Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3335429A460A11F0AD8465BCDAE4EC9C.roa
File: 3335429A460A11F0AD8465BCDAE4EC9C.roa (raw, json)
Hash identifier: blrdkY85g42byKi+zxjMb6SChYN1Rs1rbrWvyHAEbKg=
Subject key identifier: B8:FB:3F:73:BC:70:95:FE:8B:1B:D0:98:30:A3:A0:4C:7B:BE:E5:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3335429A460A11F0AD8465BCDAE4EC9C.roa
Signing time: Tue 10 Jun 2025 14:50:07 +0000
ROA not before: Tue 10 Jun 2025 14:50:02 +0000
ROA not after: Sat 21 Jun 2025 14:50:02 +0000
asID: 139646
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99800 (0x185d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 14:50:02 2025 GMT
Not After : Jun 21 14:50:02 2025 GMT
Subject: CN=6848461f-97d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:c5:e8:2d:32:58:3a:16:33:f9:c6:24:0b:
29:99:67:2d:6d:52:ed:ce:60:7f:97:e8:ef:b4:b1:
e9:0f:49:c0:d0:6b:f5:ae:f4:2d:03:b3:78:f0:c7:
bf:b4:31:9c:fe:b6:87:47:78:51:95:4b:c7:8f:8c:
16:ea:5c:1d:65:3a:05:c9:c2:ff:0b:63:8a:16:39:
c0:98:fc:d1:a0:3a:41:f4:2f:56:f9:81:63:9e:3e:
91:ea:07:6e:6b:ac:42:46:97:e7:9f:c7:cf:7c:93:
d9:74:59:01:7b:77:b0:b6:31:d0:8e:48:e9:c3:a4:
ec:ff:dd:f4:5b:20:e5:3a:57:e3:75:a6:da:13:88:
40:fa:8c:73:5b:51:76:0c:73:db:76:b0:e5:97:36:
dc:e8:cb:e1:ad:67:e8:60:22:83:bb:14:a3:35:1f:
b1:65:6c:6a:19:2f:90:84:25:be:2d:85:7b:e0:cc:
67:75:38:58:90:41:29:02:f4:72:93:f1:45:f6:9d:
67:bb:e5:49:80:11:b7:a1:30:5e:bc:40:c3:55:f0:
85:7e:26:32:8e:bb:31:af:cf:60:48:26:97:17:48:
ff:3f:65:0f:e5:03:48:50:e3:d2:59:7b:95:82:55:
5d:38:d8:02:68:1b:2b:04:0a:66:27:c0:b7:21:19:
06:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:3F:73:BC:70:95:FE:8B:1B:D0:98:30:A3:A0:4C:7B:BE:E5:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3335429A460A11F0AD8465BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:b1:a5:06:68:d7:ee:c7:6f:17:06:ba:db:02:fa:09:4e:d8:
15:c6:b8:2f:fb:4f:72:23:54:26:8f:40:8f:51:f0:73:88:cc:
66:74:6e:20:12:4e:a5:d2:3b:de:b9:e9:0a:a2:08:cd:35:dd:
b4:f2:f5:3b:62:bb:ee:b9:a6:20:be:2c:ca:a2:3e:f5:13:fc:
89:5c:c3:1c:4f:66:a4:c1:57:32:62:6f:96:57:ae:d1:5c:4e:
7f:09:78:5e:b3:6d:eb:72:4a:d9:2e:bc:51:68:3a:82:38:97:
22:e1:7f:c3:24:d5:fa:3f:36:2e:f9:35:8a:29:f0:13:70:86:
5d:ac:82:59:98:72:05:e2:95:90:ad:8b:6e:4b:4c:43:3b:68:
b3:c7:3e:b1:b0:f3:37:81:0d:6d:53:6d:79:fa:79:bb:e8:96:
43:f2:af:ab:c7:72:64:6c:99:7f:e6:bd:a8:39:a2:8f:0e:cd:
36:16:ff:c2:0d:97:65:8f:3e:7b:25:22:b6:b5:66:ab:2d:05:
e5:7c:e1:47:f0:e7:13:62:c1:5f:07:65:24:86:37:11:57:27:
5d:d4:31:15:fa:e7:cb:00:75:b0:69:45:89:57:75:41:48:4f:
0b:75:a7:a2:26:84:2b:d1:e5:97:66:e4:0d:76:0d:30:87:3f:
cb:c9:20:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:37:01 2025 by rpki-client