Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6920D05EF42F11EF966B7750762E951A.roa
File: 6920D05EF42F11EF966B7750762E951A.roa (raw, json)
Hash identifier: HqbyCU0/vrCZ6A5JWXwGX+64VgldMIvquuABXxzsr/c=
Subject key identifier: 8D:64:AC:EB:3F:3E:B5:3E:50:CE:5C:AE:9A:A7:68:7F:53:F5:F8:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016254
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6920D05EF42F11EF966B7750762E951A.roa
Signing time: Wed 26 Feb 2025 10:49:54 +0000
ROA not before: Wed 26 Feb 2025 10:49:50 +0000
ROA not after: Thu 19 Feb 2026 10:49:50 +0000
asID: 984
IP address blocks: 154.208.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90708 (0x16254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:49:50 2025 GMT
Not After : Feb 19 10:49:50 2026 GMT
Subject: CN=67bef1d2-cae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:64:d9:88:ea:ab:5e:b9:63:63:8d:fa:92:
0c:a6:c1:dc:40:8e:73:e6:fa:64:0c:01:c2:4c:0e:
87:43:d8:0a:7e:59:11:7e:d8:a9:42:dc:5d:42:33:
f0:14:29:80:bc:9f:eb:91:36:2d:66:f8:09:97:c9:
d0:a2:45:86:49:a2:47:b9:f6:0e:82:8d:ea:bf:2c:
d3:87:2c:c4:3f:b0:0a:da:1a:a4:60:32:f6:69:8a:
1c:ae:0a:15:cb:d4:0f:e1:66:5b:b2:9d:09:4f:0d:
ac:60:fa:ec:74:3b:24:63:7b:4c:88:3e:7f:1c:18:
30:eb:c8:d8:10:98:92:7b:b3:68:36:d9:a2:a3:4a:
50:7c:a6:fb:ad:04:62:dc:9b:02:a0:2c:0f:78:51:
ba:03:76:39:30:9a:14:89:05:d2:ce:81:4b:c9:2c:
59:d5:b2:b9:84:2d:db:83:0a:f0:19:80:19:ea:72:
d5:8f:5a:d2:1f:d4:c4:88:0a:84:93:2a:9d:ba:47:
7c:28:73:e2:da:99:a6:31:4e:a7:00:18:87:7c:f3:
8d:b9:67:92:cb:79:cf:16:d8:b8:8f:64:0f:4f:21:
6c:3a:30:92:4e:40:13:84:5f:27:cd:d1:89:ae:70:
02:a0:cb:df:2e:55:7d:78:25:d3:53:06:65:61:2c:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:64:AC:EB:3F:3E:B5:3E:50:CE:5C:AE:9A:A7:68:7F:53:F5:F8:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6920D05EF42F11EF966B7750762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.83.0/24
Signature Algorithm: sha256WithRSAEncryption
39:fd:8d:8e:1e:4d:48:3e:b5:fd:92:8b:b3:1f:b3:d8:e0:81:
3e:33:c6:25:f9:b4:16:95:3d:d0:4b:a8:e4:f4:d8:42:7a:ff:
4d:ee:a6:41:06:f0:07:a7:98:1a:d7:ce:24:5f:18:dc:f4:1a:
f4:39:85:fe:43:a4:08:8c:2b:08:20:94:be:74:c7:66:fb:ba:
1c:cf:f6:29:1b:45:db:71:17:9b:0d:c2:00:46:6c:cc:76:88:
88:fc:56:db:c8:f1:f6:28:da:60:03:a6:db:2a:08:dc:eb:50:
98:57:be:58:c0:37:71:ca:8f:1f:09:8e:19:c6:a2:5b:dc:da:
bb:5d:be:fb:dc:98:49:a8:23:d0:9b:90:21:b7:73:60:d2:2d:
00:25:c6:1a:70:c8:7a:d4:34:83:6b:f3:23:84:61:71:4c:92:
29:42:72:da:cb:a8:ca:22:e2:3c:ce:08:67:45:ee:a9:94:25:
84:00:9d:0e:f5:ee:fd:96:5d:a1:07:1f:0f:84:ec:f5:51:9c:
41:32:36:11:78:19:b7:6a:3b:a8:4e:1d:ae:41:fc:17:aa:d8:
33:f2:21:0e:fc:53:50:3e:11:ad:bf:89:ea:42:b8:9c:be:6a:
9d:f2:d5:70:ab:67:99:25:ea:ea:80:1c:2f:12:65:4a:4b:af:
09:ce:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:07 2025 by rpki-client