Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE3DBE584B8C11F09F072EA1DAE4EC9C.roa
File: BE3DBE584B8C11F09F072EA1DAE4EC9C.roa (raw, json)
Hash identifier: jiETHydFcPZqwY3t7fL1fWnbakc2wiOiynPJ25eX9Pc=
Subject key identifier: 6F:FC:58:CE:03:75:E8:28:18:EA:68:DB:C0:BB:5E:F5:10:0F:76:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018733
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE3DBE584B8C11F09F072EA1DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 15:07:12 +0000
ROA not before: Tue 17 Jun 2025 15:07:00 +0000
ROA not after: Mon 04 Aug 2025 15:07:00 +0000
asID: 36137
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100147 (0x18733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 15:07:00 2025 GMT
Not After : Aug 4 15:07:00 2025 GMT
Subject: CN=685184a0-6f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:c0:3d:9b:10:cf:f1:8a:6a:92:8a:51:39:
21:87:3d:3b:e6:77:9d:a9:2d:fe:5a:2e:99:c8:35:
b2:cf:ee:5a:85:e8:a6:16:66:a0:d6:c3:73:92:fd:
24:14:7e:ee:3c:79:c6:33:46:dc:f5:25:39:39:60:
b2:73:64:05:9e:2e:03:31:5b:c4:47:ae:6f:ff:82:
78:9e:4b:c2:d9:0e:1e:f5:c5:ab:07:60:66:eb:6a:
5f:e1:bb:0c:f1:20:09:15:21:2f:79:f1:3b:01:67:
08:85:11:27:62:3c:dd:a7:b3:3b:88:b1:3c:c7:cb:
c1:dc:ff:e5:bd:24:ac:b2:f1:b7:07:3b:4e:7d:6f:
35:ad:44:ab:17:07:a7:dc:42:6f:26:7b:f2:5c:35:
fb:b8:2b:f9:6d:2d:ab:5e:de:9d:77:7d:5f:b1:76:
dc:43:29:a6:a1:70:8b:0a:c5:28:ca:61:b9:e0:80:
d8:79:76:c7:48:97:8a:1b:b2:65:92:75:45:dd:98:
85:70:92:8a:45:05:6b:58:09:76:6d:7b:fa:c1:e0:
d4:a0:d1:a1:16:f0:d4:9b:3e:2f:b5:a4:15:b2:2c:
7c:12:19:78:b7:13:71:b7:0d:ea:44:2d:db:6d:d6:
9a:81:8d:29:b7:eb:fe:40:ed:49:27:80:b2:be:68:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:58:CE:03:75:E8:28:18:EA:68:DB:C0:BB:5E:F5:10:0F:76:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE3DBE584B8C11F09F072EA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
28:a2:c5:4f:03:49:1b:25:95:98:b0:c0:34:a9:1b:e9:40:4e:
52:d2:3e:c0:8a:6d:57:6c:1f:f0:db:8d:3e:ca:12:9f:c8:de:
10:cb:7c:3c:ac:59:b8:02:8f:b2:c5:c4:a4:13:88:e1:7c:0f:
d5:e1:20:fd:d7:fe:2d:d3:67:f4:b7:ac:55:21:f5:26:dc:4b:
f4:92:e6:c8:f9:65:65:03:84:63:1c:f5:6b:d6:56:d4:0d:a8:
71:38:3d:d4:bb:4f:e6:49:25:92:67:90:61:f4:93:f0:70:9e:
ed:e3:f9:ec:60:c2:da:7d:18:d8:6b:9f:04:69:21:da:43:42:
00:5b:17:25:ec:74:2f:69:7b:99:08:e9:9a:f9:eb:97:de:3d:
f2:77:2b:e3:16:96:1c:3c:d5:56:27:01:ef:19:a6:bf:6a:f3:
2d:11:c2:b2:d1:92:4b:f6:6c:45:05:53:da:92:fc:34:8c:93:
c3:92:cf:8b:b5:f5:13:02:ef:2a:a0:06:08:69:c4:c1:cb:55:
8a:b8:45:7b:48:8c:bf:70:5b:f4:49:f7:39:1d:c3:2b:24:1c:
a0:b8:25:63:81:30:e7:db:0d:bf:c2:31:06:69:d6:23:51:96:
fd:78:78:43:e1:a0:f6:c4:9d:e1:0d:ca:e7:2a:dc:7f:34:52:
6b:27:e6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:07:13 2025 by rpki-client