Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8A5070F45811EF9825C56F762E951A.roa
File: 2B8A5070F45811EF9825C56F762E951A.roa (raw, json)
Hash identifier: z2O+a1uaPC+4/wfSuAVbV/RZJto/Lt1dzVXhPF69KSo=
Subject key identifier: AB:5A:B4:F7:D1:19:F5:EC:75:BE:8D:65:0A:EA:03:5D:55:05:6C:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8A5070F45811EF9825C56F762E951A.roa
Signing time: Wed 26 Feb 2025 15:41:40 +0000
ROA not before: Wed 26 Feb 2025 15:41:36 +0000
ROA not after: Thu 19 Feb 2026 15:41:36 +0000
asID: 984
IP address blocks: 154.210.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91366 (0x164e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:41:36 2025 GMT
Not After : Feb 19 15:41:36 2026 GMT
Subject: CN=67bf3634-5afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:71:5d:b2:9c:95:90:46:00:e4:4e:cd:29:
4d:f2:d3:d3:5a:4b:4b:da:7d:b9:50:83:a6:cf:3c:
b9:38:65:d2:7b:b8:bb:c9:10:8d:06:b2:9a:f1:63:
ae:a2:f3:e4:47:04:9a:4f:40:40:74:03:f0:73:94:
05:29:d7:24:e1:70:92:5f:5d:38:0c:34:b9:0f:35:
e3:35:0b:62:fb:a5:9b:44:cb:5f:74:9b:5d:77:20:
7a:08:a2:f9:54:b6:42:00:ac:90:d4:96:fd:59:77:
0a:0f:3e:53:e9:9c:35:18:43:93:de:a0:4b:c6:bf:
8b:5b:e4:b8:d6:3c:e5:da:08:19:97:c7:17:12:4f:
62:8b:d5:ca:4e:53:71:ec:cc:b6:7e:c9:a8:8f:25:
53:df:a1:b1:bd:1f:67:cf:eb:02:9a:49:07:2a:9a:
5e:c1:8b:17:be:07:fc:9a:5a:b0:dd:4a:62:4b:0a:
19:8d:61:1b:32:05:c0:84:31:e1:78:70:8c:7d:75:
9b:65:48:09:cd:73:a2:fa:7a:c9:ef:c3:b6:57:52:
24:10:33:13:84:36:8b:85:73:96:a3:95:7d:95:6b:
8b:60:15:95:2f:1d:ce:51:54:b5:08:12:58:81:35:
9a:1c:16:6d:55:7f:95:fb:14:89:03:34:e9:4b:35:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5A:B4:F7:D1:19:F5:EC:75:BE:8D:65:0A:EA:03:5D:55:05:6C:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8A5070F45811EF9825C56F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.98.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e2:51:0d:a4:15:0b:3b:97:2a:7d:37:11:75:10:85:19:d1:
2f:ce:91:87:4a:01:c2:dc:9f:b0:11:21:48:49:cb:4b:27:67:
8f:1e:49:6b:5b:bb:eb:3b:01:98:9c:64:f4:11:b8:61:94:37:
65:03:be:93:26:91:d4:15:0b:37:bd:23:72:92:77:dd:c9:a1:
75:b6:9a:26:77:30:bb:72:59:c7:f0:2a:3f:d3:6b:8d:04:e7:
f1:ee:9a:b6:01:00:07:fd:56:f8:1e:b6:39:9a:d2:7a:bd:d4:
6f:ee:e3:bf:da:be:91:f3:63:64:54:96:41:7a:07:73:fe:f2:
33:5d:e8:33:2f:33:39:7a:ba:d7:35:86:f7:4c:c9:cd:c9:ea:
1d:4f:a0:13:9e:f1:88:3c:2d:96:61:61:4e:be:4c:b2:a9:20:
c7:d8:57:16:5c:aa:a0:50:5a:1c:ea:84:2c:79:53:e4:00:9d:
dd:58:4b:7e:26:7c:b6:a2:67:e2:ba:24:da:4e:24:71:8a:7d:
7e:11:c2:dc:76:f1:fc:40:58:c5:f1:47:a1:25:60:cc:1c:ff:
2b:d7:fb:82:0c:41:ec:63:80:2f:49:02:71:8d:d2:80:66:77:
c4:00:03:ce:d6:69:c3:05:b4:5d:5e:d6:ff:43:95:b5:66:05:
21:7d:8c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:24 2025 by rpki-client