Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96884B56E2CA11EFB1F40686762E951A.roa
File: 96884B56E2CA11EFB1F40686762E951A.roa (raw, json)
Hash identifier: m8K1wlaDusLCnDvF0zZcCighyLSWkSuOlLsX1S75rOA=
Subject key identifier: 64:0C:29:82:9C:5F:37:0F:FD:8C:97:0F:30:5F:EE:43:3D:32:75:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01507C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96884B56E2CA11EFB1F40686762E951A.roa
Signing time: Tue 04 Feb 2025 07:35:21 +0000
ROA not before: Tue 04 Feb 2025 07:35:16 +0000
ROA not after: Wed 30 Apr 2025 07:35:16 +0000
asID: 46071
IP address blocks: 154.209.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86140 (0x1507c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 07:35:16 2025 GMT
Not After : Apr 30 07:35:16 2025 GMT
Subject: CN=67a1c339-d78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:94:c5:91:9f:8c:fc:85:09:ff:0b:97:54:
26:6e:21:74:7e:e8:a4:0a:a9:f8:71:00:61:82:42:
3b:b1:0f:a6:96:c6:ed:0c:dd:14:84:db:a6:f6:d1:
2b:17:8b:eb:ed:ef:51:df:68:bb:a0:46:e3:d0:e0:
ab:24:f7:ce:da:83:19:a9:aa:46:3a:4b:18:d0:2c:
a1:ae:8b:a1:75:ad:e3:d6:ee:60:cb:ab:83:c4:e0:
be:5e:b5:68:cd:18:fb:91:03:a3:fe:56:e7:46:93:
0d:15:05:5f:9a:9b:2d:69:f2:00:52:f0:69:c8:ef:
d7:83:ee:cf:6d:d7:e6:dc:a7:71:6c:30:a4:f4:f8:
50:d1:2c:61:a8:c9:30:e9:bb:17:9c:f4:97:dd:45:
d6:04:98:a7:8a:16:03:5b:df:74:22:64:83:40:1d:
7c:7a:62:db:c3:7c:13:ab:c7:fd:04:0a:eb:b6:92:
2d:83:98:df:06:1e:eb:ef:66:09:65:74:0b:2d:50:
bb:5f:50:f4:a6:e9:91:73:5f:0d:53:50:83:e0:64:
51:55:94:a6:54:85:e1:99:fb:11:34:86:36:f1:59:
95:76:cf:7b:28:dc:e4:f2:3f:5a:56:1a:09:54:6a:
d1:e1:6a:57:36:3b:7c:e8:fb:46:30:af:0f:bf:7d:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0C:29:82:9C:5F:37:0F:FD:8C:97:0F:30:5F:EE:43:3D:32:75:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96884B56E2CA11EFB1F40686762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4e:f0:3a:58:8c:7a:7e:a5:83:71:51:cd:1a:a4:16:80:83:
68:1f:17:55:80:c0:5e:91:58:e8:b2:e1:21:1b:11:38:5e:f8:
86:3f:59:64:53:52:73:b2:58:ff:f7:00:22:29:58:83:bb:91:
01:c4:20:3e:87:ac:68:f5:e5:64:47:48:c9:13:eb:8d:59:44:
df:11:b6:1a:2c:1f:1d:ae:a9:e6:7e:95:f6:9c:f6:cd:5e:57:
1d:5d:ee:e7:a7:01:9b:f2:a1:e7:b5:e9:32:a0:7b:d2:cd:3f:
30:99:83:81:34:1f:92:93:9e:5c:1b:0c:f3:99:00:7b:d4:d3:
83:a0:34:1b:0e:b4:64:5a:42:d9:6e:a3:68:8d:61:b2:bd:c5:
d2:cb:4a:4b:fe:c2:56:ed:f0:37:88:b4:b2:73:ec:9b:81:d1:
01:1f:a7:59:85:41:f6:59:9f:6e:f0:a1:60:57:1c:28:5b:b5:
bd:cd:03:35:61:01:9a:a6:d7:73:43:91:b4:67:86:a7:58:4f:
01:8d:ac:29:31:00:6a:76:38:fb:01:c8:46:5b:89:dd:9d:90:
b7:ae:5e:7d:0b:2f:46:22:d5:64:9e:ff:8b:1a:1a:78:dd:91:
76:ca:24:d5:8c:3e:19:86:b9:2e:ca:c3:93:64:8d:29:f4:b2:
4f:8a:e0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:54 2025 by rpki-client