Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30CC1E12F43D11EFB28915B1762E951A.roa
File: 30CC1E12F43D11EFB28915B1762E951A.roa (raw, json)
Hash identifier: vQoSqtIK0hE6ea0QSAPsc0VAWlkJKisdcaU4J3xueGk=
Subject key identifier: A8:62:0A:F6:BB:14:99:14:A5:92:CA:18:CE:C7:D9:D4:77:0C:EB:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016320
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30CC1E12F43D11EFB28915B1762E951A.roa
Signing time: Wed 26 Feb 2025 12:28:32 +0000
ROA not before: Wed 26 Feb 2025 12:28:28 +0000
ROA not after: Fri 20 Feb 2026 12:28:28 +0000
asID: 984
IP address blocks: 154.199.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90912 (0x16320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:28:28 2025 GMT
Not After : Feb 20 12:28:28 2026 GMT
Subject: CN=67bf08f0-4632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c2:28:d7:c6:af:ee:c5:28:7b:54:c2:96:50:
1b:c5:1c:ad:d5:b6:8c:aa:4a:6f:88:a2:de:9f:5f:
87:96:d5:67:54:00:df:aa:2a:7b:4a:82:d2:3f:6b:
87:18:0d:72:a2:20:3f:b7:b1:1c:58:c5:14:58:ed:
25:7e:af:16:f7:a8:05:ec:6d:99:a4:78:51:42:ba:
d9:ae:a5:ef:a5:22:a4:fc:d4:21:77:25:ed:31:21:
9c:e1:1d:9a:62:f7:3b:f4:c4:4b:ba:14:7b:83:1a:
ff:05:dc:35:f6:e3:8b:87:3e:f8:71:3e:29:aa:02:
86:98:7e:85:fa:6d:cf:3e:a0:f7:1a:60:0f:8b:e2:
c0:bd:96:f9:98:a5:1e:61:22:ca:3d:4c:5d:17:29:
a1:87:60:96:c0:0c:75:09:8c:b6:0d:32:84:07:ea:
ef:9b:99:51:97:17:f4:77:e4:7c:62:79:7b:74:4d:
8f:55:31:c9:2c:1a:7b:e6:e2:f1:b4:30:59:8d:fe:
09:44:6c:28:1a:ae:c3:9c:e6:03:9d:d0:2e:83:72:
04:1a:e6:d8:1c:6a:9f:bb:78:24:4e:31:a9:2a:18:
ab:15:e5:08:33:87:53:38:6d:72:83:26:d7:dd:eb:
67:65:f5:22:0b:af:fd:d3:5a:b5:9f:92:c0:26:98:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:62:0A:F6:BB:14:99:14:A5:92:CA:18:CE:C7:D9:D4:77:0C:EB:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30CC1E12F43D11EFB28915B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.159.0/24
Signature Algorithm: sha256WithRSAEncryption
82:58:f2:bc:2e:dd:68:58:60:00:d5:4f:26:53:36:14:76:e9:
7a:39:6a:06:73:e3:50:7f:46:56:9a:dd:a4:13:ad:f0:2d:2a:
e2:b0:62:54:9b:50:17:71:c2:e4:19:09:f3:70:7f:03:01:70:
bd:7e:6a:78:be:4d:8d:d1:f9:5c:35:d2:bc:47:a7:e2:e6:ad:
3e:27:1a:ea:0d:75:3d:08:86:71:96:e1:43:6e:dc:5e:b2:94:
96:dd:2a:54:ab:6a:cb:41:2c:db:77:85:c3:9e:8e:58:8f:42:
6d:b1:7a:08:da:23:65:c3:b7:0b:1b:d3:e7:44:5b:5e:61:23:
df:b2:f3:42:c2:95:3a:da:e2:15:44:ba:27:3f:44:6a:2d:b2:
3c:3c:34:79:4e:bb:2b:40:b4:0c:a4:89:a6:b9:13:a8:3d:d9:
0e:35:98:e4:b9:1a:dc:81:b5:f9:7f:b0:33:89:1c:d2:ce:46:
2a:54:05:c5:b8:5d:3f:a7:17:16:80:fe:1e:c9:5c:77:d1:f5:
3e:5c:d9:27:17:20:83:7e:fd:90:58:d9:0b:6f:aa:7a:c8:66:
29:48:a6:41:ab:44:51:ef:ae:b3:13:30:e1:04:70:bc:ed:80:
5d:9e:68:c7:14:89:90:81:89:0a:ff:f5:70:64:ce:d2:95:e2:
a1:4f:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:54 2025 by rpki-client