Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E331D9D23D5A11F09E2C07C8DAE4EC9C.roa
File: E331D9D23D5A11F09E2C07C8DAE4EC9C.roa (raw, json)
Hash identifier: JOpgJFg9CkeywecbUVEBBlNDJARl1GFbxnHk3VRzbhs=
Subject key identifier: 88:1F:87:62:3C:1A:C5:9F:8D:F5:2E:4D:2A:4E:63:2F:EA:20:50:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E331D9D23D5A11F09E2C07C8DAE4EC9C.roa
Signing time: Fri 30 May 2025 13:35:02 +0000
ROA not before: Fri 30 May 2025 13:34:57 +0000
ROA not after: Mon 09 Jun 2025 13:34:57 +0000
asID: 137951
IP address blocks: 154.212.132.0/22 maxlen: 24
154.215.4.0/22 maxlen: 24
154.215.8.0/22 maxlen: 24
154.218.128.0/18 maxlen: 24
154.221.4.0/22 maxlen: 24
154.221.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99297 (0x183e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 13:34:57 2025 GMT
Not After : Jun 9 13:34:57 2025 GMT
Subject: CN=6839b406-fa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:5e:86:ec:eb:70:0d:af:3d:31:e8:5c:f9:
8f:88:d8:0a:3f:54:16:0d:8a:14:b3:b2:96:16:47:
43:d0:33:4a:18:6e:1d:d1:17:73:f8:f6:00:8c:06:
0f:0b:6b:80:d2:cb:61:09:c8:a8:d9:a1:c0:b3:43:
38:c9:82:fe:c6:e0:a1:c2:d5:6a:98:6f:6c:22:98:
26:cd:77:d3:26:3d:19:4b:fc:30:c9:41:03:6e:82:
b2:e4:e8:d0:19:00:c8:90:6d:b1:f9:6b:90:e2:43:
a6:f0:ef:25:92:36:99:a6:fb:32:98:5d:4a:1e:72:
77:97:03:6f:38:15:d5:48:ca:b3:e3:85:0e:f2:62:
df:f3:ef:93:53:f2:64:50:78:52:58:fd:b8:9d:a6:
f2:5d:42:e5:c0:33:22:7a:1d:f1:cc:4e:34:d4:b6:
34:4a:de:94:bb:67:2f:3a:a4:d0:1e:6f:d1:72:c1:
9e:af:55:42:b3:3f:21:df:25:25:54:66:2a:82:d1:
d8:5d:99:a3:a6:f0:2d:37:71:5e:d1:0d:a4:0e:67:
63:a5:60:67:f4:27:b7:24:88:43:79:79:1b:87:e0:
fd:30:49:0b:9b:e4:91:b0:91:90:f7:e9:ea:f7:24:
8e:6c:86:8e:d4:84:6b:9f:44:64:46:c5:af:09:25:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1F:87:62:3C:1A:C5:9F:8D:F5:2E:4D:2A:4E:63:2F:EA:20:50:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E331D9D23D5A11F09E2C07C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.132.0/22
154.215.4.0-154.215.11.255
154.218.128.0/18
154.221.4.0-154.221.15.255
Signature Algorithm: sha256WithRSAEncryption
96:3d:26:e6:7e:47:1e:c2:28:6a:7a:1a:f5:36:3a:f0:ef:21:
29:33:24:74:e9:f9:5e:22:ea:20:5f:e0:86:5c:eb:dd:ea:47:
c0:33:f5:69:2f:f8:49:d3:ab:f0:32:0a:c2:d4:92:0e:32:25:
ad:33:be:a8:86:5d:0e:c9:3a:e4:a0:6a:9f:00:1b:83:2f:33:
2a:a4:19:ac:c2:c4:5f:62:c4:58:9b:a0:50:7b:4f:0b:12:2f:
02:bf:0f:22:2c:29:1b:24:fa:d4:25:ee:2d:4f:b7:b2:e0:8a:
ae:69:f1:df:08:fd:29:0b:75:2c:a0:e5:52:cc:a8:94:bc:eb:
91:10:f1:49:2e:ae:6e:cc:9a:f1:0a:79:a1:f9:b7:65:e8:ad:
73:ec:31:22:c8:7c:f8:97:4f:2c:0e:38:35:a2:b1:47:96:3e:
df:25:24:25:58:e3:eb:1e:ba:17:3a:0b:e7:8f:8c:07:ba:07:
d8:e2:95:12:08:64:f8:52:b5:68:c1:bb:5f:60:11:f4:44:13:
b1:5e:2f:19:5f:1c:11:10:27:45:f3:76:8b:d7:2c:03:3b:71:
7e:12:72:2f:ab:34:61:9f:1d:a8:e8:fe:d9:d9:af:2a:09:7e:
ac:61:ac:ce:3a:03:82:93:99:e8:66:a0:e8:a2:88:84:23:16:
0c:78:b6:33
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAYPhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTMwMTMzNDU3WhcNMjUwNjA5MTMzNDU3WjAYMRYw
FAYDVQQDEw02ODM5YjQwNi1mYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2/5ehuzrcA2vPTHoXPmPiNgKP1QWDYoUs7KWFkdD0DNKGG4d0Rdz+PYA
jAYPC2uA0sthCcio2aHAs0M4yYL+xuChwtVqmG9sIpgmzXfTJj0ZS/wwyUEDboKy
5OjQGQDIkG2x+WuQ4kOm8O8lkjaZpvsymF1KHnJ3lwNvOBXVSMqz44UO8mLf8++T
U/JkUHhSWP24nabyXULlwDMieh3xzE401LY0St6Uu2cvOqTQHm/RcsGer1VCsz8h
3yUlVGYqgtHYXZmjpvAtN3Fe0Q2kDmdjpWBn9Ce3JIhDeXkbh+D9MEkLm+SRsJGQ
9+nq9ySObIaO1IRrn0RkRsWvCSXqjwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFIgf
h2I8GsWfjfUuTSpOYy/qIFCSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMzMxRDlEMjNENUExMUYwOUUyQzA3QzhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQCmtSEMAwDBAKa1wQDBAKa
1wgDBAaa2oAwDAMEAprdBAMEBJrdADANBgkqhkiG9w0BAQsFAAOCAQEAlj0m5n5H
HsIoanoa9TY68O8hKTMkdOn5XiLqIF/ghlzr3epHwDP1aS/4SdOr8DIKwtSSDjIl
rTO+qIZdDsk65KBqnwAbgy8zKqQZrMLEX2LEWJugUHtPCxIvAr8PIiwpGyT61CXu
LU+3suCKrmnx3wj9KQt1LKDlUsyolLzrkRDxSS6ubsya8Qp5ofm3Zeitc+wxIsh8
+JdPLA44NaKxR5Y+3yUkJVjj6x66FzoL54+MB7oH2OKVEghk+FK1aMG7X2AR9EQT
sV4vGV8cERAnRfN2i9csAztxfhJyL6s0YZ8dqOj+2dmvKgl+rGGszjoDgpOZ6Gag
6KKIhCMWDHi2Mw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 13:34:20 2025 by rpki-client