Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA17D8A41F311F08EB8A2ABDAE4EC9C.roa
File: 3EA17D8A41F311F08EB8A2ABDAE4EC9C.roa (raw, json)
Hash identifier: B9cldQ34TfLdW7gon605RZQalk3FwyfTjreQ3e3Mt4E=
Subject key identifier: 06:51:6F:72:92:EA:E5:79:C6:8E:40:7F:F0:4B:21:5E:77:D9:9C:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018502
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA17D8A41F311F08EB8A2ABDAE4EC9C.roa
Signing time: Thu 05 Jun 2025 09:55:44 +0000
ROA not before: Thu 05 Jun 2025 09:55:39 +0000
ROA not after: Sun 10 Aug 2025 09:55:39 +0000
asID: 203020
IP address blocks: 154.217.0.0/24 maxlen: 24
154.217.1.0/24 maxlen: 24
154.217.2.0/24 maxlen: 24
154.217.3.0/24 maxlen: 24
154.217.4.0/24 maxlen: 24
154.217.16.0/24 maxlen: 24
154.217.17.0/24 maxlen: 24
154.217.39.0/24 maxlen: 24
154.217.40.0/24 maxlen: 24
154.217.41.0/24 maxlen: 24
154.217.42.0/24 maxlen: 24
154.217.43.0/24 maxlen: 24
154.217.44.0/24 maxlen: 24
154.217.45.0/24 maxlen: 24
154.217.46.0/24 maxlen: 24
154.217.96.0/19 maxlen: 24
154.217.160.0/22 maxlen: 24
154.217.164.0/22 maxlen: 24
154.217.168.0/21 maxlen: 24
154.217.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99586 (0x18502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 09:55:39 2025 GMT
Not After : Aug 10 09:55:39 2025 GMT
Subject: CN=6841699f-329e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ed:19:11:13:8d:99:7d:6a:df:77:44:63:60:
04:9f:8c:a2:6c:fa:32:cc:8c:1c:34:4f:e0:37:7f:
b9:cb:e9:43:ed:90:29:d8:c4:2a:91:48:10:ab:66:
b2:79:c5:a2:f9:d8:bf:2f:62:f7:77:7f:fb:56:c8:
be:78:9a:3f:a7:f5:99:93:7a:67:db:94:7b:20:80:
3c:86:8f:8b:9c:18:3e:7a:ee:f8:0d:f3:9d:a7:ef:
33:ae:3c:44:1d:55:ed:8f:28:fc:6a:da:07:79:4f:
9c:ae:b4:94:36:6e:c6:56:48:29:bc:0c:74:01:4d:
6b:d8:10:1f:84:86:99:72:bd:59:34:17:a3:99:34:
d3:aa:7a:e9:bb:4c:c3:20:83:7d:a2:44:79:17:2a:
30:2f:f0:33:de:d7:6f:bc:97:60:61:1a:59:be:84:
e0:a7:6d:22:a5:15:08:0b:63:dd:e8:c3:c4:1b:c4:
80:ed:ca:3d:a0:16:7b:35:8a:55:a5:ed:e2:aa:9e:
64:90:a3:c7:76:4c:ac:ab:dd:34:10:79:c2:fd:a1:
8d:e2:22:62:52:2a:e5:76:d6:1a:b6:8a:34:65:d7:
d2:07:fc:ec:9d:e2:90:ec:46:02:a5:2b:a7:da:c4:
57:2f:33:29:47:ed:09:15:3e:c4:32:fd:da:52:eb:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:51:6F:72:92:EA:E5:79:C6:8E:40:7F:F0:4B:21:5E:77:D9:9C:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA17D8A41F311F08EB8A2ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.0.0-154.217.4.255
154.217.16.0/23
154.217.39.0-154.217.46.255
154.217.96.0/19
154.217.160.0/20
154.217.178.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:71:f5:c2:7d:0d:a5:c9:1a:ee:e0:46:05:93:c9:33:7f:5c:
54:fa:ac:af:0e:70:a0:b8:f5:4b:5c:3e:98:3d:8c:b7:9f:a8:
f2:66:32:22:07:04:ee:9c:e0:55:3d:71:66:85:49:8d:df:d3:
6b:e6:9b:a1:d3:de:62:2b:18:3f:c4:ee:65:6b:79:54:b8:0c:
c0:35:99:32:49:01:8e:d2:61:6d:0d:88:e8:0f:fa:18:f0:ce:
8a:c5:e4:09:4e:c7:b0:1e:07:f1:d6:45:7c:22:fe:61:53:06:
05:74:21:ea:f9:f5:40:a7:04:51:2b:30:f6:d4:89:b6:d4:cf:
99:89:4a:ca:77:97:4d:9a:f4:08:42:17:4a:80:05:96:1d:e4:
ee:54:fa:52:77:de:47:ce:93:f1:48:e6:a3:6b:dc:99:ad:68:
ca:7a:d8:23:8b:b5:12:25:80:52:93:21:13:33:47:3c:d4:64:
bc:a7:3f:af:00:9d:04:86:a7:4b:07:bf:b3:c5:f4:0b:69:4f:
ff:d0:a8:c4:f2:5f:d2:98:19:1f:3c:9a:ac:5b:15:3a:15:46:
ef:9a:1e:d7:10:34:18:c8:f6:dc:12:c3:2c:99:ff:6e:43:92:
30:6b:d5:80:fd:0f:3f:48:e8:08:31:db:7e:68:1b:86:d6:14:
da:52:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:18:33 2025 by rpki-client