Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA51EACF44011EFA40A4246762E951A.roa
File: 0FA51EACF44011EFA40A4246762E951A.roa (raw, json)
Hash identifier: XeWa+xcHeAr0jC1LXEKvfnFba83MhowKKbxMYm/F95M=
Subject key identifier: 7B:D2:DC:46:91:3A:26:56:AE:09:AE:20:08:D7:E8:BE:2D:A2:18:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01634D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA51EACF44011EFA40A4246762E951A.roa
Signing time: Wed 26 Feb 2025 12:49:05 +0000
ROA not before: Wed 26 Feb 2025 12:48:56 +0000
ROA not after: Thu 19 Feb 2026 12:48:56 +0000
asID: 984
IP address blocks: 154.208.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90957 (0x1634d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:48:56 2025 GMT
Not After : Feb 19 12:48:56 2026 GMT
Subject: CN=67bf0dc1-d738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:0d:fd:4e:7e:79:87:0c:53:dd:de:59:fd:
ec:d7:41:7c:f0:a8:c4:e1:4b:3e:92:54:d1:df:2d:
25:05:55:d7:e6:84:db:e0:6a:ac:f8:7c:f3:76:93:
95:eb:cc:d1:1f:c2:32:a5:da:8c:41:0f:8e:6a:ff:
30:ce:a1:57:50:20:18:8d:e2:41:ce:fd:73:fc:64:
f5:53:42:27:d9:53:e7:b2:f5:cb:16:b4:4c:dc:6f:
5e:22:ed:fa:ab:d4:8a:0f:ae:f5:9f:b6:c6:ef:60:
62:c9:a3:66:ad:cb:99:db:db:a2:be:a2:bd:cc:64:
93:13:1f:a9:34:2a:cb:68:3d:b0:61:2f:36:99:41:
6d:23:ff:88:0c:77:2e:a0:8e:5b:02:81:99:04:6a:
86:72:80:d1:bd:80:35:b1:ba:01:49:35:6b:88:cd:
c9:c8:54:f8:17:d1:20:b3:82:ea:df:73:97:61:de:
de:7f:ad:78:08:e6:d8:c1:e7:50:92:47:43:f4:49:
b1:59:47:a1:d1:72:55:57:12:40:fd:fb:6d:98:6c:
d1:9e:6a:37:1b:2c:c7:70:7d:7d:2b:a0:ba:f1:af:
df:a1:07:c0:68:73:62:23:37:aa:8a:16:3d:73:0e:
e9:ce:fb:1b:7d:96:35:a8:de:2a:ae:27:30:eb:9e:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D2:DC:46:91:3A:26:56:AE:09:AE:20:08:D7:E8:BE:2D:A2:18:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA51EACF44011EFA40A4246762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.177.0/24
Signature Algorithm: sha256WithRSAEncryption
51:60:ce:13:7b:f0:bb:86:58:c1:e6:97:2e:06:df:09:55:59:
34:2e:65:d0:1e:c6:ca:df:9b:cf:2a:4f:08:d7:bd:62:24:78:
7a:0f:c3:f1:3f:cf:73:99:3c:bb:11:95:c2:41:69:fd:04:24:
dc:1b:dd:9c:f7:26:e8:2e:3a:53:90:db:4b:58:50:bb:ff:48:
e3:47:31:69:a4:93:d4:81:98:f1:41:3b:c2:8a:64:1e:00:ed:
c3:99:0c:8e:59:7f:d2:a9:b6:8d:2a:28:4a:9e:3d:0e:96:9c:
a8:40:d0:52:8b:66:6b:e1:40:e7:1c:4f:b3:e2:a6:68:58:aa:
95:38:7e:d3:0f:70:1a:42:c4:64:38:59:12:65:91:2c:dc:fd:
8d:d8:8a:51:5e:e8:5c:57:aa:bf:bb:42:78:4e:e0:98:5a:d2:
06:ef:24:52:10:70:68:92:e5:27:28:2f:66:1d:4b:52:87:af:
e9:a1:0f:71:79:eb:35:ed:c7:85:c4:4e:82:0e:d8:4a:4f:57:
e5:d0:a4:65:16:78:d3:f1:84:27:d0:0d:f4:39:b4:91:37:c0:
0d:69:97:71:4b:49:43:61:36:d9:e4:bd:76:01:b7:bc:08:8e:
92:d6:25:21:64:8c:dc:83:c3:8f:1a:68:3e:6d:f7:ab:7d:5f:
87:ed:0c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:31 2025 by rpki-client