.10.0/24 maxlen: 24
154.194.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 06:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102464 (0x19040)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 14:03:10 2025 GMT
Not After : Sep 7 14:03:10 2025 GMT
Subject: CN=688e1aa3-05b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:07:ad:d4:67:5c:6b:8c:93:80:da:a4:6e:
11:90:ef:5d:d5:df:ea:bd:4f:f2:ee:3f:6d:4c:89:
fa:84:79:cd:d9:2b:7c:78:cb:72:82:8f:b1:ad:f4:
fd:d2:9f:fa:fc:e5:9f:e3:95:f8:95:35:8e:93:44:
ec:18:4c:6e:f1:f4:d7:92:d9:7b:15:4e:c9:ad:6b:
79:13:7a:a3:0f:e6:d4:da:39:2f:fa:4b:89:40:97:
52:36:a0:7b:21:e6:db:ab:ed:3f:2a:a9:4d:39:84:
2f:f7:7f:06:18:b6:1a:7c:03:b3:c3:c5:c1:53:e4:
0e:0f:87:4d:de:d6:a1:8b:5a:da:a5:39:49:f4:89:
fa:dd:50:d6:08:7a:d4:e1:28:8d:78:74:f0:90:7a:
33:4d:09:9d:db:0e:c7:b8:16:e1:19:50:31:09:3d:
0b:29:e5:19:80:66:24:fe:78:12:8f:04:be:1e:14:
a1:08:97:aa:f5:c0:48:7d:22:75:37:e2:f7:df:c3:
1a:15:c5:25:25:5f:0b:d1:84:46:38:c1:c5:91:cd:
2b:36:e7:10:49:ab:bb:63:53:dd:8c:e0:50:7e:da:
fa:9e:72:c7:29:ef:14:67:08:78:d2:cb:47:09:76:
84:2f:06:b0:a5:1a:86:51:98:d8:f9:a4:65:52:f6:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:68:4D:4E:C1:39:15:25:0A:EF:A8:CB:0B:59:11:26:A6:65:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA566DE6FA911F0B224E6A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:4f:f0:04:55:1d:50:25:21:49:04:3b:02:23:8c:55:29:71:
2a:4c:34:68:3d:24:a4:44:68:93:96:c6:09:3f:6a:62:cb:94:
42:42:a4:9a:a7:e2:b0:9b:a3:9d:6c:c8:f7:64:ca:3e:19:d9:
48:62:a5:7a:ff:f6:0b:80:8d:41:e9:0b:e0:51:0b:65:9b:aa:
7e:0f:92:19:2a:3a:72:a8:ce:6f:91:27:f2:ef:98:35:fa:89:
8e:1d:99:a7:c3:fd:5c:d7:9d:61:e6:cd:01:22:da:5d:81:53:
85:ef:39:c0:4b:d9:85:4f:b6:b9:21:be:93:1d:f4:d7:53:ca:
9b:3a:95:63:11:b9:8a:fe:5b:15:c5:24:3b:9d:42:d1:19:ec:
76:69:b0:32:b3:65:b2:a2:ff:bd:69:96:49:61:79:24:7a:ef:
e9:d1:65:43:c8:90:a6:07:53:72:3e:cd:ae:b1:68:c9:aa:03:
25:4e:5d:72:bc:33:e3:c3:32:46:a6:b3:84:9e:f8:f5:3e:95:
29:6b:fb:7a:ce:aa:ba:e6:40:48:f5:91:f8:41:1e:ea:37:9c:
fb:dd:d4:28:9b:7c:82:dc:5d:e0:1f:31:83:0d:81:22:a0:f8:
94:c2:b6:3c:6f:a8:69:ed:1d:82:61:1d:e3:dc:d2:34:cf:a7:
bc:48:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:59 2025 by rpki-client