Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41679E8AF42F11EF81AF4F50762E951A.roa
File: 41679E8AF42F11EF81AF4F50762E951A.roa (raw, json)
Hash identifier: /ccY4yCwF7DZR4zOJuy4pmqIH0QhAjEw1DhHdzKFR40=
Subject key identifier: 3A:74:79:72:6E:24:59:26:B7:1A:A4:CF:E4:30:01:91:29:E4:0D:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016252
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41679E8AF42F11EF81AF4F50762E951A.roa
Signing time: Wed 26 Feb 2025 10:48:47 +0000
ROA not before: Wed 26 Feb 2025 10:48:43 +0000
ROA not after: Fri 20 Feb 2026 10:48:43 +0000
asID: 984
IP address blocks: 154.199.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90706 (0x16252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:48:43 2025 GMT
Not After : Feb 20 10:48:43 2026 GMT
Subject: CN=67bef18f-002f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:c5:24:88:8c:d8:98:14:97:86:e0:d2:17:
ac:67:ae:f1:2e:d3:a4:5c:1e:3b:f3:b7:8b:55:72:
fd:a9:9d:fe:7e:38:d8:2d:18:ee:51:cf:68:a5:5c:
01:fe:77:80:29:78:e6:07:31:71:bb:06:4b:9f:56:
93:c9:bf:8f:8a:7d:91:82:ff:9c:ff:a8:cc:5e:bd:
2f:ee:6b:e4:f6:ac:14:4c:94:b3:74:77:0d:f2:50:
38:60:c3:b6:83:24:df:2b:6b:fb:29:02:cb:90:d6:
9c:e1:0f:4f:67:ac:ee:22:4c:fd:95:ea:22:3c:60:
6a:2c:40:c9:b2:89:3b:1f:d8:c1:b1:a9:69:c6:ea:
52:06:11:62:8c:53:1b:7a:45:f6:48:b5:25:7a:84:
24:c8:7e:94:4c:cb:6f:69:f0:80:6d:51:98:ef:8f:
3d:af:7c:a8:38:33:c2:69:c2:05:d0:be:c5:8e:01:
d9:8e:2a:60:0b:4d:24:32:b6:4f:35:a6:78:d8:08:
b4:81:0f:0a:11:83:2f:01:f2:b1:5b:44:52:b2:42:
a2:4a:a9:cf:80:c6:94:78:b7:0d:e8:6e:39:03:e7:
de:b4:f4:49:cd:c3:3b:d8:25:2f:35:68:c7:4f:e6:
ac:0c:63:6e:bf:7c:ad:e8:ce:f0:62:f9:05:52:9c:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:74:79:72:6E:24:59:26:B7:1A:A4:CF:E4:30:01:91:29:E4:0D:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41679E8AF42F11EF81AF4F50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:77:26:62:2e:ae:e3:b7:6d:a5:1b:95:e3:38:bd:38:e2:bc:
4b:d9:3d:09:94:c4:35:26:8a:45:15:0a:4a:0c:b0:2b:56:3d:
9a:2f:b4:4b:35:04:c6:5a:28:44:e5:8a:18:5d:27:3c:e1:8e:
ce:e8:f0:74:6f:3a:68:42:a5:2f:91:87:9e:33:55:dd:41:0c:
51:d3:91:e3:91:36:64:f0:5a:fe:10:a7:61:a1:10:f3:d0:9c:
46:38:70:07:91:60:ec:57:8f:1a:62:c4:95:05:80:b5:99:de:
3c:4c:d6:1b:f2:49:9b:0e:a4:ed:73:dc:02:e0:ea:07:76:52:
b9:c5:dd:6e:9f:be:a1:cd:c4:d2:d5:63:71:8c:81:32:05:65:
57:51:37:56:37:04:bf:07:60:93:f3:8d:3f:b1:9c:64:fd:01:
07:ee:cf:9b:bb:6f:b2:65:a7:b0:d0:41:58:8d:0d:ca:2b:16:
92:82:da:12:6f:be:57:c6:7e:ee:8e:1b:f5:c6:32:64:cd:18:
83:92:d7:7f:be:30:41:df:fa:c8:d8:1b:64:8b:1a:c4:1f:78:
55:f7:f4:fb:b2:99:50:2a:67:0a:24:19:7b:7e:9a:b9:25:b4:
2f:1c:5d:81:21:44:bb:27:b3:ec:c5:23:fe:92:50:35:d9:dd:
29:3a:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:48:00 2025 by rpki-client