Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/3DAD77C63A3211F08BD4FCBCDAE4EC9C.roa
File: 3DAD77C63A3211F08BD4FCBCDAE4EC9C.roa (raw, json)
Hash identifier: hEttutFWY9wYKa5vAVDkkyoqcsEhAAB3SnX2EpGzeUU=
Subject key identifier: 8D:D5:75:43:68:0D:4C:D9:8D:37:CC:C9:DB:2C:34:BB:55:56:32:B4
Certificate issuer: /CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Certificate serial: 0574
Authority key identifier: 9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/3DAD77C63A3211F08BD4FCBCDAE4EC9C.roa
Signing time: Mon 26 May 2025 13:06:31 +0000
ROA not before: Mon 26 May 2025 13:06:26 +0000
ROA not after: Tue 26 May 2026 13:06:26 +0000
asID: 24691
IP address blocks: 41.207.160.0/19 maxlen: 24
196.168.0.0/14 maxlen: 24
197.148.96.0/19 maxlen: 24
2c0f:f578::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 02:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36974EEAF, serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Validity
Not Before: May 26 13:06:26 2025 GMT
Not After : May 26 13:06:26 2026 GMT
Subject: CN=68346757-3b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:ec:85:62:07:92:0a:bd:a2:af:31:72:fb:
a1:33:69:d6:96:b7:ad:7d:25:d7:d5:97:78:cd:d6:
0c:6a:d1:bc:54:6a:0f:f2:d1:2f:37:2b:4c:5a:8f:
c6:41:f0:2d:de:4a:44:ad:c0:68:89:74:32:88:07:
48:35:cd:ce:1a:40:9f:88:b7:37:4a:62:00:57:7f:
6a:72:3b:20:27:a7:b9:cf:6f:b4:cc:aa:0c:77:df:
33:73:33:9c:9e:65:b6:2d:76:ea:49:6b:16:cc:b4:
40:bc:d3:fa:19:7c:f2:fc:e0:bc:41:82:a8:2e:e9:
89:43:cc:53:7e:37:5e:d9:21:f7:94:94:2f:96:77:
70:cb:cf:7b:99:8e:02:76:75:9c:55:91:28:76:e5:
20:be:31:ab:c0:ff:54:2b:b7:1f:f5:07:64:78:13:
84:87:88:fb:53:d7:e4:85:e3:b4:3b:88:01:87:65:
43:de:1e:2a:0b:47:bc:1f:d8:b1:d5:6c:6e:17:ca:
33:7a:e3:e4:ca:2e:8f:fd:34:a0:df:3b:c6:39:1b:
b9:d8:2a:dd:9f:b1:31:39:d7:3c:fa:69:7b:fd:ce:
83:d1:68:eb:89:6c:0a:50:37:ef:d3:a3:b1:3c:d6:
90:cc:e2:92:73:24:af:b3:33:1c:af:38:5b:d5:db:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D5:75:43:68:0D:4C:D9:8D:37:CC:C9:DB:2C:34:BB:55:56:32:B4
X509v3 Authority Key Identifier:
keyid:9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/3DAD77C63A3211F08BD4FCBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.207.160.0/19
196.168.0.0/14
197.148.96.0/19
IPv6:
2c0f:f578::/32
Signature Algorithm: sha256WithRSAEncryption
b4:7a:7b:09:51:33:bd:e9:05:77:2a:90:d5:ad:b4:58:9a:9e:
5f:0e:05:af:ba:ee:d9:09:0d:4b:5f:2d:c0:68:2f:30:ab:32:
bf:ad:df:28:86:5b:ee:d5:09:1b:87:77:e1:28:c6:64:87:0a:
fc:9a:e2:b3:0c:b4:a0:c8:40:5b:74:49:ed:e6:2a:25:4e:53:
ad:fb:93:9f:a5:aa:2c:8d:85:7a:44:33:85:53:28:6a:9b:40:
6f:ea:a8:a2:35:11:19:00:c6:d9:5b:ac:ce:5a:0c:fd:31:a1:
41:9a:c6:03:69:06:5e:6c:cc:45:69:ce:89:06:35:f9:00:cf:
35:30:d3:27:a9:86:59:f4:06:bc:37:55:88:55:32:92:4d:35:
81:ca:6b:59:97:9b:25:f6:85:c1:ce:98:73:ce:be:fb:34:0c:
6e:9b:09:a6:2c:36:f2:c8:1a:4e:f0:e9:45:f2:d9:8a:7d:0e:
00:5d:28:c0:56:67:1d:4f:13:11:9c:b0:c1:5f:7f:0b:32:2b:
7a:52:ad:eb:7a:cf:ad:70:ec:b9:e1:5c:b5:cf:1a:59:3f:ad:
62:11:7d:e4:25:f9:d9:45:d5:b7:57:a5:92:80:9a:0a:d7:96:
9f:60:4f:9e:c0:f2:89:42:8d:1e:76:83:3f:63:06:67:d3:e2:
7d:91:23:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:06:16 2025 by rpki-client