Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/136FCFBC3BA511F08E5EA2ADDAE4EC9C.roa
File: 136FCFBC3BA511F08E5EA2ADDAE4EC9C.roa (raw, json)
Hash identifier: NwA1JWYtRAU7W60l8CYbtm4pu+QFeEXzq8AziEK0spE=
Subject key identifier: 0F:D5:BE:9A:25:60:75:48:3B:BC:3E:D8:B3:0D:C6:69:8C:A8:1B:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01832E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/136FCFBC3BA511F08E5EA2ADDAE4EC9C.roa
Signing time: Wed 28 May 2025 09:21:03 +0000
ROA not before: Wed 28 May 2025 09:20:59 +0000
ROA not after: Sat 07 Jun 2025 09:20:59 +0000
asID: 9009
IP address blocks: 154.216.204.0/24 maxlen: 24
154.216.213.0/24 maxlen: 24
154.216.215.0/24 maxlen: 24
154.216.222.0/24 maxlen: 24
154.216.229.0/24 maxlen: 24
154.216.232.0/24 maxlen: 24
154.216.237.0/24 maxlen: 24
154.216.240.0/24 maxlen: 24
154.216.243.0/24 maxlen: 24
154.216.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99118 (0x1832e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 09:20:59 2025 GMT
Not After : Jun 7 09:20:59 2025 GMT
Subject: CN=6836d57f-577f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:03:d3:31:d7:c2:db:f7:5c:82:a9:a4:85:
b6:dd:b2:cc:68:53:46:3b:cd:cd:00:4e:cd:8c:85:
4f:55:33:de:9f:f3:ee:fd:54:ce:f3:48:2c:00:32:
c9:49:b3:6a:d0:4f:5e:6e:0c:0b:9e:01:2c:b5:aa:
cc:fd:36:87:da:0f:de:24:e9:b3:03:23:10:fc:1e:
e0:a0:bf:78:2a:f7:25:ad:9d:c7:82:35:76:af:2a:
4a:eb:4a:65:7c:42:0c:51:57:50:ea:eb:c9:70:2a:
19:f6:37:bc:ff:41:cc:db:a5:bc:fe:94:96:8f:f0:
c5:7a:b3:4b:76:e3:d1:3e:d9:8c:90:f9:d2:12:24:
7c:4e:94:fe:62:b9:03:48:18:81:59:a8:a6:f3:31:
fd:74:5c:d3:7d:4c:cf:4b:c3:b9:a7:ee:22:39:58:
2a:7d:7b:b0:fe:e9:5d:27:e0:41:51:4b:e5:a0:2d:
9f:0a:11:cb:33:da:d1:d4:da:51:ab:b4:e1:6f:5d:
9b:1e:4d:c0:49:7f:ee:9d:18:da:50:52:d4:bf:70:
5d:b3:49:93:31:bc:78:9b:46:a1:3a:94:db:c2:77:
6e:0b:3c:c6:31:c4:62:6d:c3:00:07:77:06:f4:41:
b3:87:b6:9c:50:e1:82:68:7e:5e:ae:0d:90:06:69:
95:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D5:BE:9A:25:60:75:48:3B:BC:3E:D8:B3:0D:C6:69:8C:A8:1B:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/136FCFBC3BA511F08E5EA2ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.204.0/24
154.216.213.0/24
154.216.215.0/24
154.216.222.0/24
154.216.229.0/24
154.216.232.0/24
154.216.237.0/24
154.216.240.0/24
154.216.243.0/24
154.216.246.0/24
Signature Algorithm: sha256WithRSAEncryption
87:13:79:16:c2:43:59:23:fa:9f:76:c1:59:30:b3:eb:e4:c4:
2b:2d:72:48:7f:2b:3d:09:1d:2c:c6:4c:07:f8:1b:ac:d7:9d:
f3:84:6b:45:ae:3e:6a:0a:05:e6:1d:54:3e:9d:bc:94:db:a8:
33:9f:7a:b4:ca:c5:4a:e0:21:c8:c8:7e:23:79:db:8d:db:6c:
f1:9d:f4:0a:77:8f:ca:ef:8f:35:10:92:14:6d:af:29:e5:f8:
30:80:44:e8:0d:2a:70:d8:59:9f:9f:ad:71:0d:34:b1:4f:83:
a6:86:c7:eb:81:a4:4e:8b:7b:e5:77:1f:f9:30:3f:e3:59:87:
6b:62:5c:25:ac:49:a1:83:b3:37:98:60:01:2a:cc:e5:2f:dd:
36:49:d6:c7:41:12:f6:4d:09:cb:32:c1:7f:68:75:03:7a:88:
cd:2c:db:1b:4f:fc:43:38:90:1f:f6:cf:78:ba:f8:13:f5:f6:
4f:1e:9d:13:05:0b:aa:cb:fd:2b:7c:1c:88:59:7d:de:24:0d:
3b:d5:a2:25:01:5b:a3:2a:be:26:4d:b6:b8:f3:e6:6d:43:8f:
7b:89:47:fb:6e:2d:f8:77:d1:39:e7:86:3c:be:39:f9:21:a5:
4c:28:9c:68:ce:32:fc:ef:1b:0e:dd:0c:f4:f4:72:d0:27:97:
8a:16:eb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:11:41 2025 by rpki-client