Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE0D11AF3E811EF89E20F60762E951A.roa
File: 1FE0D11AF3E811EF89E20F60762E951A.roa (raw, json)
Hash identifier: bldWcyCzH27G4e79+uQqqlgTcq5BHVrP/ZYobb+aQws=
Subject key identifier: 91:11:18:8B:69:97:6E:4B:86:0F:46:DF:E9:54:B9:B7:ED:B4:8D:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016082
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE0D11AF3E811EF89E20F60762E951A.roa
Signing time: Wed 26 Feb 2025 02:19:36 +0000
ROA not before: Wed 26 Feb 2025 02:19:33 +0000
ROA not after: Thu 19 Feb 2026 02:19:33 +0000
asID: 984
IP address blocks: 154.203.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90242 (0x16082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 02:19:33 2025 GMT
Not After : Feb 19 02:19:33 2026 GMT
Subject: CN=67be7a38-a503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:32:d1:7a:8a:3b:e7:15:b1:37:d8:57:11:
46:b2:8b:7f:ab:20:77:25:7d:d0:00:0a:71:a1:58:
cd:23:fd:91:1c:1d:d5:5d:1e:30:15:e6:81:56:b0:
2f:48:ff:56:22:2f:34:2b:af:70:80:9d:5c:50:60:
04:7d:70:8b:6d:b8:45:7b:92:4d:76:36:27:cc:7c:
18:fb:7f:80:ee:ad:77:23:64:0f:95:58:e5:c5:18:
3e:fd:30:64:fd:e9:ad:fd:e8:00:54:8e:e8:fd:c3:
7c:0d:4e:e4:d5:39:ff:90:17:af:ee:42:8b:14:30:
e5:26:a8:53:ce:84:09:f2:17:d6:45:2e:cf:69:4d:
70:d1:85:a3:53:ac:aa:ed:60:fb:fe:23:d3:98:90:
ad:6b:05:27:90:5d:fe:81:31:d5:d9:3f:47:fb:bd:
e8:28:ea:db:3c:d2:5e:2d:ac:dd:69:04:bf:55:9d:
65:b1:51:7a:ba:87:0b:fb:e8:5a:6e:46:ff:11:54:
f3:b9:74:5f:4f:a5:e3:d6:37:e0:65:ca:d1:04:71:
63:e4:b3:a2:81:03:6e:4d:34:76:96:dd:d7:55:45:
1d:10:fc:d2:80:77:1f:04:15:38:46:4f:7c:ed:a4:
d8:ff:ee:92:24:00:f7:c3:7b:d0:be:e1:60:09:f7:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:11:18:8B:69:97:6E:4B:86:0F:46:DF:E9:54:B9:B7:ED:B4:8D:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE0D11AF3E811EF89E20F60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.12.0/24
Signature Algorithm: sha256WithRSAEncryption
65:23:21:5c:56:db:a7:6e:81:9e:d8:84:be:69:cc:af:52:b9:
8c:79:34:3a:22:8e:6c:5f:d0:ae:c1:4e:35:90:c7:42:77:8b:
ad:99:37:bf:ac:12:73:01:fa:60:e3:37:01:a7:dc:fe:e7:aa:
02:c1:81:e7:5f:ac:84:9e:40:bb:2c:56:ec:d9:21:85:81:99:
81:7d:1f:ed:b5:47:ef:7b:64:77:de:34:11:0a:e6:f6:16:7a:
24:b0:88:06:f7:c2:8c:51:92:fd:5f:92:0f:8f:3d:a7:09:1f:
a8:5a:96:ad:7b:09:1c:70:25:d9:f7:ce:74:58:ca:b1:cd:25:
cf:e4:9a:84:7d:b5:81:88:62:d4:22:d4:a9:ec:af:18:f4:89:
5b:7c:a3:d8:e6:21:96:d8:3b:d9:e7:1b:b0:c7:b7:3b:00:fe:
6a:31:03:00:5b:96:3e:8a:03:d7:22:d9:60:f0:d8:92:cc:37:
60:c4:fd:0c:64:a0:0a:ec:ca:e5:96:94:d1:fc:f5:a9:25:8b:
48:45:2a:bb:a0:59:05:13:5f:87:56:0e:93:21:f4:6d:53:2d:
a9:0b:f8:fd:a0:5e:4c:41:29:90:45:14:44:04:5e:24:1e:45:
0e:ef:49:f4:98:6f:a1:19:29:20:56:cf:92:83:17:be:e4:ee:
32:2e:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:37 2025 by rpki-client