Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17979B10F44711EF9D5D4477762E951A.roa
File: 17979B10F44711EF9D5D4477762E951A.roa (raw, json)
Hash identifier: daVKPkIaBL829x6eFQnlmNROfCvqRI/Az5qyttbNDyo=
Subject key identifier: 9C:E4:65:3F:26:8A:D5:77:D3:BB:F8:AF:95:4F:5E:66:74:F7:4B:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17979B10F44711EF9D5D4477762E951A.roa
Signing time: Wed 26 Feb 2025 13:39:25 +0000
ROA not before: Wed 26 Feb 2025 13:39:21 +0000
ROA not after: Thu 19 Feb 2026 13:39:21 +0000
asID: 984
IP address blocks: 154.210.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91103 (0x163df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:39:21 2025 GMT
Not After : Feb 19 13:39:21 2026 GMT
Subject: CN=67bf198d-930a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:f1:71:3e:54:62:43:6e:67:31:aa:d8:8c:
68:cd:02:0f:ca:5a:f6:44:41:73:6f:82:21:4d:90:
06:af:95:d8:9a:e9:3d:16:78:12:f8:d1:7f:e4:ff:
5d:f3:c6:7d:c5:c7:e2:eb:7a:31:79:b0:8b:97:c1:
96:0f:1e:96:d2:c4:ed:04:cd:af:c6:43:2a:67:48:
99:cf:6d:b0:62:4c:5a:ee:16:4c:a7:27:2a:b3:47:
28:07:6e:28:af:77:b5:17:21:89:ff:a2:77:8c:c5:
5a:3c:3f:9c:ef:99:f3:9b:99:fd:c9:f7:62:67:e7:
ac:f9:59:25:54:74:af:28:97:78:54:20:87:c0:79:
61:21:33:2f:13:f3:9c:74:4c:9f:ff:67:1a:ea:5f:
37:06:e8:51:92:c9:9b:15:ba:62:f7:0e:c5:07:f3:
f1:98:48:6f:ea:08:27:2b:b2:d0:8f:b8:c0:26:be:
9e:70:c5:cf:85:7d:f9:d9:60:2b:63:29:82:34:df:
bf:ce:77:f8:bb:a5:5d:8c:a2:4f:8e:e7:50:70:a9:
9d:01:62:e0:31:60:f8:3e:b6:d6:45:06:96:fa:a0:
65:04:7b:e7:56:13:26:21:ee:89:36:62:c3:76:65:
99:a1:fc:ff:b3:ef:03:41:8f:3c:54:ab:34:ad:40:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E4:65:3F:26:8A:D5:77:D3:BB:F8:AF:95:4F:5E:66:74:F7:4B:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17979B10F44711EF9D5D4477762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.34.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:27:15:54:f9:64:aa:63:fd:09:8b:36:2b:e3:82:2b:63:5a:
99:cf:b5:0b:ef:fd:3d:1b:85:0b:de:d5:96:5d:3e:fd:39:96:
4c:db:2c:81:c8:d3:19:d6:96:19:a7:f7:b2:bc:73:53:3a:9c:
8b:43:f5:45:b0:7f:b2:98:a6:f7:b2:10:9b:ae:88:60:06:ad:
90:82:57:7f:02:90:f5:13:7d:75:13:1c:30:b1:0c:95:1e:8f:
fb:16:1a:24:8b:bb:70:b5:a8:34:61:68:13:67:9f:81:49:1c:
01:bc:1f:e9:f8:31:75:eb:02:8a:52:75:9f:d7:81:89:c6:cf:
94:c8:af:dc:fa:2d:cd:c1:b7:b8:e6:b5:80:cc:b8:83:14:44:
df:d0:41:df:b2:b1:81:cf:bc:4f:21:d4:d1:cf:9c:74:41:05:
8b:ef:81:3f:2e:52:fd:50:62:90:59:e0:b5:ed:52:f2:28:de:
57:5a:c8:f7:fd:a2:44:60:cd:1e:59:3f:e3:58:5e:90:01:fe:
72:74:42:2d:6e:77:a8:ba:aa:b6:ae:65:bc:07:d9:89:69:fe:
b7:da:49:76:a2:f0:95:eb:10:5f:33:e8:18:97:06:47:5a:a4:
2a:d1:1a:d9:90:96:24:7a:6a:a7:a2:34:46:dd:a3:6d:1b:db:
51:89:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:57 2025 by rpki-client