Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4ACF128F42411EFB815A986762E951A.roa
File: D4ACF128F42411EFB815A986762E951A.roa (raw, json)
Hash identifier: 9xX6JgBgHEUEs0o8XV41kB1301UBeZEq8dKV1NpCVCU=
Subject key identifier: E7:3D:FB:B7:4D:20:C0:C9:E6:35:18:F6:DB:D4:53:50:89:0E:63:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4ACF128F42411EFB815A986762E951A.roa
Signing time: Wed 26 Feb 2025 09:34:10 +0000
ROA not before: Wed 26 Feb 2025 09:34:06 +0000
ROA not after: Thu 19 Feb 2026 09:34:06 +0000
asID: 984
IP address blocks: 154.206.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90589 (0x161dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:34:06 2025 GMT
Not After : Feb 19 09:34:06 2026 GMT
Subject: CN=67bee011-8c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:b8:b2:58:f8:7e:e7:f5:be:46:ae:a4:89:
60:dd:8f:7e:14:68:40:d4:68:49:59:4f:69:89:bf:
35:40:7b:1e:2b:00:af:22:4c:29:df:92:a2:8e:d5:
77:91:c2:0b:86:11:38:46:5f:7d:21:c4:a7:39:c0:
72:b9:55:0a:2e:0d:2c:2e:90:b5:95:5d:bc:85:b8:
6b:5f:ea:b1:7c:c1:e3:79:a2:71:ec:b6:bf:e7:7c:
c3:2d:a3:d4:01:5c:81:2d:53:99:1f:ac:07:ae:79:
c1:5d:dc:07:9a:93:ff:75:c7:13:19:e9:70:71:e4:
7b:4a:5d:6d:33:39:d4:b8:08:69:06:66:5b:32:3f:
67:09:ab:38:73:9f:92:f7:56:ce:0c:f2:68:4a:9f:
be:51:d3:f0:bd:76:2a:7b:b1:68:b1:29:21:91:bb:
24:db:0a:2f:6e:58:6e:9c:1a:e8:4b:ae:2c:f6:43:
97:11:f0:54:c3:72:2c:24:ca:81:93:b2:d2:da:b4:
47:b7:20:f9:2d:72:99:7f:fd:c0:0a:d0:7f:7c:bc:
3e:4a:38:e9:fc:24:a6:38:af:1f:c9:b2:09:d7:08:
0f:b5:d8:93:6b:cc:cb:d6:79:59:be:5c:8f:a7:44:
d0:81:62:07:45:bf:79:38:3c:73:04:54:32:17:b4:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3D:FB:B7:4D:20:C0:C9:E6:35:18:F6:DB:D4:53:50:89:0E:63:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4ACF128F42411EFB815A986762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:63:20:f5:f1:5d:ce:ae:91:88:64:07:f4:8c:3d:6a:9c:6c:
94:b1:7a:90:bf:64:e8:17:c9:11:a9:96:d8:16:01:09:83:a5:
63:19:20:4b:01:d3:32:06:ae:0f:6b:8a:20:e1:39:c7:f0:66:
d5:0f:f1:2c:a6:fa:7b:47:9a:62:1b:b4:3d:c3:e0:ee:96:db:
a3:f7:32:d1:4e:73:a4:dc:f5:f8:6e:34:d0:92:6b:03:4d:be:
30:8c:4d:1a:0a:ab:fc:88:2a:e0:a6:b8:77:e7:6a:e6:8c:0d:
5f:cf:ba:bb:fa:3a:17:a0:e1:49:2f:d1:f5:82:92:d8:43:18:
f2:55:74:97:e3:26:8a:67:64:fb:ea:d3:03:e8:91:3d:89:2c:
63:0b:0d:de:e1:e2:e6:75:12:74:f4:1d:16:a8:a6:ba:07:f4:
54:60:c4:0e:47:30:b2:6e:9d:ee:61:26:96:58:01:e3:d0:17:
93:4f:bf:8a:f1:30:48:93:9e:7b:39:7d:3a:b6:32:cf:81:0f:
ae:94:f0:de:40:9a:aa:0b:88:6a:45:84:c2:8c:82:03:87:af:
85:b3:7f:d3:65:15:8b:0a:92:ef:66:68:1b:0b:17:22:33:31:
ba:bd:d6:b5:7b:b9:91:77:bb:f6:05:47:89:08:f2:52:5f:7e:
b1:a5:86:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:50:38 2025 by rpki-client