Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47BD9630F45311EFA2BB6F4E762E951A.roa
File: 47BD9630F45311EFA2BB6F4E762E951A.roa (raw, json)
Hash identifier: 9Kf9PzKBdFbuh9VDETq2qY1SrgI9t2LKFRfHnQofY9Q=
Subject key identifier: 06:5A:6D:6E:DF:56:1D:E9:5D:C7:75:D5:EE:13:3E:8A:3F:BF:FF:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47BD9630F45311EFA2BB6F4E762E951A.roa
Signing time: Wed 26 Feb 2025 15:06:39 +0000
ROA not before: Wed 26 Feb 2025 15:06:36 +0000
ROA not after: Thu 19 Feb 2026 15:06:36 +0000
asID: 984
IP address blocks: 154.210.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91301 (0x164a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:06:36 2025 GMT
Not After : Feb 19 15:06:36 2026 GMT
Subject: CN=67bf2dff-7549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:c0:0b:89:40:27:83:4a:37:f3:dc:0a:93:
7e:64:aa:2b:ec:e7:1f:98:a6:fa:a1:f8:77:3a:30:
3a:89:db:66:b8:c4:1a:6e:fa:eb:b9:02:c9:20:f9:
96:dc:b1:35:4c:ca:97:86:2f:d6:36:2c:7e:3c:49:
ed:9e:ad:59:7a:e0:49:ec:bc:84:e0:6f:d6:d1:af:
62:cc:58:8d:cc:b1:71:63:3e:2c:7d:69:54:10:59:
d6:3e:48:f2:7b:8b:fc:3e:c8:3e:26:ec:49:2b:bb:
60:bb:11:0e:66:df:be:4f:1a:3c:09:43:5a:78:8e:
3e:35:66:ca:2d:27:b7:2b:57:9e:4d:e5:12:4c:6a:
53:a8:29:9b:a5:6d:31:7c:df:a0:e4:ff:2d:b7:3a:
fe:84:0e:a3:68:ab:0e:90:27:4f:e7:50:fc:f3:53:
a3:34:51:4e:1a:b2:0e:0e:9a:28:8b:d0:d7:4d:f0:
86:5b:24:88:78:7b:ac:7e:4c:76:69:c1:63:ed:da:
b5:a5:ea:2f:16:27:9e:9a:5c:e2:dc:0f:1b:64:14:
10:66:f9:ec:b3:6d:86:fb:19:05:d4:2c:86:51:3a:
cb:d9:f2:ee:df:d0:4b:6d:5b:47:e5:a2:e4:a8:a9:
4d:af:5b:14:b0:4f:2d:d8:a9:b9:a7:a4:37:ae:71:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5A:6D:6E:DF:56:1D:E9:5D:C7:75:D5:EE:13:3E:8A:3F:BF:FF:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47BD9630F45311EFA2BB6F4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.82.0/24
Signature Algorithm: sha256WithRSAEncryption
59:7d:dc:6e:14:dd:bd:f0:91:59:c9:8f:55:a9:f7:d9:5a:28:
b6:08:e0:60:df:02:56:ac:67:ea:de:fc:d8:04:b6:5b:f9:0d:
da:2b:0f:e1:98:1b:02:44:b4:3a:c3:dc:30:01:7b:3b:3f:4e:
2a:b8:11:79:d0:78:c9:56:29:be:b5:27:15:0a:3b:3e:a5:8f:
3d:1d:d5:1d:ed:c2:25:94:d7:81:d3:7d:ba:10:aa:26:1d:2f:
5d:94:dd:5f:0c:52:9c:b7:b8:db:17:fe:85:c0:da:da:8c:c2:
0b:08:bd:2d:27:57:63:f0:0f:42:29:b1:9f:b1:e0:79:6a:9f:
f3:2f:dd:c6:5b:bd:d4:ad:de:db:9e:68:0f:6c:03:b2:92:56:
2e:6b:b4:71:27:dd:a3:e0:c3:d7:41:37:7c:ca:08:9e:76:b9:
d6:6a:25:5c:98:ff:b5:53:de:30:fd:8f:c2:3d:2a:c0:ef:e1:
19:b4:b4:52:48:b0:96:a5:6f:40:6f:95:db:ba:a8:bd:35:a1:
91:23:26:02:2e:43:6e:80:7c:f5:37:21:5b:80:7b:57:a3:4c:
1e:14:51:04:1d:07:23:2b:fa:01:7e:8c:2c:c5:e2:01:c3:c5:
7f:01:21:fd:72:a2:b4:d3:47:d2:de:2b:78:01:51:3f:a4:b6:
a8:65:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:52:25 2025 by rpki-client