Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84703F920B0511F0915CAD83762E951A.roa
File: 84703F920B0511F0915CAD83762E951A.roa (raw, json)
Hash identifier: 2oxF87P7Zw8igxBq9KtJzp1qtvLh+gthTQZ1KsmokTY=
Subject key identifier: 43:0F:54:4F:33:04:18:43:D1:B2:EC:6C:B0:6F:49:A5:93:02:62:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01768B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84703F920B0511F0915CAD83762E951A.roa
Signing time: Thu 27 Mar 2025 12:17:57 +0000
ROA not before: Thu 27 Mar 2025 12:17:53 +0000
ROA not after: Wed 16 Apr 2025 12:17:53 +0000
asID: 400619
IP address blocks: 154.202.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95883 (0x1768b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 27 12:17:53 2025 GMT
Not After : Apr 16 12:17:53 2025 GMT
Subject: CN=67e541f5-dc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:d4:38:8b:42:bc:27:5c:92:1c:5e:8e:8d:
75:ec:6d:69:8b:2e:07:0d:ff:71:d4:b4:d0:b4:42:
c1:dc:69:d3:05:65:a3:de:9c:ab:7b:b5:44:22:0b:
93:12:d9:ec:54:23:63:6d:b5:34:6e:3d:b5:7a:89:
c1:c5:9e:2f:16:e9:ed:ea:f5:98:36:84:4e:54:c7:
12:e9:cd:fe:be:65:87:90:5a:5e:30:6d:7e:70:53:
af:ea:02:cf:2d:69:6e:fe:ee:d1:cd:86:e7:a7:e1:
6d:e5:67:c5:dd:57:1c:5c:f9:7c:4b:b0:5a:b3:22:
ab:ef:88:f3:c2:2f:a1:1d:67:a6:ee:3d:59:0e:de:
3c:b4:6b:6c:c1:81:e1:8b:5e:2b:09:b5:d1:b0:5d:
5d:b6:1e:10:fc:1f:42:ea:0e:b2:6a:e2:a9:91:73:
fc:46:fc:99:88:9e:d4:5a:eb:cc:d5:bf:4b:7a:68:
57:10:ce:52:b6:74:07:25:d2:56:dc:2b:bf:bc:01:
20:04:ef:b0:ed:75:5c:e6:13:4f:18:06:1a:9f:f5:
15:47:31:06:47:23:64:b8:2e:88:3e:7b:9c:98:ee:
b1:25:3a:6a:31:37:ff:ad:38:c1:87:65:fb:e1:dc:
b5:13:fe:7d:42:d8:33:1c:40:68:05:33:8b:97:b2:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0F:54:4F:33:04:18:43:D1:B2:EC:6C:B0:6F:49:A5:93:02:62:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84703F920B0511F0915CAD83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.118.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:fe:75:a8:9a:6b:23:70:57:12:71:3c:8c:3c:e4:9a:a2:83:
7a:f3:6a:dd:cf:e8:10:28:6f:1b:40:bf:45:6d:ff:a3:e2:55:
a3:f9:a0:3b:42:08:b1:2c:52:65:23:9c:97:f0:1c:ab:89:8a:
cd:10:f2:12:1e:81:48:af:c6:5b:6b:f5:5a:09:57:5f:e4:3a:
d9:30:13:07:9b:90:42:cd:fd:33:2e:de:64:92:72:13:f7:f1:
7f:de:f0:7f:76:60:10:c3:b2:92:43:64:24:f7:15:d8:0f:fd:
73:57:8e:42:44:be:9b:30:18:cb:4d:ea:1f:84:1d:59:28:be:
e5:a3:38:ea:0f:c0:cb:d8:ff:63:ea:71:de:a2:02:d6:3c:5c:
b2:a2:98:21:9d:3c:70:1d:d5:c3:51:b6:80:ee:49:f5:c5:a3:
5d:74:e8:7f:d3:f9:02:75:32:d1:0b:06:da:74:05:57:f6:14:
39:2e:b3:d8:44:b2:30:45:ea:2a:75:e2:c4:69:f5:ec:6e:c9:
25:4d:c4:8b:cc:74:6c:4e:74:43:10:61:92:bc:18:ad:c3:82:
12:01:f0:0b:97:e0:46:0a:43:e2:44:04:a5:21:55:84:5d:a0:
05:ae:82:c6:5a:09:57:4f:55:66:bc:9a:04:0f:d9:40:40:16:
86:33:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:33:07 2025 by rpki-client