Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A85C694F45B11EFAFB6C285762E951A.roa
File: 1A85C694F45B11EFAFB6C285762E951A.roa (raw, json)
Hash identifier: 9MHjyRocmZb8OetO2ZT2+42Cr7KmcGxWnJuBqrRuDLw=
Subject key identifier: AE:B3:D6:DB:5A:23:14:A1:24:B6:2B:86:37:F8:CE:D5:F8:30:46:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016506
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A85C694F45B11EFAFB6C285762E951A.roa
Signing time: Wed 26 Feb 2025 16:02:40 +0000
ROA not before: Wed 26 Feb 2025 16:02:33 +0000
ROA not after: Thu 19 Feb 2026 16:02:33 +0000
asID: 984
IP address blocks: 154.210.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91398 (0x16506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:02:33 2025 GMT
Not After : Feb 19 16:02:33 2026 GMT
Subject: CN=67bf3b20-7a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:9e:24:1d:36:17:0c:dc:dc:96:e5:3d:7d:
db:5c:58:53:03:71:05:82:f4:67:1e:65:6e:38:9c:
e8:c4:23:84:1e:3b:c9:58:29:41:56:1b:c4:69:9d:
f0:aa:a1:1d:d9:40:af:e4:39:d3:5a:e3:c8:5d:5c:
13:a8:b0:3b:11:7d:80:e8:bd:7b:83:b1:0e:e4:3e:
35:f5:88:5e:e6:c8:ac:75:41:ce:09:4e:23:35:d3:
9e:ef:a1:6c:3d:c0:0b:d3:9c:d4:e3:44:65:f8:98:
70:28:df:52:eb:02:de:6f:ce:aa:f8:f7:53:46:d0:
78:23:f5:1e:66:45:5b:5a:3b:7b:9b:80:22:ac:58:
1f:33:fb:26:c9:f3:b5:e7:a7:75:e0:b1:f9:be:80:
ee:de:fe:22:6f:32:cf:70:54:ed:54:ad:04:7b:89:
b3:32:00:c7:b2:0a:41:cd:6d:7a:3d:2b:4f:89:30:
24:a5:b6:f8:86:40:e6:c5:14:17:99:53:9e:9e:e5:
d6:a5:c2:22:bc:44:73:9b:84:f4:e2:7f:3d:d4:66:
c5:fd:f9:52:e3:e9:04:b0:6f:80:28:c2:3c:3e:51:
f8:c8:f5:14:3a:ec:dd:e5:99:d1:a3:80:5c:66:bf:
25:fa:ef:a9:4c:ca:8c:e8:0b:ee:2f:2f:64:31:62:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B3:D6:DB:5A:23:14:A1:24:B6:2B:86:37:F8:CE:D5:F8:30:46:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A85C694F45B11EFAFB6C285762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.109.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:32:48:e0:5d:b0:9a:f9:e4:ae:fd:9d:80:dd:80:9c:0c:fa:
c0:f5:31:67:81:7f:5b:e6:13:0f:56:b5:07:fd:1b:7b:cd:28:
bf:17:b3:6c:aa:9e:2e:36:a7:86:ef:b6:ef:90:a3:b7:6c:4f:
d0:2c:d4:86:cb:2b:72:b8:91:1e:4f:59:7a:34:22:9f:be:68:
3d:78:ac:63:a3:4e:9c:29:29:24:38:00:28:ef:2b:b9:e0:09:
35:6c:70:18:44:61:ec:a7:8d:b8:fb:14:68:36:82:ba:86:12:
4e:78:57:a6:09:c9:58:bb:7f:cb:6d:87:a2:bb:ca:bd:7a:f9:
47:6e:48:a7:b8:42:e0:3e:1d:7c:d4:7f:db:66:ac:fd:06:2c:
73:83:16:52:ae:47:4e:0c:af:7d:4f:a7:67:20:78:51:8e:9d:
94:a0:74:28:45:82:20:88:a6:ac:6c:3e:45:7e:bf:51:13:53:
76:db:90:10:21:fb:b1:b2:2c:57:ef:f2:b4:54:3c:c6:95:4c:
82:80:fe:e2:dd:18:ad:ab:aa:19:be:96:d7:ba:c3:0b:93:21:
91:74:0c:d2:9c:0e:84:1f:90:2f:1a:27:22:f9:0a:19:c8:62:
70:5e:36:b3:92:2c:4a:5c:b8:c6:bd:ad:ae:29:0f:97:09:e3:
24:3d:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:08 2025 by rpki-client