Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A50E0A2EF44211EFACB29E59762E951A.roa
File: A50E0A2EF44211EFACB29E59762E951A.roa (raw, json)
Hash identifier: I5AfIBGC9TGIFtIDTzcnLEG5lWkoFzCoksIXCm6kCEU=
Subject key identifier: BF:AD:7B:6A:2C:DD:34:E9:09:FF:41:35:A9:A3:11:7F:CA:13:2D:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016386
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A50E0A2EF44211EFACB29E59762E951A.roa
Signing time: Wed 26 Feb 2025 13:07:35 +0000
ROA not before: Wed 26 Feb 2025 13:07:31 +0000
ROA not after: Thu 19 Feb 2026 13:07:31 +0000
asID: 984
IP address blocks: 154.208.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91014 (0x16386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:07:31 2025 GMT
Not After : Feb 19 13:07:31 2026 GMT
Subject: CN=67bf1217-a420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:09:be:8c:ee:28:d7:73:3f:db:70:08:b0:
4c:d4:72:f8:a5:48:72:08:85:be:5b:4e:e4:27:ff:
1c:b2:78:15:54:89:47:d3:b2:dd:3b:b6:b7:93:6e:
6e:98:58:6a:4c:89:57:37:73:bf:bf:63:d5:12:00:
1b:c8:cc:18:3c:6a:c0:3b:d3:df:cb:80:b1:d6:62:
91:e3:d6:1e:e6:54:02:6a:6f:2c:53:f2:a1:d3:2e:
68:3e:95:43:b0:32:64:3d:3e:83:f8:00:85:cf:2f:
62:3e:59:b8:d6:fe:2c:39:5d:a1:a5:e8:fa:51:5d:
2e:6a:ca:3e:53:09:11:a3:04:9a:cb:79:3c:b8:ee:
18:70:c5:92:cf:be:af:ca:22:f3:53:0b:34:6d:53:
c7:f9:69:62:47:35:66:3f:f7:d6:fc:f0:99:e2:eb:
eb:73:36:da:10:8a:a4:6c:93:fb:f0:95:10:7e:b4:
46:00:68:03:f5:bb:86:4f:08:35:7a:53:ba:b7:2f:
07:c9:c1:8d:3b:27:28:f9:fb:74:4e:23:65:7d:51:
4a:b2:a1:6b:f2:1f:a5:86:c9:a2:e6:94:f8:c1:f5:
db:65:0a:31:65:c2:8d:ad:fe:d8:e1:c0:d3:f4:8a:
87:1d:e6:2a:75:f5:a7:48:d7:56:2c:95:60:64:c1:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AD:7B:6A:2C:DD:34:E9:09:FF:41:35:A9:A3:11:7F:CA:13:2D:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A50E0A2EF44211EFACB29E59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.184.0/24
Signature Algorithm: sha256WithRSAEncryption
36:98:db:22:fd:ea:f5:04:ab:d5:55:62:1e:dd:70:22:a9:f4:
b6:ef:9e:91:7a:32:73:01:44:8f:6c:5f:09:56:2a:20:33:f9:
f2:af:d0:68:42:75:f6:23:94:81:fe:25:40:ee:e4:23:01:da:
2d:48:04:20:07:bb:5f:d3:70:40:cf:fc:a7:60:cd:cd:0c:7b:
5a:14:79:85:0f:da:0e:a6:ec:4b:aa:43:be:3e:5a:f3:b9:20:
83:d7:ee:c4:bf:b4:7b:ee:e8:25:d6:b4:da:26:06:7a:d8:e4:
81:8d:0b:0e:a2:38:19:60:81:53:d8:ab:5e:68:6c:a2:60:a7:
ba:df:89:4a:1c:f2:7c:c0:04:e2:8a:4f:a7:a1:13:6f:70:97:
7e:55:14:36:01:21:2e:77:11:66:0e:17:47:0a:c4:da:74:53:
d7:ad:42:35:8b:fc:5a:32:c3:74:b9:05:03:3c:d3:84:a3:5f:
77:fd:9e:ac:fb:bd:53:a4:4c:80:c6:fa:a8:e9:e6:f1:36:2f:
66:a7:75:64:cf:cd:71:71:95:25:65:87:9d:b2:22:04:1c:51:
0e:8c:76:d4:95:c7:7c:0a:04:11:1b:d3:85:fd:df:1a:38:fd:
c2:1a:6c:cc:a8:e0:60:fd:60:7a:50:fb:d4:85:76:0f:f8:3b:
6c:5d:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:29 2025 by rpki-client