Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B9CB24F43711EFB7012F86762E951A.roa
File: 20B9CB24F43711EFB7012F86762E951A.roa (raw, json)
Hash identifier: +BjMXuHpr0DhneM/Hd1BKAVQxJSA1ya50X6weL7buwo=
Subject key identifier: C1:56:B5:05:F0:34:0B:89:16:90:28:63:09:89:F5:C3:90:92:C9:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B9CB24F43711EFB7012F86762E951A.roa
Signing time: Wed 26 Feb 2025 11:45:08 +0000
ROA not before: Wed 26 Feb 2025 11:45:01 +0000
ROA not after: Thu 19 Feb 2026 11:45:01 +0000
asID: 984
IP address blocks: 154.208.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90810 (0x162ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:45:01 2025 GMT
Not After : Feb 19 11:45:01 2026 GMT
Subject: CN=67befec4-4a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:b3:f4:4d:9d:d8:f6:89:71:f9:8f:be:38:
79:0e:32:c4:51:b9:26:53:fd:29:a7:9f:1b:bc:3a:
21:bf:76:fc:92:ac:eb:44:04:9e:0e:6f:77:88:1d:
fb:b1:bd:92:7d:0c:15:d5:2f:99:11:ed:f2:c2:a1:
2e:cb:40:9a:fd:30:cd:82:5e:d3:ed:65:30:3f:93:
e1:ac:05:d1:4d:1b:8e:6e:98:c8:15:88:43:f8:1f:
0f:10:a2:fd:67:c3:c8:c5:a0:cb:69:f0:43:00:0e:
9d:04:f9:d7:12:81:7e:d4:a2:4a:08:a8:ea:da:04:
6e:95:dd:cc:a8:2b:96:c2:fc:af:ad:8b:ff:76:59:
26:40:83:50:03:cf:25:9b:f4:1b:16:2e:0d:c3:7b:
39:3c:0c:e9:a5:49:93:9c:a0:1e:29:0b:55:d4:3f:
47:89:85:6e:8d:7a:01:e2:0f:28:c9:48:ee:6d:7c:
7e:d6:7a:0a:d0:1a:6b:66:e9:24:8f:7a:7f:1d:99:
d9:b4:e5:d1:96:d7:7d:da:85:6f:23:51:ea:49:91:
e9:5c:7d:4e:e2:52:3d:e0:39:49:d4:4f:1d:79:ba:
a7:fa:1a:74:58:0b:b3:54:e8:44:9c:50:23:1d:f9:
9f:11:d2:f3:3f:2c:5a:9a:a1:7e:e9:ea:80:2a:bf:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:56:B5:05:F0:34:0B:89:16:90:28:63:09:89:F5:C3:90:92:C9:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B9CB24F43711EFB7012F86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c6:ce:76:d1:bc:81:b2:a1:34:d8:11:a8:36:d6:2e:1e:66:
eb:e2:cf:d3:43:16:f4:44:40:cb:97:06:69:6e:81:60:d8:53:
c4:8b:ed:97:49:dd:1f:8a:6b:7c:c4:04:39:59:66:de:ba:08:
f0:53:9f:2e:29:c1:21:98:60:f4:0b:8d:30:42:1f:a8:21:ee:
eb:6f:8c:af:a6:6f:e2:56:96:9b:a9:c6:29:cb:8d:3d:64:1a:
7f:a6:e0:18:8d:d7:f8:68:73:77:e9:56:be:cc:da:6d:26:a7:
35:3f:59:83:51:e8:36:cd:da:02:1f:de:cd:cf:7f:9b:01:de:
dc:9a:af:37:00:ed:79:e7:c2:e6:ab:ea:d2:9f:fb:97:c3:60:
29:f5:e7:49:71:6a:ac:f4:7a:7b:48:21:22:ca:e6:ee:b4:1d:
08:62:33:58:ce:c6:bf:ea:10:c8:9c:91:da:9c:8e:69:89:0e:
f1:51:59:38:68:95:30:a9:c8:21:e8:fd:87:1d:7b:66:59:f7:
32:6d:6c:88:44:6d:3d:b7:9d:7c:c7:e1:9d:77:68:8d:1d:13:
e8:72:86:9b:a7:c8:2b:d5:68:dd:79:7f:ab:c8:2a:ba:41:74:
84:d9:e7:7f:a3:79:25:0d:27:9a:60:0b:1a:ed:82:1c:7f:a0:
2a:ca:c9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:45 2025 by rpki-client