Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82C23380F3E511EF96282B4B762E951A.roa
File: 82C23380F3E511EF96282B4B762E951A.roa (raw, json)
Hash identifier: gTFcXIMKSQ8kuqa0owQwk694FW+0rc38X6zQAnwnIaw=
Subject key identifier: 50:F9:AD:8B:46:47:D3:C2:E6:D5:3B:64:D5:FA:7F:D8:D5:C2:FE:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016074
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82C23380F3E511EF96282B4B762E951A.roa
Signing time: Wed 26 Feb 2025 02:00:54 +0000
ROA not before: Wed 26 Feb 2025 02:00:49 +0000
ROA not after: Thu 19 Feb 2026 02:00:49 +0000
asID: 984
IP address blocks: 154.203.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90228 (0x16074)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 02:00:49 2025 GMT
Not After : Feb 19 02:00:49 2026 GMT
Subject: CN=67be75d6-a326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:85:5e:d7:25:8c:10:82:d2:ee:60:cc:7d:70:
c7:7a:d4:ae:cd:45:ec:b0:0d:9c:b5:53:88:01:85:
fe:6f:49:89:2e:e5:bd:39:c4:74:2f:58:aa:67:44:
c9:ad:25:16:1d:c8:32:a7:ee:f3:e0:90:bb:0f:f4:
8a:07:cc:06:0c:7b:8b:3f:10:be:38:35:c0:7c:50:
fe:a2:b0:3b:ac:7a:ea:71:fd:b5:df:4d:bf:30:2a:
f0:a5:b1:57:81:66:4d:8d:e9:b0:9a:03:e4:41:c1:
a3:2a:5c:26:3f:d7:24:da:1d:f2:54:e5:e8:7e:81:
db:42:cb:7e:aa:7f:14:18:bf:3a:fb:8f:97:82:a0:
73:2a:a3:fd:e5:bc:58:6c:85:ab:7f:d0:8d:b0:1c:
ff:da:20:99:bf:30:4a:5e:a7:bf:69:d2:3b:ce:4c:
57:fa:3d:a0:7f:a0:bc:3c:c1:92:7c:5c:f5:35:0a:
f0:b1:53:ed:7f:04:e9:c2:da:9e:86:5c:02:b0:c5:
69:34:b8:3b:b5:b6:f0:c9:fa:41:26:98:f6:97:b6:
4a:77:5b:24:4e:0c:4a:ec:47:92:3c:c4:00:d4:0f:
10:fa:de:6f:e5:6d:ed:ac:f8:49:ba:10:74:f9:c9:
4e:e8:e4:4b:a9:f5:5e:7b:2f:18:b8:1d:ae:6e:42:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F9:AD:8B:46:47:D3:C2:E6:D5:3B:64:D5:FA:7F:D8:D5:C2:FE:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82C23380F3E511EF96282B4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.1.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:7d:ae:8e:19:30:5c:07:6d:57:ad:66:87:6f:28:a5:a8:93:
97:ce:4d:4a:e9:aa:55:c9:5b:12:6d:da:ae:da:bc:b4:a5:61:
dd:2f:b5:0a:2a:0b:93:d4:e5:a6:70:71:6e:10:a2:1b:1b:88:
25:b3:ff:51:32:e3:cd:69:14:7b:d6:cf:ff:ee:ca:ac:00:0d:
de:be:ba:5e:d9:2d:c2:e8:fa:bd:b4:8f:3e:c2:19:ef:6c:3e:
34:2c:46:82:b3:c9:44:84:10:35:b0:41:c7:75:14:8e:5d:39:
91:30:08:6b:6f:3e:bf:46:e5:3d:39:bd:35:6c:cd:4d:2f:16:
8d:fc:b3:ed:20:f2:6d:13:60:bd:f7:76:58:05:31:0d:53:f1:
d4:ac:d0:e4:eb:07:8e:cd:c9:0e:f3:9b:72:a8:69:c1:12:b9:
fb:0e:a1:40:31:12:6a:76:10:7a:44:26:41:7e:10:0e:71:60:
ea:e4:27:23:13:0a:7c:1a:7f:b3:04:36:66:ed:38:50:33:ee:
1d:60:93:3a:a6:f9:da:63:75:45:20:8e:4a:41:d3:8e:70:42:
0a:23:91:ee:6d:81:77:c4:99:d8:a2:da:11:bb:32:64:b3:e0:
fe:b6:25:85:e1:61:1e:2b:72:e4:72:21:cc:22:16:77:58:bf:
4a:cd:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:04 2025 by rpki-client