Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB51DAD667D511F0969753AFDAE4EC9C.roa
File: EB51DAD667D511F0969753AFDAE4EC9C.roa (raw, json)
Hash identifier: a1dijd+her9GFrT0u834siwiiQzT7VulE2jNd2uba74=
Subject key identifier: A7:7D:8C:6D:BA:A0:79:98:A9:80:42:59:50:2C:D1:80:8E:81:AE:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB51DAD667D511F0969753AFDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 15:01:33 +0000
ROA not before: Wed 23 Jul 2025 15:01:27 +0000
ROA not after: Sat 04 Oct 2025 15:01:27 +0000
asID: 138915
IP address blocks: 154.93.84.0/23 maxlen: 24
154.93.99.0/24 maxlen: 24
154.93.109.0/24 maxlen: 24
154.93.110.0/24 maxlen: 24
154.93.111.0/24 maxlen: 24
154.93.114.0/24 maxlen: 24
154.93.115.0/24 maxlen: 24
154.93.116.0/22 maxlen: 24
154.93.120.0/24 maxlen: 24
154.93.121.0/24 maxlen: 24
154.93.122.0/24 maxlen: 24
154.93.124.0/23 maxlen: 24
154.93.126.0/24 maxlen: 24
154.93.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102204 (0x18f3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 15:01:27 2025 GMT
Not After : Oct 4 15:01:27 2025 GMT
Subject: CN=6880f94c-d1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:ef:3e:5a:c0:4b:5a:72:cb:f3:19:6f:62:
b4:ea:ca:17:97:e1:34:7f:2b:5d:64:97:d1:9d:84:
5e:90:3c:c9:9d:0c:31:06:91:f2:33:2f:36:6a:9e:
43:90:a5:b2:60:78:56:63:76:e9:a1:ec:ca:09:27:
33:45:29:52:f2:de:d5:ae:00:34:4e:cb:45:91:6a:
50:bf:f4:ab:19:17:6d:4a:16:3c:1f:c4:c5:58:2b:
67:88:ca:fd:76:e4:fd:53:4d:9c:2c:ca:fd:3d:36:
b3:69:07:f0:49:78:00:58:ba:e6:32:07:45:11:3a:
48:ab:00:b5:bf:65:a9:49:bb:d7:46:a7:46:78:47:
86:8a:fb:c5:69:58:d1:b6:b1:81:e2:05:c6:c5:26:
26:4a:50:9e:96:9d:fe:54:67:21:21:45:c0:4d:78:
d4:80:5f:21:0f:23:d1:dc:db:0a:45:94:58:ff:bf:
aa:04:57:98:32:7d:f2:bf:5c:d0:c4:89:05:17:ea:
22:6b:39:e9:53:d0:ec:14:fc:ea:5f:50:3c:4e:42:
17:ee:9a:c1:c8:98:64:36:e2:30:ae:f6:21:95:91:
90:0b:3a:55:64:87:6c:5b:76:e6:fc:9d:c9:b9:60:
e6:0b:0c:ff:32:c1:ef:e0:dc:01:3d:f1:81:b2:74:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7D:8C:6D:BA:A0:79:98:A9:80:42:59:50:2C:D1:80:8E:81:AE:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB51DAD667D511F0969753AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.84.0/23
154.93.99.0/24
154.93.109.0-154.93.111.255
154.93.114.0-154.93.122.255
154.93.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:27:e2:34:fa:c0:40:2a:a4:9d:3b:bd:b6:30:91:52:f3:30:
0b:e2:12:97:d8:03:e7:c0:45:46:7b:0c:5a:dc:39:51:36:78:
28:21:ff:fa:58:f6:be:05:fa:68:9e:7c:57:da:87:da:93:6c:
af:74:8f:cc:b0:6a:8d:d5:75:1d:85:ba:27:b2:92:83:f7:11:
aa:b3:a3:89:4d:ca:c5:f8:73:4c:12:8b:4d:8a:bc:36:ed:3a:
7c:0a:c0:77:f7:c0:a1:5b:09:86:33:d1:fd:81:6e:78:2a:fd:
fc:4b:a1:ae:d5:d9:26:7e:87:d4:59:1f:60:2d:a8:f8:7c:49:
69:9f:c1:47:2f:d7:d8:f0:21:dd:27:0a:76:b5:ed:fa:28:05:
ec:cd:8e:9e:ed:54:b3:c8:a5:09:b4:4a:50:2e:cf:f4:8a:0c:
a0:e8:11:82:4a:89:76:e5:30:ed:7c:95:44:ae:5d:fe:b6:21:
a3:d0:86:5d:5f:83:6e:3b:7a:d8:87:24:a0:aa:1d:bb:2a:34:
5e:70:1c:32:b7:68:84:93:32:ca:c0:20:fa:00:7b:b2:bd:ba:
07:da:91:13:65:3e:f9:c1:2c:b2:72:45:44:1b:20:94:29:89:
2b:8e:8e:e0:1d:84:a1:e6:81:2d:3d:c8:fc:58:97:f2:52:c7:
84:9c:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:47 2025 by rpki-client