Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/333AA61E45F011F0A15B5B94DAE4EC9C.roa
File: 333AA61E45F011F0A15B5B94DAE4EC9C.roa (raw, json)
Hash identifier: prChrKzfVS3+ooTpFfLrmU+vQIE1NkeI2s8aRNx5zac=
Subject key identifier: 9E:63:2B:EC:02:AE:26:39:0E:C2:69:39:22:E7:5B:37:47:93:F0:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/333AA61E45F011F0A15B5B94DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 11:44:01 +0000
ROA not before: Tue 10 Jun 2025 11:43:55 +0000
ROA not after: Mon 16 Jun 2025 11:43:55 +0000
asID: 137951
IP address blocks: 154.212.132.0/22 maxlen: 24
154.215.4.0/22 maxlen: 24
154.215.8.0/22 maxlen: 24
154.218.128.0/18 maxlen: 24
154.221.4.0/22 maxlen: 24
154.221.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 11:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99762 (0x185b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 11:43:55 2025 GMT
Not After : Jun 16 11:43:55 2025 GMT
Subject: CN=68481a80-23fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:12:6c:2f:d4:a3:f8:01:ce:6f:f9:6b:77:
4a:3c:7a:78:db:b8:af:dc:9c:c7:b1:47:9e:4b:a7:
d5:e5:01:c6:22:48:0c:65:9f:b0:fb:51:6f:31:f9:
2a:2c:c5:6e:4b:19:98:ee:43:02:c3:ef:72:d9:5e:
27:cb:66:e0:66:bc:92:72:99:83:e9:38:94:ac:9d:
4f:6e:b5:89:4f:4b:c3:ce:79:fe:9f:6f:dc:bd:17:
f6:20:2a:4e:eb:ef:0f:8d:ea:88:5a:e4:9d:26:6a:
73:99:52:9e:47:75:87:08:c5:24:35:5d:8b:e8:9f:
cd:db:e9:71:8d:52:90:0e:27:45:67:9d:e7:9b:cd:
87:68:8e:4a:18:ab:8e:6a:24:7a:2f:9c:5b:23:e2:
33:dd:05:b4:3d:62:c9:52:96:e1:00:30:74:34:b2:
12:ce:ee:ac:cc:21:b4:60:b5:1f:b6:3d:4b:ea:42:
09:4b:d5:1e:cd:c8:26:48:a7:e5:a9:0b:35:07:5b:
d1:44:19:48:ea:7f:15:22:a3:00:97:ac:89:ee:19:
59:09:92:13:ff:75:e7:d2:bc:c6:f7:fb:b2:70:07:
5d:64:66:0e:45:04:d3:58:88:1c:b7:d6:08:88:dd:
0d:28:9e:c2:6c:56:d9:30:fb:b1:75:1f:71:dd:33:
6a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:63:2B:EC:02:AE:26:39:0E:C2:69:39:22:E7:5B:37:47:93:F0:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/333AA61E45F011F0A15B5B94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.132.0/22
154.215.4.0-154.215.11.255
154.218.128.0/18
154.221.4.0-154.221.15.255
Signature Algorithm: sha256WithRSAEncryption
39:92:dc:4b:35:84:35:26:63:53:f7:50:54:93:a2:d5:53:31:
25:f7:88:e9:80:af:95:ec:4c:43:30:ff:73:fc:84:18:ba:4e:
b9:cd:64:ab:22:3a:08:3b:1e:ff:95:95:b7:75:94:c6:d3:d7:
b1:1b:de:1d:4e:81:e5:40:4a:65:6c:c3:d1:b9:8d:cb:df:1d:
6b:6b:02:b2:03:28:06:a7:68:21:68:73:93:99:da:cc:ce:fe:
21:49:68:6f:62:dd:b5:b2:82:cb:6f:6a:22:96:76:e3:f6:4f:
2f:dc:f2:2c:e5:e3:ce:70:0f:89:3f:ae:9f:7f:72:c0:d0:e7:
77:bf:22:96:b2:fa:cd:4b:27:11:61:e4:8e:d3:ea:f9:66:71:
13:d9:01:d4:1f:14:bf:9d:25:19:98:a8:27:04:9a:c2:a2:38:
d1:fa:07:5c:2a:d0:be:66:0e:8d:33:a1:78:5d:36:d5:0c:7e:
f4:56:b3:c8:db:d2:01:b5:58:14:3b:b2:a8:35:a5:e2:33:75:
98:af:f0:08:be:2a:69:f5:90:92:68:62:bc:20:e0:bd:ee:58:
4d:87:c9:47:79:36:c5:c7:e3:09:31:14:46:9d:7b:40:69:b6:
40:43:aa:8e:34:6f:da:a2:eb:61:64:b8:99:5e:db:eb:df:6c:
c6:e1:bc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:32:38 2025 by rpki-client