Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339D8C3485FB11F093D59EBEDAE4EC9C.roa
File: 339D8C3485FB11F093D59EBEDAE4EC9C.roa (raw, json)
Hash identifier: oW+qWTwHJ+hxKunPZNiMZYlVLq2qc6xcjU8iu08yuKw=
Subject key identifier: 2C:FF:70:7E:28:1B:78:05:9A:DA:CF:00:54:0C:90:79:7A:20:7E:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339D8C3485FB11F093D59EBEDAE4EC9C.roa
Signing time: Sat 30 Aug 2025 23:44:00 +0000
ROA not before: Sun 31 Aug 2025 23:43:53 +0000
ROA not after: Sun 07 Sep 2025 23:43:53 +0000
asID: 54801
IP address blocks: 154.204.0.0/24 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105046 (0x19a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 31 23:43:53 2025 GMT
Not After : Sep 7 23:43:53 2025 GMT
Subject: CN=68b38cc0-e6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:45:d9:65:f2:37:85:cc:ff:cd:b9:f2:88:
24:c1:b9:07:91:12:ac:09:74:50:a3:9b:9f:68:dd:
70:db:83:85:a5:6e:a2:a2:1b:e1:b5:29:44:45:a8:
9e:a7:10:5e:0a:c9:56:51:71:08:b6:22:2d:e0:58:
68:9c:4c:38:5b:5b:3a:1d:8c:6c:7b:eb:69:3a:fb:
2e:20:8e:c7:b7:f4:fc:64:40:86:89:d1:4c:cb:0c:
48:e3:12:64:2c:63:7b:e7:d4:02:19:e1:ad:73:1c:
4e:16:d9:75:20:7b:a7:01:95:e4:18:ff:9e:96:f0:
a3:00:28:3f:2e:95:cd:a4:ff:03:21:b1:2c:6e:fc:
e9:8a:1d:1e:cd:72:50:ca:0e:6a:f5:c2:1d:49:c3:
40:5f:1d:58:0f:34:a9:12:2f:e1:4d:a4:bb:76:cd:
fa:7c:16:98:1b:05:4d:71:1a:e6:4d:78:bf:08:37:
fb:e8:22:4c:50:36:ff:05:10:a3:94:1a:0c:e2:64:
3a:9c:ac:c5:c4:d8:03:84:24:10:ea:87:df:81:5f:
c8:3b:c5:bd:15:61:db:e9:cb:61:4c:3d:5f:6d:db:
b6:9a:d5:cf:1a:87:32:34:d3:a7:1e:a2:7b:95:e4:
11:05:da:c3:a6:eb:36:b8:eb:76:ec:b5:8a:7f:ca:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FF:70:7E:28:1B:78:05:9A:DA:CF:00:54:0C:90:79:7A:20:7E:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339D8C3485FB11F093D59EBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:32:4e:ac:cc:c2:4e:6c:06:c5:02:cc:1a:2a:b8:fd:1a:73:
16:52:aa:3c:16:77:3a:1f:be:48:c6:7a:4e:82:35:84:74:91:
e2:e4:da:a7:4c:5b:c1:7b:5d:c4:16:c9:fe:63:79:e5:48:49:
fc:ca:39:d6:5a:7e:9c:61:be:91:c4:2e:06:40:d2:cf:04:8f:
24:1f:30:01:0a:ce:48:3f:42:27:3d:c7:a7:2e:e0:02:dc:63:
8f:55:ad:6a:79:4b:87:9b:ea:f1:4a:65:bd:f4:49:df:93:00:
3f:a0:2b:3a:4a:ee:f0:6b:31:8b:f6:ea:b0:2b:97:9f:c0:8f:
eb:ac:1e:aa:57:47:e8:35:54:5c:68:10:11:8e:8d:83:a1:91:
92:04:28:f0:75:89:5e:95:79:ab:80:6d:01:2f:ab:f8:94:bc:
e9:f5:83:4a:4d:18:6d:d2:5b:01:2b:2b:95:cd:ea:74:25:5d:
c3:1e:da:7b:ab:d5:d2:6b:8b:d5:67:5c:03:b8:6a:02:f5:f6:
2a:df:a9:40:5c:14:d6:f6:dd:db:31:07:75:7f:d3:7d:f0:39:
8e:84:88:08:ca:b4:db:45:39:a1:87:99:a1:8f:70:27:11:f1:
a0:a2:a5:42:7d:52:e9:f8:56:19:a1:be:f3:a7:8b:17:f6:6b:
fc:1f:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:42 2025 by rpki-client