Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96981AC8F43511EFB797217C762E951A.roa
File: 96981AC8F43511EFB797217C762E951A.roa (raw, json)
Hash identifier: caTts+By0ZDmJyXWt3T6ctQiTryf+ZCd6zMIGNaQmsM=
Subject key identifier: 63:CA:59:91:D0:78:00:EA:DD:CE:A0:92:5B:AA:57:6B:55:48:4B:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96981AC8F43511EFB797217C762E951A.roa
Signing time: Wed 26 Feb 2025 11:34:07 +0000
ROA not before: Wed 26 Feb 2025 11:34:03 +0000
ROA not after: Thu 19 Feb 2026 11:34:03 +0000
asID: 984
IP address blocks: 154.208.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90785 (0x162a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:34:03 2025 GMT
Not After : Feb 19 11:34:03 2026 GMT
Subject: CN=67befc2f-a8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:59:42:f9:0e:62:82:69:a6:7a:8a:35:52:
21:fd:57:dd:4a:e0:8e:2a:ca:38:13:f6:a3:35:bb:
56:69:7d:a8:13:6b:4a:78:24:25:ae:47:78:3d:7e:
e2:55:66:0a:71:86:26:99:f6:00:1d:2f:9e:e2:8e:
e0:8c:22:33:6f:c9:fe:ac:72:c9:66:f2:bb:63:c0:
f6:00:4f:fa:57:53:eb:5c:f4:07:20:b1:7a:cf:f9:
08:57:a3:68:fd:0c:5f:02:a4:65:a6:ff:28:68:ca:
a9:5d:2c:5d:b7:b1:1b:27:7a:cf:26:22:34:a8:33:
03:d8:6f:ed:c0:cb:31:8e:b5:a3:f1:fd:49:2a:b5:
51:6b:9d:42:67:c6:3f:c9:1e:f4:00:7c:80:fc:bd:
66:fc:fb:04:b7:89:b5:2d:3d:5d:1f:1e:21:3a:9e:
27:7b:a9:e4:da:ec:97:b4:cf:3f:da:5d:8b:74:36:
4b:f1:ca:d4:25:48:c9:bb:17:a0:d7:ee:b6:2d:a5:
66:61:44:09:55:dc:d9:49:9c:17:a8:81:c9:2b:f7:
fa:15:af:bb:9b:52:3b:c4:f0:28:f4:c4:6d:1c:e8:
40:3b:a3:b4:27:99:b4:e8:7a:8a:97:15:2b:e1:f2:
22:fb:7b:ac:6d:70:67:4a:c4:64:27:77:e6:f9:fa:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CA:59:91:D0:78:00:EA:DD:CE:A0:92:5B:AA:57:6B:55:48:4B:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96981AC8F43511EFB797217C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.98.0/24
Signature Algorithm: sha256WithRSAEncryption
18:09:81:f7:e6:fd:89:98:6a:d6:27:57:0e:2d:98:41:dc:d6:
04:21:04:b7:7c:3b:ac:a7:93:44:c0:b8:49:f0:4d:fc:4f:b9:
5e:15:96:ba:38:fc:16:e1:a9:20:a3:b4:2e:22:bc:26:12:6e:
50:f1:4e:60:4b:81:3a:af:77:be:16:2e:21:9a:12:0b:ea:06:
1a:d8:cc:8a:eb:c9:64:4c:92:41:5a:8a:2c:12:2f:ea:6a:4b:
59:c9:88:96:07:2c:d8:50:8e:90:f4:ea:9a:a1:3f:0d:2e:37:
0a:37:07:db:22:e2:3d:0d:5a:f1:2e:ce:8e:eb:2e:a9:5e:ca:
85:80:ee:08:ff:43:73:d6:8e:d8:2c:9c:b3:7b:31:75:d3:41:
ac:83:c1:6a:2b:c6:2a:ee:67:4d:c5:db:72:94:02:ba:0b:a5:
ed:d0:c4:3e:25:12:a8:58:03:d0:bb:5d:18:51:8a:47:94:89:
e2:50:a0:6b:cd:b9:56:50:c0:f4:56:ab:3c:c5:cb:fc:31:21:
6b:55:bb:8b:75:a7:db:7b:ab:64:e5:8f:dc:a6:44:07:3e:42:
22:6e:45:8c:55:4a:42:64:0c:d1:9b:7d:cd:49:1d:a9:09:86:
a4:90:4a:2d:97:24:6f:6c:c8:0e:d9:ab:d5:01:57:09:70:94:
fc:d3:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:51 2025 by rpki-client