Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988C006CC90911EF9139D379762E951A.roa
File: 988C006CC90911EF9139D379762E951A.roa (raw, json)
Hash identifier: q5Vsw6gZVXJxsShs1DHqep0yaIqQrGd7prc+FkS2VpI=
Subject key identifier: C7:B4:27:CF:A4:78:24:0F:AC:74:29:0E:52:6F:38:D2:E7:8B:EA:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013287
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988C006CC90911EF9139D379762E951A.roa
Signing time: Thu 02 Jan 2025 13:00:52 +0000
ROA not before: Thu 02 Jan 2025 13:00:48 +0000
ROA not after: Sat 13 Dec 2025 13:00:48 +0000
asID: 984
IP address blocks: 154.221.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78471 (0x13287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 13:00:48 2025 GMT
Not After : Dec 13 13:00:48 2025 GMT
Subject: CN=67768e04-4bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:4b:ad:d7:3d:a7:3f:1e:b4:21:60:31:56:
b3:dc:cd:00:78:f3:ef:d6:9e:d1:9a:85:f6:e7:90:
53:9f:c9:22:c0:8c:e5:90:5d:9b:a2:21:77:18:29:
26:1a:be:c3:58:0e:6b:7b:d8:25:22:17:25:5d:1d:
ad:5b:b7:d7:c2:20:40:0e:8b:47:1b:71:37:2c:b2:
1c:42:93:b3:93:41:d2:46:f9:d6:8a:b9:2c:41:e8:
1c:f2:2c:65:de:35:81:7d:1f:82:5e:22:77:a5:c3:
68:d3:7f:a0:2c:e8:81:89:2f:35:ed:6c:3c:d2:c4:
13:bc:ea:21:fe:1e:8d:47:b6:3e:3a:9c:f0:94:53:
df:7f:61:2d:21:b1:7f:20:8d:1d:b1:78:b4:ec:27:
8c:b0:4a:ca:59:2e:5c:98:dc:f2:b0:86:46:07:8f:
0f:c0:66:42:36:c9:d1:88:47:b9:57:1c:ef:45:6a:
34:9f:c6:82:ba:ea:26:a0:96:42:7a:ed:c3:0a:04:
cc:1e:5d:fc:d7:d5:93:de:1a:46:15:55:69:4a:d3:
b2:26:b5:e7:3b:57:e5:42:d0:58:11:4b:87:a0:2b:
0a:5e:8c:a0:8b:c6:14:4c:fd:2c:5f:f2:1e:78:e0:
69:04:6d:e0:3a:bf:dd:29:5d:f9:de:58:f6:88:63:
9f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:27:CF:A4:78:24:0F:AC:74:29:0E:52:6F:38:D2:E7:8B:EA:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988C006CC90911EF9139D379762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.208.0/24
Signature Algorithm: sha256WithRSAEncryption
33:99:1d:4f:58:4a:dd:81:11:f6:6a:58:9f:a5:38:8e:fe:f1:
4c:f5:9f:5b:76:83:1e:a4:22:f4:bb:fd:1a:25:fd:32:28:75:
7e:ba:0d:79:c3:42:ec:f0:92:85:1d:6c:7e:31:9d:69:c7:1b:
d0:7a:bf:11:3d:a4:eb:98:06:1e:76:2b:65:79:32:f1:b6:b3:
7d:ce:46:7f:ae:16:38:35:fa:98:3b:d3:3e:79:60:11:65:45:
f0:41:91:18:ea:40:01:73:88:60:16:d6:94:9a:5c:80:06:69:
c5:57:b2:b7:48:fe:fe:0a:2e:27:5c:2c:db:12:0a:2f:aa:8a:
9c:22:95:cd:1c:b6:2c:ee:ef:a8:16:57:40:50:c1:60:ae:76:
47:bd:aa:90:45:43:be:67:f5:4a:c7:87:27:1a:ba:eb:6c:8a:
b2:6e:11:98:79:38:2f:e7:b8:80:9b:fd:29:8c:54:41:77:f2:
ff:73:2a:20:ef:5d:87:ea:5d:90:d9:3b:5a:c8:53:ea:7a:99:
e7:1d:3b:f6:d6:cc:a5:f1:e4:24:e4:42:14:1d:95:5c:58:89:
86:01:ee:58:f3:45:41:5e:69:c1:20:2b:5b:7b:cc:e2:19:67:
2c:54:8f:02:47:78:7a:c1:b7:71:26:a2:af:96:05:a9:c4:c3:
a9:cf:85:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:41 2025 by rpki-client