Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96E25D18CDC011EF86A2A07C762E951A.roa
File: 96E25D18CDC011EF86A2A07C762E951A.roa (raw, json)
Hash identifier: p5G8cxL9Ti+5gnIIO6zt8IYaWstpCcs7tX6mufZm0UY=
Subject key identifier: B2:72:7D:A8:32:49:68:07:16:F2:A1:64:82:D6:40:8A:9B:98:B1:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01370E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96E25D18CDC011EF86A2A07C762E951A.roa
Signing time: Wed 08 Jan 2025 13:00:52 +0000
ROA not before: Wed 08 Jan 2025 13:00:48 +0000
ROA not after: Tue 16 Dec 2025 13:00:48 +0000
asID: 984
IP address blocks: 154.200.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79630 (0x1370e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:00:48 2025 GMT
Not After : Dec 16 13:00:48 2025 GMT
Subject: CN=677e7704-bcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:48:8d:54:1d:0c:87:03:e3:67:ee:c5:81:
64:ee:9e:77:57:46:2f:53:2f:7a:d4:8d:07:58:f8:
f4:2b:cc:10:3d:26:1c:88:b0:31:b3:f6:75:2a:0f:
4f:15:e1:60:43:74:d1:a4:87:2f:4d:8f:05:72:c5:
e1:0d:7c:3c:76:d9:f1:83:e8:37:7a:b3:99:62:dd:
64:dc:de:c2:a2:e2:0e:64:06:e4:29:bc:ed:f8:03:
46:e6:91:9a:7a:f0:bd:e2:1f:79:6b:7b:12:cc:84:
3f:8b:07:4d:77:09:4a:84:d8:29:7e:51:d1:14:44:
48:54:fe:14:7a:72:43:5b:fd:62:b8:21:75:1c:76:
aa:6e:5e:68:26:1c:f2:39:d6:d5:5a:08:79:a0:d3:
bf:43:9c:ce:22:88:0d:62:b2:08:83:e8:98:b4:0d:
0d:a6:49:19:59:87:ee:47:c9:e2:c6:8e:31:9b:c0:
88:69:d5:0e:31:4a:d4:76:f5:f1:31:b6:76:ba:84:
a9:63:3b:7b:65:a6:ca:ee:c2:63:60:75:77:11:21:
91:2a:84:d4:da:12:7b:cb:da:21:89:90:c9:ef:aa:
a4:d9:f6:c5:55:a0:e5:cc:58:c4:0d:30:14:00:65:
3e:cf:a7:e3:7d:9d:e9:e9:e8:fb:0a:01:f9:a0:a9:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:72:7D:A8:32:49:68:07:16:F2:A1:64:82:D6:40:8A:9B:98:B1:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96E25D18CDC011EF86A2A07C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.230.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8e:25:4e:bc:ff:38:2a:8d:76:5a:aa:3e:f6:3b:86:5f:2a:
71:28:e2:1c:b6:0c:2f:70:13:3c:8b:9a:d4:3f:b2:45:28:7d:
d4:f5:82:71:9e:19:40:2c:66:7f:d7:e2:62:8c:58:b2:fd:45:
26:ab:1e:c3:44:d3:bc:5a:e8:1b:dd:a1:68:4a:83:31:df:92:
16:d5:b1:b1:f1:54:d0:e9:e3:49:03:ff:9f:34:83:94:3c:0f:
50:fc:99:dd:e6:b9:bf:41:d1:1b:17:98:c3:14:39:c8:e7:b2:
8d:2c:3a:39:da:47:8a:0a:f0:ae:9f:b8:a9:de:0d:2a:50:0f:
e2:ec:8b:75:37:2f:c0:65:fa:99:24:ff:bf:08:01:c7:c1:b2:
95:97:28:e1:20:69:16:38:2d:7a:b0:b8:4e:e4:c4:ee:8c:16:
9f:58:55:56:0f:7f:60:06:99:e6:c7:8f:ed:14:a6:9a:cc:35:
e8:49:86:7d:35:c6:f7:87:29:64:d7:e5:8f:80:da:30:93:99:
27:cd:03:d8:eb:bc:b1:bc:ad:23:e5:9a:58:76:ea:18:9c:db:
68:1b:56:18:3d:60:c7:7e:6e:72:61:23:ff:95:9c:d1:8f:f5:
1f:14:51:33:68:88:f5:da:9b:d4:8c:45:c6:9b:9b:c8:f6:4d:
8b:ba:ea:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:52:47 2025 by rpki-client