Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B89954F43B11EF82AD8AA2762E951A.roa
File: 15B89954F43B11EF82AD8AA2762E951A.roa (raw, json)
Hash identifier: UWZp01rKMBQVE8/tZMsDA8fecJWzMoqxTotUi/VO7xg=
Subject key identifier: 4D:21:35:A5:EB:A7:2F:3F:5D:EA:68:8A:29:CE:87:15:8A:4E:B2:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B89954F43B11EF82AD8AA2762E951A.roa
Signing time: Wed 26 Feb 2025 12:13:28 +0000
ROA not before: Wed 26 Feb 2025 12:13:24 +0000
ROA not after: Thu 19 Feb 2026 12:13:24 +0000
asID: 984
IP address blocks: 154.208.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90877 (0x162fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:13:24 2025 GMT
Not After : Feb 19 12:13:24 2026 GMT
Subject: CN=67bf0568-f3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:62:fe:c7:a7:72:19:c5:de:07:fb:46:cf:b7:
e7:c0:45:56:c3:b7:bb:49:f0:d5:ad:de:68:d5:9b:
2f:c0:00:e8:a1:d6:db:94:2a:f7:9f:e4:ed:61:0d:
9f:fd:d1:0d:b2:13:3a:8f:81:d4:f6:a5:4a:ec:cb:
30:54:79:93:2d:c6:9c:27:4c:0b:cc:78:52:6d:8a:
e7:48:09:03:0f:94:3b:0c:f5:56:d9:31:36:e2:c0:
50:ea:a7:e5:e6:5c:88:80:40:46:4e:81:17:a9:0e:
70:97:2f:b3:61:e1:f9:89:36:48:61:ed:5e:2c:c1:
71:e8:26:04:00:bc:29:90:47:05:8a:98:53:cb:97:
65:e3:92:01:39:a8:d2:24:18:58:e5:d8:f8:48:00:
80:44:32:a8:7a:aa:ca:38:2e:8e:e7:73:39:ce:cc:
25:d9:04:3e:5a:17:0b:c6:29:25:88:7a:cf:c8:45:
57:ad:c6:cb:05:07:96:6a:b7:95:f5:87:1c:12:2b:
78:ac:b8:6f:0a:1c:a6:4f:54:95:12:8b:48:5b:22:
6a:e2:0a:08:93:2f:12:ba:53:0d:85:5b:47:11:07:
8b:6b:77:78:ac:46:eb:2d:1b:2b:63:e3:c4:52:2f:
df:cb:35:02:e8:c4:e4:34:b2:c8:85:96:c2:a2:6d:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:21:35:A5:EB:A7:2F:3F:5D:EA:68:8A:29:CE:87:15:8A:4E:B2:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B89954F43B11EF82AD8AA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.115.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ec:19:63:bc:74:00:f2:19:9a:b7:d0:81:f5:88:17:2c:23:
75:b8:5c:64:55:f2:3e:38:31:fa:4c:0f:2f:91:be:5a:b9:50:
41:65:c7:39:00:29:3d:3b:1a:f3:88:5b:e5:27:8f:9c:31:88:
f1:90:2d:fb:8d:8c:99:a6:02:7c:f3:52:5b:f1:d3:af:23:9e:
7c:b6:32:51:cd:92:b3:49:46:6d:be:03:14:1d:3b:3b:34:2e:
29:98:ba:13:ac:3a:28:77:11:53:de:8a:0b:ce:c6:fb:69:48:
ff:53:8f:0d:76:51:de:5f:fc:35:18:84:09:a2:36:a1:16:e3:
f9:a9:79:7b:16:07:d1:cb:f9:a6:e2:19:28:7c:61:0c:94:6a:
c6:42:57:6c:10:80:fa:06:eb:6a:a9:6b:7a:5b:82:37:02:80:
07:9d:f6:f8:7f:77:b8:7e:10:89:3c:45:78:ac:30:de:c9:0a:
e9:77:37:46:85:90:af:a2:89:d1:96:9e:e8:ca:6d:63:2d:e2:
d0:fb:1c:6e:96:5f:87:e9:6a:42:2a:a5:de:bc:81:f5:37:0c:
9b:33:f7:8b:be:d0:36:24:b6:01:a4:42:1e:9f:e2:67:fe:5c:
a9:f3:00:e7:9a:78:d8:b8:29:29:26:53:b9:35:a0:8f:f9:76:
52:8b:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:42 2025 by rpki-client