Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8A626FCF6C211EF84DCBB87762E951A.roa
File: B8A626FCF6C211EF84DCBB87762E951A.roa (raw, json)
Hash identifier: CMwLdNiKVQ7MBhD/r+jwtpPZ5+tvxG/rZX9h+yXfeuY=
Subject key identifier: 90:9E:2B:76:28:51:36:E4:2D:D5:C3:75:FB:61:11:BA:C7:64:67:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8A626FCF6C211EF84DCBB87762E951A.roa
Signing time: Sat 01 Mar 2025 17:29:25 +0000
ROA not before: Sat 01 Mar 2025 17:29:17 +0000
ROA not after: Sat 05 Apr 2025 17:29:17 +0000
asID: 203020
IP address blocks: 154.207.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 17:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94001 (0x16f31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 17:29:17 2025 GMT
Not After : Apr 5 17:29:17 2025 GMT
Subject: CN=67c343f5-bf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:cc:17:d0:67:c6:e5:6e:ab:65:96:0b:ca:
94:5d:d3:04:3e:2b:36:00:7d:1e:b7:26:f6:58:d2:
4e:ea:d2:08:75:13:f8:98:71:b3:c8:1e:d9:28:3a:
c0:c7:62:c0:db:a0:77:bd:de:c5:e9:16:27:ee:2c:
30:9d:1b:ea:b3:e6:d0:bf:62:33:d8:a4:44:be:f3:
a3:47:32:75:11:12:79:a8:0b:4f:df:af:52:f9:9f:
3f:a3:da:ec:b3:16:ee:2f:6b:7b:a4:85:70:fc:60:
67:4b:89:87:a3:d7:c6:a1:ad:d8:ad:f6:eb:42:f2:
a7:db:cd:e5:61:67:ac:68:0c:fd:c5:c5:7a:0f:0d:
19:96:48:0b:65:f5:fa:25:6f:67:3a:6b:fc:a7:5b:
0b:d3:53:ae:06:11:b8:4f:61:9f:13:f0:2a:29:8f:
e5:f7:f7:22:9e:cb:ee:51:51:6b:25:1f:59:1c:62:
ae:5f:d5:ca:86:e6:1f:54:b2:29:18:30:2f:db:91:
3d:73:12:f4:ab:8f:26:de:9f:28:e3:54:fe:dd:4e:
58:3b:6c:c7:49:81:7c:e9:d0:33:b6:7d:eb:62:94:
88:15:1c:81:a3:ee:86:be:b1:39:c8:62:1b:b5:32:
5e:d7:79:11:40:92:6c:1d:ad:04:9e:79:2c:a9:27:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9E:2B:76:28:51:36:E4:2D:D5:C3:75:FB:61:11:BA:C7:64:67:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8A626FCF6C211EF84DCBB87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.192.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:60:7a:f7:ef:4e:fa:0a:c8:14:ff:6b:fe:b4:70:e7:20:ec:
cc:af:49:62:06:5d:c9:cb:b0:b6:2c:a0:f9:6d:3f:c6:01:e7:
8b:38:d1:7f:d9:35:90:11:6d:ed:48:3b:d2:c0:1b:8d:6d:0a:
d9:6d:1c:93:b7:e7:3f:8e:35:3e:83:88:1c:23:59:b6:ed:9d:
f3:72:24:ad:e5:0f:0f:29:d7:4d:93:0e:a1:82:16:9f:b5:8f:
60:3b:e7:a4:1c:0d:c2:82:4e:53:2a:32:3e:66:66:9c:6f:bf:
77:5f:48:4a:78:e4:a4:13:13:86:11:89:1f:a9:dd:eb:ef:60:
45:d9:da:7a:75:a1:a1:1c:07:a4:de:64:7e:49:7e:fe:22:1f:
76:d1:bb:64:0f:4a:63:e2:80:f6:5b:7f:aa:81:bb:1b:71:81:
38:fe:a1:94:dd:51:e8:4f:62:0f:56:cb:f2:46:60:38:91:7b:
b0:a0:8e:8c:0b:9e:ef:6c:aa:30:9b:b6:ef:a8:51:22:c9:3b:
29:c4:60:2d:1d:b4:97:df:a6:af:f5:b1:e1:35:5b:20:20:5b:
39:db:06:20:65:c0:7d:b2:b7:96:11:dd:f7:14:f0:ce:c1:aa:
0f:20:6c:85:1b:4d:a2:22:07:35:fe:5f:20:13:aa:ba:ec:00:
b4:f8:6d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:47 2025 by rpki-client