Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEBD1876F42111EF80355E72762E951A.roa
File: DEBD1876F42111EF80355E72762E951A.roa (raw, json)
Hash identifier: +s5jhu/3F+lmMq+POljeDo59mLdl1gKCKoyOlgQDFfw=
Subject key identifier: CB:7C:8F:71:65:13:A2:BA:DD:23:75:61:14:69:E9:E2:D7:76:2C:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEBD1876F42111EF80355E72762E951A.roa
Signing time: Wed 26 Feb 2025 09:12:58 +0000
ROA not before: Wed 26 Feb 2025 09:12:54 +0000
ROA not after: Thu 19 Feb 2026 09:12:54 +0000
asID: 328608
IP address blocks: 154.200.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 21:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90537 (0x161a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:12:54 2025 GMT
Not After : Feb 19 09:12:54 2026 GMT
Subject: CN=67bedb1a-23b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:1c:c0:82:09:f3:91:0a:76:96:a5:89:58:
f1:e1:f0:2e:99:df:64:52:d7:bc:6f:6e:67:4e:72:
35:8a:9c:10:e1:7a:40:be:c9:46:e0:b6:63:9f:29:
01:2a:84:81:3d:94:33:e4:fd:8c:59:f3:3c:b0:e1:
7f:29:83:06:49:a4:e0:ac:e3:5e:e6:3d:95:88:80:
ea:26:75:f6:9b:c0:05:38:46:d7:f7:fe:30:65:1e:
f3:c0:6d:70:75:0e:6a:f7:45:ce:dc:e5:ae:bc:05:
19:81:3e:1a:05:a8:85:c7:a9:4a:b0:f6:c3:93:d7:
01:b1:48:72:c5:e1:88:7d:17:e2:b1:ad:09:43:ef:
92:a2:3d:30:20:26:04:2f:1d:30:91:99:b6:69:e2:
61:4e:d6:d2:35:b3:82:d0:8a:81:59:2d:b6:b7:95:
15:57:5a:21:90:1b:b5:b6:d8:9d:65:f6:34:10:f0:
7c:e4:9f:52:ae:da:ae:15:82:4d:dc:b9:cb:75:2c:
da:cf:3e:9e:c8:1f:aa:68:c2:7e:8b:bf:a6:8e:5a:
a2:2b:f1:31:0a:43:96:b6:26:9e:86:fa:64:bd:e0:
58:0e:ca:6e:2a:f3:0c:12:21:86:57:1e:71:1e:91:
3f:ff:f5:98:08:16:35:af:cd:9a:94:ba:ef:41:ba:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:8F:71:65:13:A2:BA:DD:23:75:61:14:69:E9:E2:D7:76:2C:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEBD1876F42111EF80355E72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.221.0/24
Signature Algorithm: sha256WithRSAEncryption
16:84:9d:9f:fe:d6:5e:30:d4:50:cb:e0:30:ce:f3:73:cd:8d:
01:49:48:72:2e:43:5f:60:91:bc:b3:57:1e:c8:47:38:74:fa:
10:00:08:7a:1d:3f:d0:47:07:12:4a:47:8c:3e:b1:f3:d5:98:
71:9e:9f:d3:a1:7b:9c:e7:c6:5f:26:ea:54:9a:c0:8f:ad:89:
e6:cf:b9:e5:4d:ff:83:b2:21:d5:d9:58:32:b3:07:4a:f4:be:
39:66:30:1a:4b:bd:9a:d5:e0:c3:b1:ac:67:61:59:35:b3:9a:
6a:4c:be:b7:a9:2d:7e:0d:34:5e:9a:21:ca:dc:c6:07:8b:31:
93:f1:33:dc:37:a6:42:ad:92:b5:4b:61:30:9a:d5:20:a6:a7:
93:ae:76:ff:e2:46:d5:79:15:81:63:ba:c5:88:7f:2a:91:c2:
5c:1d:88:e6:30:79:c0:eb:51:a8:9c:f3:f6:31:d0:86:7a:a4:
6a:f8:23:b1:43:99:fc:37:02:75:32:e4:49:b8:9e:0e:9e:b0:
3f:3b:40:65:40:a9:1f:f5:5a:b8:7a:54:63:a8:ed:64:c5:35:
61:82:a0:7c:a0:2c:a3:62:88:5c:cd:55:5f:ec:38:57:61:61:
bd:c1:0a:ee:3c:49:ed:4e:ec:e2:85:da:70:00:e1:e3:0d:62:
f7:74:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:21:13 2025 by rpki-client