Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE9E2D0CDC011EFB43F9878762E951A.roa
File: 1AE9E2D0CDC011EFB43F9878762E951A.roa (raw, json)
Hash identifier: Bik214ryjSOvgh13mgwGY1BLOL4nc1zJQzRRBI5kY74=
Subject key identifier: DB:8B:4F:9D:69:9B:20:1E:51:44:4D:42:2C:F6:6F:75:B9:04:F4:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01370A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE9E2D0CDC011EFB43F9878762E951A.roa
Signing time: Wed 08 Jan 2025 12:57:24 +0000
ROA not before: Wed 08 Jan 2025 12:57:20 +0000
ROA not after: Tue 16 Dec 2025 12:57:20 +0000
asID: 984
IP address blocks: 154.200.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79626 (0x1370a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:57:20 2025 GMT
Not After : Dec 16 12:57:20 2025 GMT
Subject: CN=677e7634-e934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:19:2f:5e:1b:19:2b:ee:b2:9c:e1:5a:d2:c4:
e8:32:bc:c8:6d:ad:28:db:01:37:57:da:79:8b:bb:
e5:7a:a2:55:a4:ce:1c:7e:d2:46:85:ed:d8:db:44:
e3:b0:0b:6f:69:0c:9c:fd:cf:1d:84:c5:1a:5d:ac:
3c:59:c2:21:a1:22:0a:3d:ee:7b:f7:2f:f4:6a:b5:
11:de:35:de:15:8c:93:55:9c:08:4a:40:24:f9:a5:
10:24:90:73:59:ae:4f:b7:96:ed:d9:bc:23:51:66:
e0:b4:8f:7b:ff:17:07:15:67:65:b9:28:76:8d:cb:
5a:49:35:b3:44:52:86:55:80:c0:a1:69:2f:c6:b4:
bb:c4:3b:b3:c6:42:64:43:fa:bb:9f:30:b3:29:07:
d7:54:01:7f:e2:a8:d2:55:78:85:ca:0c:ce:7f:9b:
a4:c3:e3:32:d6:2f:55:bb:44:4f:94:5f:26:49:84:
21:4e:e1:8b:95:d3:d1:9a:a0:bf:21:fb:db:74:de:
83:66:e1:63:ec:55:f0:85:7a:96:36:3b:81:53:b1:
d4:c6:a3:f6:63:8e:00:f5:cc:09:26:01:7a:68:1e:
16:61:30:b3:50:d7:b9:7f:6c:e2:9d:95:ac:96:6f:
05:3c:9d:e7:1e:ab:1d:ce:51:27:7b:9f:c3:08:60:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8B:4F:9D:69:9B:20:1E:51:44:4D:42:2C:F6:6F:75:B9:04:F4:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE9E2D0CDC011EFB43F9878762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.228.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:ad:90:e2:24:08:02:bd:3f:f0:cf:a9:97:86:06:b2:a0:62:
64:ed:63:7c:43:02:db:b7:67:d3:2e:25:aa:05:d8:94:a7:d5:
00:dc:61:db:ae:37:85:f8:9d:f1:bf:f4:39:68:31:51:07:f6:
f6:e5:97:fb:d3:fa:7f:3a:b5:be:86:cc:5d:09:9d:e9:94:f7:
8f:ce:53:20:95:76:63:29:f3:f0:a9:02:a8:fa:67:6d:f8:b2:
b0:2c:12:4a:5d:0d:fe:2c:11:73:a5:81:77:28:b0:6f:18:ed:
f0:26:dc:a4:46:38:93:d9:76:65:a5:b2:20:06:ab:93:24:f9:
b3:83:b8:ce:a5:1d:14:f9:fd:35:9c:4a:8c:fc:3a:79:9d:1f:
29:6c:ef:64:1c:f1:6c:e8:b3:94:2f:84:5e:a0:26:16:e9:34:
b1:d5:a4:ca:2f:25:d9:73:55:76:d8:ee:86:9a:10:cc:10:17:
71:c3:9a:55:43:7c:bd:3e:1b:71:9f:15:ab:d1:9f:9e:e8:84:
ac:a6:36:c7:e9:d1:a9:f0:0f:d5:57:4b:e5:03:08:fe:f8:a5:
21:75:47:f0:50:eb:86:1c:f6:11:24:a8:31:34:df:5f:83:87:
1f:52:3c:38:ab:4b:de:e7:06:c1:1e:0e:86:df:73:86:eb:23:
44:9f:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:31 2025 by rpki-client