Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06526B8F42911EF9B2E2FA8762E951A.roa
File: C06526B8F42911EF9B2E2FA8762E951A.roa (raw, json)
Hash identifier: pXKtruFWsRpHLDR8V09W1tlxtKp3sEjuqyOiJpsneWQ=
Subject key identifier: E6:20:E5:1C:BB:44:5F:8A:6F:17:47:D9:2F:55:44:38:2D:79:AF:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016221
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06526B8F42911EF9B2E2FA8762E951A.roa
Signing time: Wed 26 Feb 2025 10:09:23 +0000
ROA not before: Wed 26 Feb 2025 10:09:19 +0000
ROA not after: Thu 19 Feb 2026 10:09:19 +0000
asID: 984
IP address blocks: 154.208.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90657 (0x16221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:09:19 2025 GMT
Not After : Feb 19 10:09:19 2026 GMT
Subject: CN=67bee853-41be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:9e:b1:2f:a9:da:9f:04:9d:aa:17:29:61:
b3:3b:84:8d:05:fc:62:36:5c:10:9c:f4:d0:fe:9c:
d8:5f:80:bc:89:4e:45:a1:40:ef:74:d1:9d:02:4d:
f9:ba:5e:c7:60:ec:88:64:08:bc:e7:91:5f:60:fe:
b3:c6:2e:e0:84:6c:dd:c1:e2:28:a7:66:76:7b:7e:
52:bd:ef:dc:6b:7e:a2:38:42:80:b1:ab:98:d3:16:
91:b0:92:cf:1f:f7:c7:51:09:cc:36:bc:22:df:39:
da:17:90:80:18:97:e2:de:64:14:11:b0:c9:27:23:
e8:e0:e3:e9:32:e1:3e:5c:7b:dd:be:da:1a:44:13:
5e:ab:c8:80:df:2e:c8:6a:d3:43:8d:27:99:9c:ee:
33:2c:af:19:0b:b5:ae:72:ae:2d:f8:3b:67:50:ae:
02:5c:f4:4b:a5:99:94:5a:f5:ae:76:74:46:d1:59:
5c:8f:08:0a:bb:1f:bf:7c:4b:94:b1:a3:d7:49:ed:
72:94:df:50:6d:9e:74:1f:1c:41:c3:82:85:94:46:
3a:ab:32:d6:f3:28:e9:1c:d7:f5:18:a3:52:b9:0b:
59:b8:e6:ba:55:6c:bc:e3:da:b8:1a:79:00:cf:c6:
e6:ff:2e:08:b7:02:9a:e9:e8:e1:99:7f:19:d1:7f:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:20:E5:1C:BB:44:5F:8A:6F:17:47:D9:2F:55:44:38:2D:79:AF:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06526B8F42911EF9B2E2FA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.68.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:70:a3:cb:57:45:53:02:e7:d8:10:d6:4e:3e:91:1a:e0:0d:
94:0b:93:4d:af:51:6d:3f:c1:92:e2:ee:a4:25:0e:f9:46:8e:
b3:1f:8f:10:fb:81:cf:77:da:91:c0:65:42:f1:59:1b:d4:89:
00:11:67:ed:23:51:78:c2:12:0e:6e:5c:bc:5f:ad:68:5c:43:
fc:54:16:6e:fc:69:ec:4a:b0:16:ba:f7:14:f1:78:de:74:d6:
f5:bd:27:05:90:b1:bd:c7:bd:0e:fa:4c:12:01:dd:c1:43:88:
ea:e4:e7:45:cd:77:a1:d0:3b:37:e0:63:d1:75:7b:ce:a6:5c:
42:c8:64:72:1a:88:a5:9a:49:5a:fc:cf:a3:58:5b:f3:4e:62:
96:45:64:d4:01:57:c4:70:6c:cb:e9:b0:09:45:97:cd:ed:54:
40:3d:01:f3:83:46:2d:22:64:d7:eb:95:6e:02:a3:ac:27:19:
3f:d3:4c:fa:3b:04:91:78:c6:f3:59:5c:64:16:95:2e:4a:5c:
79:c1:03:c1:ef:95:37:ff:be:d7:b7:cd:dc:91:7c:18:c8:49:
8c:e7:cc:ef:0f:8c:19:d4:5a:f6:61:6e:3a:ab:e0:4c:2a:32:
88:73:e7:89:44:0d:34:a4:ca:78:b5:e6:1c:5d:42:ce:fc:84:
f0:d0:7f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:46 2025 by rpki-client