Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4492608CF42411EFB0655382762E951A.roa
File: 4492608CF42411EFB0655382762E951A.roa (raw, json)
Hash identifier: gNlNsn+fw7AiFkTTAnkYGxVCamD7YmTRhk1d1bSrB+0=
Subject key identifier: 18:99:3F:46:65:4E:4E:44:2C:5C:98:14:54:74:D7:07:2A:5D:A0:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4492608CF42411EFB0655382762E951A.roa
Signing time: Wed 26 Feb 2025 09:30:08 +0000
ROA not before: Wed 26 Feb 2025 09:30:04 +0000
ROA not after: Thu 19 Feb 2026 09:30:04 +0000
asID: 328608
IP address blocks: 154.200.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90578 (0x161d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:30:04 2025 GMT
Not After : Feb 19 09:30:04 2026 GMT
Subject: CN=67bedf20-a37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:7f:7a:fe:61:cc:ca:02:44:9c:08:29:3c:
c1:04:c1:6f:60:26:45:ae:61:2d:94:07:84:58:83:
67:8d:11:27:7d:da:45:37:a0:53:9d:41:06:21:fa:
25:4f:98:e0:c5:9d:5d:a4:ef:97:f9:08:e8:eb:74:
62:93:d6:f9:9f:42:c2:4c:ab:95:f9:96:d2:fa:1d:
4e:53:c1:3e:a7:2b:f0:6a:e7:5b:37:f0:4a:52:38:
0d:2d:57:54:76:db:4f:ee:5e:c8:04:74:9e:32:2d:
cf:7c:d5:d0:af:7f:bb:5b:74:05:50:14:31:32:b5:
25:6f:43:19:8a:db:27:a5:e4:17:a5:6d:1f:a7:e8:
86:a0:a4:e9:4d:a7:8f:7d:a2:e1:6c:06:ae:7b:4a:
eb:03:e2:7e:83:80:6a:28:4a:97:ea:fb:95:0d:d9:
f8:c1:51:79:ac:59:94:f7:57:cc:86:43:da:1f:3a:
1a:2b:06:74:24:1a:18:ea:78:51:e9:23:90:ea:01:
1f:ee:55:5e:74:8f:0f:ee:cc:fc:df:df:58:43:89:
65:22:52:e5:62:54:ca:e1:ff:c5:be:13:da:3b:4c:
d8:99:d1:2a:6c:3d:62:4b:26:b1:41:4b:44:b4:aa:
96:89:9d:d6:82:f4:d7:a7:5c:fd:61:98:4b:b3:51:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:99:3F:46:65:4E:4E:44:2C:5C:98:14:54:74:D7:07:2A:5D:A0:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4492608CF42411EFB0655382762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:27:65:7d:fb:19:39:24:dd:33:9e:35:e6:c5:6b:3c:ed:29:
54:c3:00:0a:20:4b:95:0b:62:7a:18:68:64:9f:70:8e:7f:f6:
84:71:0b:ce:58:11:ec:55:c0:72:ff:ad:e8:3a:c8:90:aa:1b:
dd:e9:0e:8b:63:5c:18:96:29:22:68:b7:57:2e:2e:08:d9:6b:
07:7a:e5:5c:ab:24:96:9a:b7:34:e8:f7:89:e6:f5:c2:b1:42:
0d:a7:00:7c:29:3e:61:eb:0d:49:95:19:4d:25:cb:57:17:3e:
03:c7:17:26:59:9c:66:3f:41:5c:1f:9c:1a:83:4f:a6:8a:fe:
30:4b:2d:0d:f7:7b:c5:e9:3f:93:22:78:a0:bd:7b:e2:39:f5:
8d:08:e4:0c:0b:c5:f0:2a:91:65:f4:f4:35:f1:ab:fb:2d:10:
95:ee:a5:e0:03:3a:5a:5e:27:77:6a:e1:a0:a9:b6:81:ec:b3:
15:17:df:ab:3d:6d:58:63:ca:53:1e:eb:1d:5b:cd:5a:39:18:
cc:c3:56:b8:d7:0e:3e:c9:10:eb:31:93:98:0b:3f:38:23:be:
71:27:24:dc:65:4e:3c:30:b8:5e:25:46:3c:62:80:14:d7:40:
6e:7b:b6:a2:b4:06:1c:c7:2c:4b:3b:7d:da:26:52:52:6e:85:
35:af:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:59 2025 by rpki-client