Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B201AF82C92311EF88452A9D762E951A.roa
File: B201AF82C92311EF88452A9D762E951A.roa (raw, json)
Hash identifier: i++yOBw7bD+L/6rOGwDVGt/VvmuNgDN63V+G6Off6k8=
Subject key identifier: B3:91:49:56:B8:43:6F:44:BA:AB:62:C6:3D:29:7B:6E:4C:2B:A4:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013341
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B201AF82C92311EF88452A9D762E951A.roa
Signing time: Thu 02 Jan 2025 16:07:42 +0000
ROA not before: Thu 02 Jan 2025 16:07:38 +0000
ROA not after: Sat 13 Dec 2025 16:07:38 +0000
asID: 984
IP address blocks: 154.222.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78657 (0x13341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:07:38 2025 GMT
Not After : Dec 13 16:07:38 2025 GMT
Subject: CN=6776b9ce-c553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:b7:dd:99:ae:a1:ac:5f:0e:4c:1b:ae:35:
38:1e:a2:05:bd:e7:20:9f:64:81:d1:d8:80:3c:a0:
3a:8b:08:55:d0:28:38:34:82:4e:0d:24:25:63:48:
35:86:4c:0f:0f:54:28:9e:a6:91:45:f3:f1:9e:60:
bc:7e:14:8b:67:cc:bf:86:ea:65:34:0a:7d:b5:2a:
1a:79:11:e9:69:ba:ab:b1:c0:aa:c1:b8:f6:98:1c:
82:b1:c7:5a:00:b4:e6:c1:e7:9d:bf:b0:8e:9f:2f:
c6:c6:4c:95:b3:ec:3b:db:5a:37:66:ed:a5:9c:43:
85:0d:b5:b3:cd:2f:36:db:21:ee:88:2c:b4:81:f5:
10:b8:22:45:a6:01:d9:f1:67:93:b2:8e:71:9c:72:
2f:22:15:a7:09:24:0b:12:00:06:cc:46:55:5a:c1:
62:c2:a1:ec:1e:07:f3:71:a4:d4:ab:26:19:6f:6e:
31:28:8c:d2:50:7b:49:b6:43:9e:68:0c:dd:e2:3b:
bf:b6:61:94:d4:3b:7b:a2:25:e0:f3:23:23:f6:c4:
98:30:4f:a8:56:5c:d2:33:eb:76:64:ed:45:07:f5:
37:7e:e8:54:12:de:e6:d9:94:80:c1:a5:55:6e:d5:
61:fd:ec:ff:3c:b6:b1:ba:07:82:62:50:97:66:04:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:91:49:56:B8:43:6F:44:BA:AB:62:C6:3D:29:7B:6E:4C:2B:A4:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B201AF82C92311EF88452A9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.102.0/24
Signature Algorithm: sha256WithRSAEncryption
61:aa:6e:da:61:e2:a4:b4:30:53:e1:71:da:fe:c1:77:ed:51:
ee:cf:b5:02:eb:d7:fd:ab:66:91:b6:03:22:a1:aa:70:c2:24:
45:51:09:27:7a:64:26:26:46:76:09:23:cb:de:4a:c5:52:9d:
f9:f7:c4:14:db:20:5c:02:7f:6e:68:3a:6b:ef:fc:cc:59:34:
13:92:a4:cc:88:4f:ea:07:b7:2f:43:36:26:d3:11:12:bf:2e:
18:f7:ac:a0:57:57:0f:f7:12:fc:1f:fe:a6:77:78:31:18:c6:
b4:1f:77:ef:3c:69:a0:f4:24:7e:79:de:b1:db:db:70:20:6b:
05:53:7c:db:fb:dc:34:1c:67:f7:e1:80:4c:93:43:2b:04:88:
dd:1c:7c:b9:c2:42:64:b3:fd:51:3e:32:da:23:11:ff:cb:1e:
fc:24:bc:5a:e4:ca:bc:3f:9f:3b:5d:78:3b:4b:93:52:c6:6f:
7e:fc:35:c7:a0:d7:7a:ca:c7:39:11:3c:af:6a:30:58:23:5b:
a7:67:99:90:e7:83:17:66:a6:33:0b:5a:7f:00:64:42:fb:91:
75:1e:ab:d6:90:51:5f:42:24:b5:da:52:0a:1c:b5:30:34:0d:
f4:c3:7c:0c:bf:da:2f:11:fd:77:19:50:45:76:34:94:c5:83:
48:03:56:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:25 2025 by rpki-client