Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E9BD534CDC511EFA827E19B762E951A.roa
File: 9E9BD534CDC511EFA827E19B762E951A.roa (raw, json)
Hash identifier: dw/qY/TaaqBAlhXWV75pEY4Ug2lwJgjCLMLIH1YoPus=
Subject key identifier: FE:0D:C0:B7:78:E7:BC:D2:18:5C:9E:FC:DC:49:D4:57:08:99:77:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013738
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E9BD534CDC511EFA827E19B762E951A.roa
Signing time: Wed 08 Jan 2025 13:36:53 +0000
ROA not before: Wed 08 Jan 2025 13:36:49 +0000
ROA not after: Tue 16 Dec 2025 13:36:49 +0000
asID: 984
IP address blocks: 154.200.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79672 (0x13738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:36:49 2025 GMT
Not After : Dec 16 13:36:49 2025 GMT
Subject: CN=677e7f74-cb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:d8:08:4b:d0:7f:87:9c:6e:1b:8f:ff:87:
55:ff:35:b8:29:c0:d2:d6:ef:8f:f4:6e:d4:39:b7:
fe:40:d9:0b:c2:9d:73:4c:8e:15:dd:f4:79:1c:1d:
e1:0d:31:d4:fb:ee:03:87:86:19:a4:c8:79:03:02:
07:dd:46:98:91:41:4a:0d:50:0c:e4:d4:00:6e:44:
2f:ef:47:3c:bb:ca:39:0d:8a:66:b2:7b:9a:aa:78:
84:2e:2e:0f:94:11:cd:bb:72:02:cb:1e:5a:87:01:
f4:fa:e9:98:1f:c9:a6:06:4c:9b:48:a2:74:45:ab:
54:9f:74:88:3c:c1:e6:d3:14:26:32:9c:65:25:67:
e5:15:2c:4e:35:60:f4:af:62:a1:72:ec:c6:dc:2e:
01:96:c3:27:80:3b:36:44:42:1d:2d:f0:fb:59:26:
66:ac:79:53:77:60:68:d0:8e:c5:f6:14:63:d4:97:
a7:ab:fb:3b:5f:16:43:9c:dc:f7:d6:a8:bd:af:04:
67:98:f8:0d:e9:8f:22:57:73:12:09:09:6b:c8:bb:
aa:93:55:52:d8:8f:16:dc:4d:7a:56:92:30:9a:6c:
17:1c:f7:53:ec:dd:38:da:28:4a:1d:0b:b4:eb:5e:
52:e1:5a:bb:c7:72:ae:ef:8f:fe:7b:46:47:93:26:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0D:C0:B7:78:E7:BC:D2:18:5C:9E:FC:DC:49:D4:57:08:99:77:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E9BD534CDC511EFA827E19B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:99:ac:f9:7a:ef:67:79:9d:01:89:4f:08:fe:ad:24:d2:5a:
61:8b:28:4e:55:7a:74:bc:30:dc:bd:9e:15:66:70:bf:8c:30:
f6:04:90:a4:c2:fb:fd:f3:eb:ec:a5:85:57:a9:52:9e:a9:00:
1a:9d:c2:77:ee:d0:42:10:38:43:c8:cb:1a:96:a8:4b:71:c9:
86:57:91:af:7c:a0:1a:78:cc:e7:57:cf:23:ea:7e:9f:32:41:
26:98:7d:cc:48:ff:29:45:60:84:f3:01:f3:6c:25:d1:9a:a4:
12:24:87:51:a3:f5:89:a6:9a:26:09:b3:4b:4f:df:bd:f6:0f:
6c:87:42:d0:27:5a:15:52:b6:2b:c7:c1:a8:22:6f:9d:d2:46:
21:af:b0:39:10:30:23:cd:3e:48:0c:06:4c:b8:54:79:de:de:
25:a3:13:af:14:00:e2:24:89:ca:c3:9c:26:98:0b:da:1e:7c:
b1:19:05:76:33:e5:25:f5:5a:0e:0e:74:f3:65:5c:2f:94:d1:
af:9c:c4:67:6e:67:ec:1a:df:3d:89:9f:51:e3:2b:03:4b:ee:
65:ec:db:8a:34:30:ef:98:ed:1d:f1:11:80:b8:f6:05:79:eb:
bd:78:27:f7:60:8a:ee:f1:a7:20:f9:3a:2e:2d:c8:fa:d0:e5:
49:8f:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:53:36 2025 by rpki-client