Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90EC3F8EF43311EF802FFA6C762E951A.roa
File: 90EC3F8EF43311EF802FFA6C762E951A.roa (raw, json)
Hash identifier: WETM2t80DbEe1M2jF6SvSxFIu7TJRmghniIBsk8VjpU=
Subject key identifier: 57:A9:39:5B:87:FD:F7:38:1D:55:BF:83:EB:D6:CE:25:69:C7:7A:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016287
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90EC3F8EF43311EF802FFA6C762E951A.roa
Signing time: Wed 26 Feb 2025 11:19:38 +0000
ROA not before: Wed 26 Feb 2025 11:19:35 +0000
ROA not after: Thu 19 Feb 2026 11:19:35 +0000
asID: 984
IP address blocks: 154.208.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90759 (0x16287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:19:35 2025 GMT
Not After : Feb 19 11:19:35 2026 GMT
Subject: CN=67bef8ca-6b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:ef:b2:1f:c8:23:9a:ae:a1:b6:15:29:8d:
f3:a1:25:3e:ad:88:8d:52:a3:4d:73:7c:83:70:66:
91:d1:98:a2:c3:04:79:25:8d:a0:78:da:33:f2:47:
f3:be:ee:33:90:93:e2:96:2b:b0:da:a9:fd:b7:ab:
b8:88:e7:74:40:9f:77:3b:b8:37:c5:1e:99:23:9f:
cc:5d:14:e0:86:c7:3a:e5:86:7d:ba:e2:f0:b3:2e:
64:0d:3a:22:c1:a2:bf:a4:5d:f0:7e:d5:c4:c2:6e:
aa:d0:db:57:f7:de:dc:e7:13:4b:25:67:a0:5f:ea:
c7:9b:78:06:7c:fe:8f:d1:98:3d:eb:ba:4b:49:74:
c0:8e:c2:5e:7a:ed:4f:22:23:a9:bb:c3:2b:04:71:
de:0f:f8:91:db:a8:35:fb:96:07:69:59:43:d3:c0:
24:66:5d:7e:6c:0e:2e:2c:97:47:22:b0:ad:fe:40:
ff:29:a0:41:34:b2:16:66:c2:51:fa:b4:74:8c:f9:
6b:27:35:fb:74:0a:e2:19:fd:0b:09:28:3c:c4:5a:
bf:d1:16:8b:68:1a:35:5c:ba:67:17:79:55:84:b0:
ee:0b:59:e3:29:0a:78:58:82:1f:75:9d:34:31:6f:
9b:0c:d3:b2:9e:59:1b:db:ab:b1:76:f1:8e:0b:6a:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:39:5B:87:FD:F7:38:1D:55:BF:83:EB:D6:CE:25:69:C7:7A:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90EC3F8EF43311EF802FFA6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.94.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:9f:8a:aa:21:c8:99:bb:a8:68:0f:7c:55:38:8f:1d:0e:17:
01:ab:39:c1:06:56:70:fe:67:d0:79:1a:13:19:a6:73:e3:96:
32:1d:6c:02:4f:22:16:b4:a0:d7:06:ae:bb:59:09:bb:ac:02:
11:81:5e:9b:46:2a:f3:8d:60:84:75:88:ea:63:b3:45:ea:2a:
17:e2:00:cc:0a:ba:c1:df:e3:03:62:2f:94:61:19:4e:c0:f3:
e6:42:52:dd:1f:86:5b:2a:d5:1b:97:c9:9f:6e:7c:e1:77:dd:
ba:e8:90:6c:bf:9f:09:9e:bc:04:ec:59:b9:ee:10:8a:a3:d9:
c8:44:2d:8e:81:bd:cb:1d:34:ce:1e:00:16:83:ef:97:60:61:
8f:17:61:0e:7e:17:87:d6:a9:0c:de:38:38:df:c8:a1:1c:be:
cd:7c:51:10:1b:c4:5e:4c:2f:d0:de:dd:1a:63:6c:e7:ef:3b:
a3:6a:28:7b:2a:2f:3d:11:56:25:58:76:31:04:c7:22:40:be:
15:a5:f0:83:5d:fb:81:2c:43:2e:4a:89:43:fb:a3:29:47:be:
6d:e0:3f:e7:bc:73:73:26:d9:2c:b3:58:d3:bb:46:8b:1f:95:
5a:a6:9b:96:3d:f9:e5:2e:8c:e5:34:88:cd:8c:51:6b:93:10:
60:cf:fb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:55 2025 by rpki-client