Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA587256F43611EFA2ACA685762E951A.roa
File: EA587256F43611EFA2ACA685762E951A.roa (raw, json)
Hash identifier: jc+9d6Y3mGwRErl20AHHwTtSwzRnsl5hWF2zg5Qgjv0=
Subject key identifier: A6:D6:8C:A5:DF:C7:FC:6C:7C:16:7B:BB:DF:82:26:FD:82:49:F6:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA587256F43611EFA2ACA685762E951A.roa
Signing time: Wed 26 Feb 2025 11:43:37 +0000
ROA not before: Wed 26 Feb 2025 11:43:33 +0000
ROA not after: Thu 19 Feb 2026 11:43:33 +0000
asID: 984
IP address blocks: 154.207.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90806 (0x162b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:43:33 2025 GMT
Not After : Feb 19 11:43:33 2026 GMT
Subject: CN=67befe69-9fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:2f:6a:e3:5a:16:e7:ce:41:0d:76:5f:77:
2f:b2:4f:6f:a5:ea:1a:1f:d8:bd:7d:30:07:d2:ee:
bf:6f:8f:25:06:55:5f:99:d9:a8:c6:02:aa:a2:c4:
5c:9b:3a:05:da:18:70:03:72:9c:c3:f6:e8:ac:17:
bc:f4:22:37:21:d0:4f:b6:0c:a9:6c:fb:f2:00:23:
1a:f3:ba:50:ba:b7:92:d7:49:26:65:9c:5a:1e:1e:
7a:b0:78:bf:6c:35:d2:d8:61:da:e5:35:f4:18:9d:
20:8b:41:dc:36:ce:8e:cb:ea:32:36:d8:2e:6c:ea:
2b:fe:34:24:2c:9a:30:82:1d:78:8a:8f:a3:19:3b:
e1:da:31:df:0e:3c:ea:7b:29:d5:df:bb:e0:6f:8f:
3e:99:79:4b:38:e2:4b:28:12:dc:a1:1d:bc:2b:1a:
1b:63:52:bf:16:d0:e9:5e:bc:a1:18:f2:0f:a8:d7:
59:51:f6:01:09:15:d5:a8:ca:a0:1b:3a:92:4b:3a:
39:e0:91:be:9a:db:7a:c4:ec:f6:44:65:a0:76:bf:
f0:0c:0e:04:59:c7:51:41:29:85:7a:d2:04:d9:bc:
4a:64:52:d0:d9:da:b8:0c:7c:b2:07:e3:d9:c5:b6:
96:8b:7a:77:03:ca:81:be:7d:0e:78:86:61:13:a5:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D6:8C:A5:DF:C7:FC:6C:7C:16:7B:BB:DF:82:26:FD:82:49:F6:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA587256F43611EFA2ACA685762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.107.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:33:50:cc:3a:22:1b:1e:0c:74:63:a3:48:38:09:08:00:c8:
23:09:ea:d0:b5:55:ce:b4:21:9a:25:d7:c3:0e:00:ee:62:3b:
e5:9f:02:42:85:31:b8:d0:a7:6f:44:ff:d9:4e:8d:45:8e:cd:
25:89:2f:b4:4c:3e:15:05:5c:06:e5:c3:72:1e:a9:62:cb:64:
4b:50:06:fc:3f:92:92:c1:a9:1c:9e:61:4a:8d:21:18:31:4c:
28:d0:a8:cc:ea:52:fa:dd:41:6b:06:5b:72:8c:f6:40:c1:ab:
ec:6e:9b:31:d5:8d:3a:f4:9a:f4:9d:8f:c7:39:fc:53:ba:19:
fe:4a:cd:38:62:f6:f7:0a:7a:cc:57:43:95:66:d4:81:51:ef:
1f:86:36:97:5a:e1:b8:3c:e1:d5:df:61:cf:8e:25:b4:ea:33:
b9:d7:d1:1f:f7:c1:ae:b5:d9:10:6b:e1:f2:e9:bb:88:58:52:
3c:a2:ab:09:01:0f:de:92:5e:fc:c2:b3:a7:33:e9:ff:37:36:
57:87:34:f0:59:8d:7a:45:02:df:1a:c9:c7:fe:a2:8b:19:97:
13:a1:e9:c7:ca:41:c1:b0:cd:0c:70:8f:3b:c1:92:af:ae:de:
cb:8b:2a:86:0e:62:9f:86:20:04:13:39:c2:f0:f3:f4:6a:4a:
71:c3:cf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:56:52 2025 by rpki-client