Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177F420C3B2011F09F22B6C2DAE4EC9C.roa
File: 177F420C3B2011F09F22B6C2DAE4EC9C.roa (raw, json)
Hash identifier: 6GRIJ33hjdSj8hoV12zQNxMMBezvzjSmQDiZFXSQZS0=
Subject key identifier: F5:CC:9E:D9:F4:03:BC:3A:0A:1E:8A:5A:CC:19:D1:B2:3C:9E:FA:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018316
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177F420C3B2011F09F22B6C2DAE4EC9C.roa
Signing time: Tue 27 May 2025 17:29:07 +0000
ROA not before: Tue 27 May 2025 17:29:02 +0000
ROA not after: Tue 22 Feb 2028 17:29:02 +0000
asID: 17561
IP address blocks: 154.194.229.0/24 maxlen: 24
154.194.230.0/24 maxlen: 24
154.194.231.0/24 maxlen: 24
154.194.232.0/24 maxlen: 24
154.194.233.0/24 maxlen: 24
154.194.242.0/24 maxlen: 24
154.194.243.0/24 maxlen: 24
154.194.244.0/24 maxlen: 24
154.194.245.0/24 maxlen: 24
154.194.246.0/24 maxlen: 24
154.194.247.0/24 maxlen: 24
154.219.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99094 (0x18316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 17:29:02 2025 GMT
Not After : Feb 22 17:29:02 2028 GMT
Subject: CN=6835f663-72d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:0b:99:6c:70:35:a6:3f:8a:6d:ad:0f:57:
ad:88:29:03:ef:dc:ac:3f:1e:9f:8f:c6:57:be:3d:
c0:f8:f3:ad:63:47:13:3c:c9:07:6b:67:02:f9:68:
33:b5:bd:30:b3:e4:a2:2e:8f:c0:eb:3c:8b:6e:bd:
d0:46:86:e7:7e:dc:f4:8e:54:8b:93:c8:91:92:03:
c5:02:e9:3e:0b:96:1b:f2:6e:23:9f:6a:5a:8d:2c:
b0:50:63:7b:02:98:75:db:57:f1:ab:e9:97:de:48:
c1:c9:55:52:b9:b7:85:92:61:fa:b3:b1:45:26:af:
a8:e3:28:5e:f8:6d:bb:43:fe:e9:ed:be:c8:a7:38:
40:e1:8a:33:43:89:87:63:76:a3:2a:83:d7:73:3f:
34:72:7d:0c:1e:df:32:0e:7a:8e:2e:56:44:81:15:
fd:1c:f0:14:b2:ff:1f:15:19:07:94:83:63:92:88:
8d:50:f0:11:2f:1a:86:c0:de:aa:fc:f1:fa:af:02:
ea:4e:c7:ce:a8:f1:20:64:dc:ab:59:be:e9:8c:5a:
65:c2:62:fa:0d:04:30:f1:83:4c:2e:05:05:54:b2:
84:14:c9:87:ed:fd:c9:82:9c:e5:3f:33:3d:22:17:
49:6a:b4:34:ef:98:f2:75:57:a6:7c:28:21:d1:09:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CC:9E:D9:F4:03:BC:3A:0A:1E:8A:5A:CC:19:D1:B2:3C:9E:FA:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177F420C3B2011F09F22B6C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.229.0-154.194.233.255
154.194.242.0-154.194.247.255
154.219.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f8:5b:47:0b:6c:61:6c:40:67:f6:c4:60:65:ba:e1:75:cc:
bb:a7:b2:94:95:27:47:fa:a9:29:ee:19:ff:a2:91:09:17:21:
ae:e1:0f:67:9e:a4:01:6d:c8:9d:5d:fa:39:85:aa:bc:02:6b:
69:64:1e:9b:df:8e:34:f8:c0:a4:48:4c:cb:17:1c:ef:fc:1a:
aa:df:aa:ed:fa:f9:97:ed:d7:b2:2c:40:c5:aa:5e:92:ee:f7:
ec:7e:b1:84:08:a7:e6:6e:7f:03:05:bd:b9:d1:90:90:9a:45:
99:84:6b:d8:ed:76:a7:13:12:29:24:c1:63:13:56:58:c4:82:
5c:77:34:d6:9c:dd:13:d7:7d:a0:45:3f:4a:75:93:e9:e1:e1:
f1:40:6a:0b:17:63:a7:d0:48:ea:95:e9:d8:08:6e:d6:94:9d:
ae:81:18:45:12:46:c7:69:f9:53:3e:0a:5a:75:c9:4c:6b:c4:
16:c7:ef:c3:e0:16:cc:9e:aa:b7:52:be:e9:e5:91:d0:55:69:
dc:6b:51:82:21:b5:1f:70:ab:6b:2d:78:bf:00:b5:39:d0:b5:
84:4e:3b:f9:a5:8c:58:ed:8d:5c:9c:f4:a4:a6:b8:77:3f:b7:
44:33:fa:a3:77:ed:d3:53:af:63:23:fe:53:b6:8e:5c:d4:77:
23:96:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:55:59 2025 by rpki-client