Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B87A02A4F44011EF88963B4B762E951A.roa
File: B87A02A4F44011EF88963B4B762E951A.roa (raw, json)
Hash identifier: YU1BC2X4GhrkqPlc1YibC978B6ojTImuaAU1zQev0AI=
Subject key identifier: 51:F3:8F:9E:38:CC:9C:99:E4:AD:A4:60:C2:99:FE:FC:8E:88:26:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01635E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B87A02A4F44011EF88963B4B762E951A.roa
Signing time: Wed 26 Feb 2025 12:53:48 +0000
ROA not before: Wed 26 Feb 2025 12:53:44 +0000
ROA not after: Fri 20 Feb 2026 12:53:44 +0000
asID: 984
IP address blocks: 154.83.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90974 (0x1635e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:53:44 2025 GMT
Not After : Feb 20 12:53:44 2026 GMT
Subject: CN=67bf0edc-a5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:a0:a8:8d:2b:e8:ee:2f:49:0e:1c:a3:07:
fb:66:62:a5:92:23:ef:d9:1f:cd:f3:07:06:2e:d5:
f5:e7:e0:a7:13:e6:54:1b:46:ac:c7:e4:d2:aa:4d:
9b:5f:d5:41:05:1c:80:47:17:b2:db:e5:f8:c6:da:
dd:0c:bc:67:a9:63:05:4e:55:2f:46:22:3f:04:36:
60:5d:b4:58:39:bd:52:ed:91:0c:8d:f1:e4:37:58:
18:c1:f7:24:76:bb:2d:60:8c:0f:cf:f5:4c:ed:f4:
2e:1b:1d:20:93:35:94:4d:f6:c4:07:c3:5f:bf:ae:
11:2e:0f:0e:f4:33:c7:df:c5:4e:d4:25:52:c1:50:
3e:a6:06:11:1d:76:a1:eb:e6:2b:55:7b:8d:60:1e:
d4:74:06:f2:e7:4d:c5:a5:1c:68:18:75:f8:e1:f4:
de:18:42:05:67:ba:c2:82:5f:d6:21:52:8d:d8:3b:
04:a9:d7:a9:a0:7d:93:65:ae:90:01:6b:a0:d6:20:
22:f5:6b:23:8a:54:7f:6f:9f:9c:1b:56:4f:32:6c:
78:80:0b:a4:f8:52:5d:86:41:6c:40:af:6b:75:10:
4a:9b:3b:0e:d2:80:e5:9c:13:e9:3c:0f:46:e6:4b:
63:ee:6f:c2:47:8d:77:78:10:6f:2d:71:08:61:56:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F3:8F:9E:38:CC:9C:99:E4:AD:A4:60:C2:99:FE:FC:8E:88:26:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B87A02A4F44011EF88963B4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.148.0/24
Signature Algorithm: sha256WithRSAEncryption
98:be:f9:23:cd:c1:1d:63:7f:bf:f7:95:15:cb:9a:c8:2d:55:
b3:f9:bb:b3:02:a5:68:8e:3f:fc:e1:4c:f7:9e:56:66:5c:18:
eb:1a:16:25:df:ee:fd:b8:9e:b6:7d:68:28:0c:cb:57:6e:6f:
88:04:9c:f6:4c:a5:71:b2:5e:a2:7e:35:9f:b4:a4:f1:e1:b4:
02:a9:f2:ee:c0:3e:ed:c4:08:85:12:42:80:55:4e:63:75:84:
ed:d6:59:11:01:d1:4f:57:45:20:44:b0:b8:d1:5c:98:81:5f:
51:78:e8:df:02:ae:20:f1:fc:49:de:b8:51:84:b8:a0:31:42:
ac:df:19:2a:e5:4c:69:0b:4a:07:a3:de:f1:78:db:ac:85:2f:
98:6f:cf:10:58:85:52:87:4d:25:a1:96:af:6a:03:a3:cc:f5:
79:95:d4:b2:d7:e5:9c:da:81:08:ab:37:df:1d:e6:3e:c4:c1:
c0:44:2c:36:f4:86:c4:ae:f7:cf:01:67:c0:14:dc:44:25:00:
cf:d7:63:96:86:a2:d4:33:6e:d5:d1:44:89:70:92:eb:ce:00:
1b:65:08:01:da:40:83:c2:49:af:7e:96:17:09:4c:28:2b:e8:
0b:54:a3:07:16:6e:1c:22:d5:5c:7d:8b:c9:a9:b8:07:67:fb:
e7:70:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:08:54 2025 by rpki-client