Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3459E794331C11F0A895C2E9DAE4EC9C.roa
File: 3459E794331C11F0A895C2E9DAE4EC9C.roa (raw, json)
Hash identifier: 5qVJZJVSiC+yG2G3LfmHJG1cp0yhqMk3zWT61HLNJiw=
Subject key identifier: 3D:F8:94:A5:66:04:08:B8:9F:0C:2A:7A:A3:44:CB:22:01:3B:8E:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018128
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3459E794331C11F0A895C2E9DAE4EC9C.roa
Signing time: Sat 17 May 2025 12:41:09 +0000
ROA not before: Sat 17 May 2025 12:41:03 +0000
ROA not after: Sun 08 Jun 2025 12:41:03 +0000
asID: 62084
IP address blocks: 154.210.239.0/24 maxlen: 24
154.219.94.0/24 maxlen: 24
154.219.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98600 (0x18128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 12:41:03 2025 GMT
Not After : Jun 8 12:41:03 2025 GMT
Subject: CN=682883e5-115b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:cf:4c:9b:4f:7f:be:e1:0b:09:fa:82:83:
5f:5a:0f:80:9a:be:02:74:65:33:33:2f:3a:c2:79:
b1:da:40:18:8f:22:74:a8:d0:46:50:fc:42:a3:8a:
be:ab:ca:14:43:50:96:df:7f:55:d7:05:f1:4a:0e:
99:b3:07:8b:c8:b8:a8:76:d9:bb:29:2b:ba:9a:ff:
60:e5:2b:de:82:2e:d7:69:74:a1:0c:12:4d:f4:e1:
c5:96:a0:26:11:60:92:df:05:10:54:f4:e7:93:e9:
59:99:92:38:a4:fe:0b:5c:78:1e:aa:fc:ee:0b:c6:
74:c1:ec:a7:97:39:bc:44:73:f2:47:51:d2:e6:a1:
a0:42:1c:ba:17:4c:a6:2c:e1:67:15:35:3b:a6:fc:
d8:75:33:a3:cc:b2:fc:9c:6a:55:85:41:b2:79:80:
ea:95:95:f3:2e:32:7f:06:cc:09:68:9c:4c:20:2d:
86:2a:62:90:34:13:87:08:cd:5e:34:e5:4f:4e:dd:
cf:8f:7a:8b:81:80:d9:01:9f:4d:aa:a8:f0:dd:26:
28:da:1b:16:d1:5a:52:34:96:81:1a:7d:71:64:e0:
0a:66:dc:09:5f:3c:ce:e3:e9:9d:3d:0b:ee:99:0d:
27:9d:53:22:02:a5:58:b5:9d:78:56:2b:53:ae:1f:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F8:94:A5:66:04:08:B8:9F:0C:2A:7A:A3:44:CB:22:01:3B:8E:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3459E794331C11F0A895C2E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.239.0/24
154.219.94.0/23
Signature Algorithm: sha256WithRSAEncryption
20:8b:56:3a:2b:c2:79:bc:f5:21:90:ce:1d:df:81:d2:79:c8:
90:28:fb:7c:4e:fa:21:60:4c:aa:f2:9c:6c:cf:3b:87:64:77:
bd:cd:e4:d4:2c:d8:d5:46:55:1a:a2:9d:d2:d0:ef:23:82:ad:
4d:88:d1:bf:23:75:6e:d8:72:53:05:a9:63:2a:85:33:07:b1:
cb:e3:92:5b:fb:e9:bf:49:1e:68:b9:90:43:5d:77:f3:40:1f:
b8:aa:bc:17:ad:11:15:22:9b:a6:d8:98:96:8d:76:8d:86:12:
09:a5:88:fe:86:b0:f6:40:df:2e:88:43:76:55:73:3b:a2:12:
7b:3e:2f:f2:00:b4:26:b6:0d:d7:ec:2d:14:6e:38:56:ec:da:
35:33:31:8a:4d:02:c8:21:e8:85:e2:8e:96:da:c7:05:31:1c:
ed:50:9e:48:f2:17:6f:ec:fb:39:29:d6:c0:57:ed:a7:5a:7f:
4d:1f:71:6e:51:cd:66:93:a7:0c:6b:56:be:31:f1:9b:80:84:
eb:f3:58:eb:9e:db:17:44:14:39:b0:17:be:de:86:23:26:52:
29:a4:12:4f:da:2c:b6:a3:68:66:3d:08:20:e3:6a:40:f2:76:
00:2e:d1:ea:c0:e6:67:cf:6e:73:9d:56:09:ff:2c:d1:81:bf:
fb:68:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:52:35 2025 by rpki-client