Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006D8B9AF3F511EF8D00C342762E951A.roa
File: 006D8B9AF3F511EF8D00C342762E951A.roa (raw, json)
Hash identifier: Ro/8/Puhaq8IL4+MstleSfdUyI1jg86hhdbJWTXIVTk=
Subject key identifier: 48:BC:77:ED:F1:0D:65:FF:1A:7F:0F:FE:FF:3E:6E:CB:4F:37:6C:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006D8B9AF3F511EF8D00C342762E951A.roa
Signing time: Wed 26 Feb 2025 03:51:47 +0000
ROA not before: Wed 26 Feb 2025 03:51:43 +0000
ROA not after: Thu 19 Feb 2026 03:51:43 +0000
asID: 984
IP address blocks: 154.203.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90297 (0x160b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:51:43 2025 GMT
Not After : Feb 19 03:51:43 2026 GMT
Subject: CN=67be8fd3-8c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:a3:af:12:74:74:2a:78:0e:92:71:6f:c9:
05:51:14:b1:6f:85:85:73:b7:a1:36:26:f9:bd:f7:
d9:f6:98:58:79:15:57:e0:b9:19:ab:a8:94:19:c5:
30:9f:13:be:c8:68:3b:b9:b7:df:8a:61:42:f8:84:
e2:71:0a:cf:33:f3:a2:29:af:43:c9:74:a4:74:27:
7b:98:40:e4:44:b6:28:83:15:6f:41:e3:bb:6f:f9:
d4:2c:56:71:58:f0:19:78:8f:b1:c8:20:79:9f:2e:
c8:4c:25:35:61:85:56:b8:14:3b:d9:3d:c4:f1:55:
62:9c:d9:91:f9:b4:7b:2b:f1:00:34:f8:d4:a5:39:
60:73:60:17:aa:ba:07:c0:3d:4c:b7:13:34:ad:ca:
e1:6c:e1:d5:ac:09:08:d0:3d:c1:a4:2f:f6:5f:82:
43:b4:ad:6a:6b:88:f5:b8:71:4c:6b:4d:86:b0:67:
85:3d:84:07:df:b8:4e:2f:3a:31:a0:26:69:71:72:
7c:55:19:82:24:d0:06:5d:0f:5c:00:9a:07:d9:56:
6e:a1:69:00:9c:3e:dd:af:b9:62:90:37:6b:cb:92:
84:22:e2:c6:c8:da:da:60:db:9e:5b:70:a9:27:cb:
c5:98:d4:6b:1f:67:e8:46:23:dc:bd:27:17:aa:b5:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BC:77:ED:F1:0D:65:FF:1A:7F:0F:FE:FF:3E:6E:CB:4F:37:6C:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006D8B9AF3F511EF8D00C342762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.116.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:f1:a7:6e:94:dc:b3:2c:8a:74:fe:43:5d:7b:2b:74:8b:24:
38:cd:c8:90:18:a3:6d:be:a3:3e:60:cd:25:eb:4f:3b:48:d4:
82:40:1f:39:88:e5:87:eb:12:db:3d:87:2b:4c:53:0f:c7:f2:
e9:7a:1b:a6:00:90:fc:89:11:c3:51:af:6c:fb:9a:fa:f4:29:
ac:df:b6:0d:e2:c8:93:25:96:27:40:3d:06:71:3e:b7:a0:38:
bd:11:db:1b:95:3d:29:0b:2c:23:5e:0c:2e:e0:3e:ac:f0:4d:
22:d5:a8:86:ca:b9:74:ef:ba:7f:ab:ea:2e:0b:9a:02:ba:cd:
79:3c:74:dc:3c:fa:bd:16:94:51:a5:a2:f5:4c:d5:17:e1:9b:
18:5d:72:ed:a1:f4:a4:0d:aa:94:ad:7e:62:59:0f:67:a4:a1:
d9:54:2a:ca:b9:7b:f5:71:73:fd:69:a4:7c:e0:d3:84:cc:67:
ab:36:bc:0f:a4:8f:eb:d6:bf:27:31:c7:55:4d:d0:8d:f4:82:
35:84:ae:be:d8:b0:b0:78:4a:bb:28:ba:50:d8:2f:c1:3a:a8:
01:7b:18:a4:bc:a0:6f:89:78:36:ba:ca:fc:3d:1c:90:e1:55:
47:78:06:46:68:18:ed:dd:62:a2:8e:2d:ee:37:14:c3:22:32:
c6:e3:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:37:33 2025 by rpki-client