Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E93C2F00E1611F0ADE9A656762E951A.roa
File: 8E93C2F00E1611F0ADE9A656762E951A.roa (raw, json)
Hash identifier: kNF0LXNncUCarpn75LNHdQ0+edWjzR6MNWo2j+yEQdE=
Subject key identifier: B9:A7:C0:F3:C6:CD:08:E7:7D:E8:CB:E3:65:2F:DA:6B:AC:FD:F1:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017718
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E93C2F00E1611F0ADE9A656762E951A.roa
Signing time: Mon 31 Mar 2025 09:57:29 +0000
ROA not before: Mon 31 Mar 2025 09:57:26 +0000
ROA not after: Sun 26 Apr 2026 09:57:26 +0000
asID: 209242
IP address blocks: 154.197.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96024 (0x17718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 31 09:57:26 2025 GMT
Not After : Apr 26 09:57:26 2026 GMT
Subject: CN=67ea6709-a35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:18:c7:fe:28:70:6d:10:b4:82:e7:e2:00:90:
4e:db:c6:cf:07:97:3d:ea:23:de:26:e7:fd:2b:c6:
4a:42:96:e0:f0:1a:66:2e:fa:94:23:87:ea:14:35:
81:48:86:ef:62:d3:63:c7:bb:de:f7:01:0d:21:32:
02:e0:55:5f:38:85:c5:d2:da:28:d1:ae:e6:fb:84:
97:53:18:e4:b5:de:82:3a:1a:79:d2:0d:8f:e8:8c:
26:63:ad:a3:58:2b:e7:c0:90:76:a9:0f:e6:00:b6:
57:7c:7a:52:5f:d0:09:08:a1:c2:25:d5:36:35:34:
02:a4:6c:7a:5d:6c:f3:3d:29:6b:e2:44:ad:7e:bd:
fe:fb:50:43:88:a0:f5:cb:97:5e:09:db:95:93:63:
51:93:18:30:f5:ee:90:ac:26:a2:73:c7:b4:51:65:
a7:e5:c3:dd:07:20:ef:7b:64:d3:77:e7:0e:01:cc:
c9:e2:a8:5f:44:e0:5b:85:23:76:f6:d4:2f:aa:40:
80:23:a4:e7:92:c7:8b:48:88:fa:1e:d8:31:c7:9f:
de:65:7b:3a:3f:04:ee:59:e6:0e:87:4b:96:24:29:
b9:b3:35:ac:3c:90:7a:ed:a8:8c:1b:15:a7:f9:84:
96:49:8e:4c:c1:da:4f:f9:a5:96:58:2a:c2:85:30:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A7:C0:F3:C6:CD:08:E7:7D:E8:CB:E3:65:2F:DA:6B:AC:FD:F1:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E93C2F00E1611F0ADE9A656762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:c0:1a:56:7f:55:35:4b:5f:9b:06:c1:d3:50:26:f6:96:50:
59:ca:c7:cf:e9:fa:13:31:a1:9e:83:74:53:a3:ff:bd:7b:85:
2f:50:ee:f1:78:93:c1:a3:f9:40:fb:90:e2:82:a7:5f:64:3f:
2c:c0:ba:a4:96:c8:79:17:ef:4b:35:31:37:86:8d:5d:fe:60:
55:27:59:e0:75:26:b3:f6:1d:a8:09:1b:26:7c:4b:4d:0b:03:
0c:43:17:42:f5:07:7c:ca:36:bc:64:f8:4a:66:ed:13:a7:6d:
ad:e1:1f:1b:72:c6:10:72:0e:95:c5:02:b8:cf:74:58:e6:7d:
70:a0:42:8f:1e:73:6f:e7:13:66:7c:49:d9:dc:f0:28:6d:97:
6f:70:f5:e3:25:2e:c9:ad:a9:ad:be:68:7d:71:06:61:43:dc:
90:df:2d:98:49:1c:ef:a1:67:21:03:fa:bf:82:8e:c3:c9:5d:
88:fa:44:49:50:9f:fa:e1:3e:62:0c:7b:91:15:81:3a:70:9b:
d2:67:24:8e:e1:9f:5b:9c:e1:c4:0c:48:44:f5:7d:59:c2:a8:
66:43:95:81:ef:51:d6:fb:7f:8e:84:15:70:d8:22:bf:e8:c4:
13:16:08:75:9b:fc:72:bb:8e:5a:4f:56:00:18:72:e7:d6:93:
2d:d8:0d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:02:18 2025 by rpki-client