Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F020FA6CDC111EFBB7DF680762E951A.roa
File: 4F020FA6CDC111EFBB7DF680762E951A.roa (raw, json)
Hash identifier: Kfbki/P2dgiQtHG3sZM9iRKOYwA7axO0D2yo0lrLp9w=
Subject key identifier: A6:B9:76:76:8C:E2:2D:75:74:B1:E4:D0:26:8F:5B:D9:0D:66:08:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013714
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F020FA6CDC111EFBB7DF680762E951A.roa
Signing time: Wed 08 Jan 2025 13:06:01 +0000
ROA not before: Wed 08 Jan 2025 13:05:57 +0000
ROA not after: Tue 16 Dec 2025 13:05:57 +0000
asID: 984
IP address blocks: 154.200.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79636 (0x13714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:05:57 2025 GMT
Not After : Dec 16 13:05:57 2025 GMT
Subject: CN=677e7839-06ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ec:bf:29:d8:75:cd:b1:9e:b4:02:06:11:2c:
bf:68:79:30:11:fa:e1:49:63:c7:49:5e:d9:0b:07:
9e:d7:a7:13:ac:92:df:e6:8d:51:53:82:2a:ee:9e:
78:ff:1f:3e:ed:28:07:92:f7:bd:f7:ba:0e:b6:ec:
95:d1:7a:20:b6:1e:c0:71:d0:d4:30:bf:b5:74:60:
77:81:1e:a0:d4:08:2c:35:8f:87:76:9d:90:92:21:
87:c5:37:67:f1:12:57:cb:6e:ac:d3:63:9e:ae:1b:
17:ca:7f:e6:09:da:1d:2b:41:c9:2e:7c:cb:44:f6:
d5:b1:34:de:fe:5b:42:bc:bd:41:bb:8e:bf:11:7b:
7d:f3:27:49:59:ef:53:d6:f1:a2:d9:e0:7e:b5:7c:
ee:98:47:10:fb:2b:d8:7d:50:ae:03:3f:e0:11:62:
9f:b0:18:c0:d5:52:57:b9:f3:21:1d:27:9b:0b:cf:
ee:1d:eb:57:87:5d:ee:40:35:c9:87:d9:c7:65:70:
b2:85:b9:c2:cb:cf:fb:5d:e4:1d:fd:20:85:95:4b:
aa:16:ff:88:55:98:a0:86:45:4c:3e:7e:87:2d:8b:
5b:14:cb:ce:61:ce:6d:a5:1d:12:6a:89:5d:9d:98:
a9:71:bb:24:49:65:6b:bc:f7:e6:fe:3c:b0:30:9d:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B9:76:76:8C:E2:2D:75:74:B1:E4:D0:26:8F:5B:D9:0D:66:08:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F020FA6CDC111EFBB7DF680762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.233.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e2:fd:9d:46:ff:22:0d:37:ff:98:e4:9b:45:9d:e1:05:ea:
d0:2c:df:7c:d3:5b:b2:96:25:e2:79:0a:6e:b9:7b:a7:cf:14:
ee:d7:5c:48:b1:f7:cc:a8:15:93:d1:f2:fe:dc:10:51:fe:99:
45:e6:6e:f4:f0:c2:d0:17:03:f6:9a:ae:9f:1a:7d:c1:08:6b:
96:4e:29:66:18:74:43:25:2d:66:67:71:23:c2:1d:91:86:96:
62:c6:2d:c5:9e:88:49:4f:e5:b5:56:c8:2c:6b:de:d1:94:96:
54:6b:57:f6:28:59:70:5e:a4:a0:f3:ff:09:85:da:85:70:f0:
6d:31:f5:16:f1:50:08:25:70:00:cc:38:8f:d8:d9:cf:4b:40:
8a:91:43:1a:42:ad:c9:6f:5d:70:db:6e:92:9a:6e:02:3b:a8:
9d:12:af:f4:f3:27:71:52:eb:cd:c4:bf:fb:9a:10:1f:95:c3:
85:02:90:9f:21:a1:8a:af:f3:b8:cf:ff:06:c7:78:15:61:bb:
ae:8e:b2:16:08:9a:0f:53:25:2a:72:98:8a:be:18:cc:9c:f8:
f0:f8:f8:a6:2f:aa:78:25:59:76:63:96:c7:85:8c:b9:38:2b:
cc:ff:16:07:03:b7:44:d9:56:91:06:61:ab:a1:6c:5e:29:3b:
e3:b9:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:32 2025 by rpki-client