Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7BEB84CF41D11EFA472FF55762E951A.roa
File: A7BEB84CF41D11EFA472FF55762E951A.roa (raw, json)
Hash identifier: 7bnS+OOAVe+Anhg4ilDuT0ghAl7vF1iGI4knmlVsvQ8=
Subject key identifier: FF:3D:E1:A5:D5:2A:94:DF:59:BE:30:9F:35:90:FB:F6:C7:EF:4F:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01616F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7BEB84CF41D11EFA472FF55762E951A.roa
Signing time: Wed 26 Feb 2025 08:42:48 +0000
ROA not before: Wed 26 Feb 2025 08:42:44 +0000
ROA not after: Thu 19 Feb 2026 08:42:44 +0000
asID: 984
IP address blocks: 154.206.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90479 (0x1616f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:42:44 2025 GMT
Not After : Feb 19 08:42:44 2026 GMT
Subject: CN=67bed408-7782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:fa:2f:5b:df:42:21:01:f7:84:5d:24:48:
49:fd:9c:65:fe:41:d1:b5:b4:63:a7:60:97:c0:94:
94:c7:f7:c1:49:5a:a9:6a:65:67:48:42:05:cd:c0:
fb:3d:09:19:53:0c:c8:87:a8:5d:57:77:6e:41:1a:
76:65:ac:d9:a0:a4:fd:1c:ed:16:1e:57:df:f3:00:
d8:d4:27:65:98:54:85:38:f7:96:1c:6c:e9:bf:86:
16:28:bf:83:92:7a:c6:e1:da:2b:a5:ae:61:89:69:
df:ce:52:cd:69:24:e8:bb:6b:ee:9b:1c:bf:af:2d:
a1:d7:d2:73:08:60:b6:6f:2d:69:ad:e3:3a:67:c3:
02:28:e9:59:d5:82:bd:f4:58:7c:78:fe:25:7a:4e:
af:72:c5:95:6c:a0:51:5f:6f:a0:c2:33:f9:1e:7e:
57:d3:be:a3:ad:77:6b:9f:7f:24:f7:22:fa:ef:af:
85:d0:59:5a:62:f3:3d:e8:78:25:68:c2:54:33:47:
92:07:df:14:6e:e6:3a:15:32:e4:e3:f2:94:12:79:
b2:0d:85:58:7d:20:04:d9:5e:43:05:70:2f:ad:bc:
f0:61:e8:e7:3f:59:e7:99:fd:d1:80:a7:e7:6f:9a:
a0:44:35:d6:d9:34:4f:66:b0:da:ce:d3:54:4c:30:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:E1:A5:D5:2A:94:DF:59:BE:30:9F:35:90:FB:F6:C7:EF:4F:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7BEB84CF41D11EFA472FF55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4e:da:7c:35:f2:d5:12:9c:60:18:0a:0c:0a:2c:71:96:4e:
db:57:48:2c:a5:8c:9c:12:89:09:7a:91:47:d1:27:e0:ad:fa:
ba:26:07:8a:19:b6:5a:84:fc:71:76:a3:10:87:7f:f5:29:c8:
70:23:07:38:5f:2b:7c:a1:c9:96:0d:ae:fb:b7:e2:86:35:54:
c5:03:04:21:99:89:3a:10:d9:d7:08:58:65:b8:eb:d2:e2:e8:
f9:6b:d3:c5:0e:44:c1:ce:c9:27:b7:fd:3d:b8:6d:53:10:0f:
21:f3:e3:61:e4:4d:68:28:c2:0c:0a:b0:88:6a:8e:78:63:71:
a5:04:57:0b:63:50:e2:35:d0:e2:0d:ea:df:c0:0e:30:8b:06:
01:e0:90:89:98:f2:14:5e:8b:86:bc:19:56:73:ad:8c:b3:9f:
69:1d:ca:bc:fa:08:e1:60:b4:8f:e6:99:81:aa:08:cb:be:d6:
b5:63:7f:30:ad:fd:35:db:1c:9e:8a:59:29:0a:39:24:05:42:
75:54:e8:70:04:74:af:64:8f:a1:ec:48:c2:0b:7a:a6:1b:41:
67:3c:59:b5:67:34:87:fb:aa:8a:17:7b:f7:14:7f:6d:09:c6:
a1:bc:8d:dd:ca:cf:7d:a2:11:b4:a3:a0:76:c1:60:fa:b7:21:
34:11:28:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWFvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDg0MjQ0WhcNMjYwMjE5MDg0MjQ0WjAYMRYw
FAYDVQQDEw02N2JlZDQwOC03NzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1O36L1vfQiEB94RdJEhJ/Zxl/kHRtbRjp2CXwJSUx/fBSVqpamVnSEIF
zcD7PQkZUwzIh6hdV3duQRp2ZazZoKT9HO0WHlff8wDY1CdlmFSFOPeWHGzpv4YW
KL+DknrG4dorpa5hiWnfzlLNaSTou2vumxy/ry2h19JzCGC2by1preM6Z8MCKOlZ
1YK99Fh8eP4lek6vcsWVbKBRX2+gwjP5Hn5X076jrXdrn38k9yL676+F0FlaYvM9
6HglaMJUM0eSB98UbuY6FTLk4/KUEnmyDYVYfSAE2V5DBXAvrbzwYejnP1nnmf3R
gKfnb5qgRDXW2TRPZrDaztNUTDAHrQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP89
4aXVKpTfWb4wnzWQ+/bH7090MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BN0JFQjg0Q0Y0MUQxMUVGQTQ3MkZGNTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7ZMA0GCSqGSIb3DQEB
CwUAA4IBAQA6Ttp8NfLVEpxgGAoMCixxlk7bV0gspYycEokJepFH0Sfgrfq6JgeK
GbZahPxxdqMQh3/1KchwIwc4Xyt8ocmWDa77t+KGNVTFAwQhmYk6ENnXCFhluOvS
4uj5a9PFDkTBzsknt/09uG1TEA8h8+Nh5E1oKMIMCrCIao54Y3GlBFcLY1DiNdDi
DerfwA4wiwYB4JCJmPIUXouGvBlWc62Ms59pHcq8+gjhYLSP5pmBqgjLvta1Y38w
rf012xyeilkpCjkkBUJ1VOhwBHSvZI+h7EjCC3qmG0FnPFm1ZzSH+6qKF3v3FH9t
CcahvI3dys99ohG0o6B2wWD6tyE0ESgj
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:43 2025 by rpki-client