Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7582A4EF3D911EFBC26C974762E951A.roa
File: F7582A4EF3D911EFBC26C974762E951A.roa (raw, json)
Hash identifier: CD3E4/5Gi8iRDdBZA+INDsClOzDRPlRtN3w9FjZqMEs=
Subject key identifier: 56:02:28:A9:CC:AA:6A:36:AB:E1:38:D4:E0:E2:D8:6B:16:8F:D9:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016043
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7582A4EF3D911EFBC26C974762E951A.roa
Signing time: Wed 26 Feb 2025 00:38:16 +0000
ROA not before: Wed 26 Feb 2025 00:00:12 +0000
ROA not after: Thu 19 Feb 2026 00:00:12 +0000
asID: 984
IP address blocks: 154.92.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90179 (0x16043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:12 2025 GMT
Not After : Feb 19 00:00:12 2026 GMT
Subject: CN=67be6277-8236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:d0:44:87:0b:2c:c8:b8:a5:7d:f8:ec:0f:
45:78:c2:42:fa:81:d6:cd:8d:d7:74:50:5b:53:b9:
7d:69:4c:21:eb:19:4f:ae:e1:de:46:59:db:fb:0b:
e6:c9:37:d3:45:a6:0e:5d:57:c2:59:a2:ae:81:d8:
e3:52:6f:a6:23:f1:77:53:39:fe:dc:a0:ca:85:88:
9e:af:8e:c0:9e:99:31:8e:f9:90:61:cc:28:cc:08:
bf:51:14:6f:28:53:44:de:4f:ea:1d:9e:9e:05:08:
02:87:85:c7:5d:76:45:24:db:e2:a7:8d:a9:90:a8:
54:7f:81:0e:92:3a:36:5f:5f:94:f3:af:bd:22:a8:
31:92:ba:11:9f:fe:bc:e9:d3:d7:fe:68:41:8b:24:
1d:31:97:60:4f:a1:65:5a:6e:46:7e:06:8f:db:8b:
4a:27:04:31:e0:12:68:2c:2c:13:98:14:c9:b5:16:
9c:b8:2c:36:f0:52:ac:0d:3d:34:77:20:95:cc:38:
6d:b9:69:25:03:af:07:7b:e4:b8:fe:ab:06:26:41:
2f:b8:5a:a1:ef:3b:5b:17:b6:75:0e:b7:27:af:c3:
3a:06:fa:0c:99:3f:c3:45:e7:89:54:1c:50:66:15:
fa:e6:6d:25:20:ba:61:ea:9f:b7:f5:02:9d:c4:0e:
f5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:02:28:A9:CC:AA:6A:36:AB:E1:38:D4:E0:E2:D8:6B:16:8F:D9:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7582A4EF3D911EFBC26C974762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.143.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bc:5f:ba:aa:0c:6f:2f:28:57:a0:23:da:71:6d:79:6d:1a:
7e:f7:90:7f:e8:e8:be:bc:6e:e3:cb:86:32:44:9e:f1:6f:fa:
b1:4e:99:ef:a2:4f:de:50:43:9d:43:97:57:05:e5:fa:53:39:
33:38:a4:88:c7:4e:7b:53:5f:02:6d:29:5c:b6:9e:18:c7:02:
50:cf:8b:07:de:a0:9b:02:b8:97:d2:f1:b4:ce:db:bd:57:4b:
41:1c:f2:28:23:dc:14:c8:98:ab:4c:02:df:1a:b2:68:ba:91:
ba:26:f2:95:6f:73:84:5f:ed:a8:a5:e1:7f:1d:34:0b:33:42:
81:2f:d0:38:7e:91:05:7c:25:ba:6d:af:0f:70:b3:06:40:73:
67:59:23:f9:f2:86:de:bd:0e:23:fa:4a:b0:f3:6e:1c:81:e3:
89:2c:f7:e8:74:d6:2d:a3:c2:43:34:5d:21:d2:e1:a7:89:42:
64:21:13:18:dc:f9:e0:c8:8f:0f:8b:d4:21:75:d4:a4:12:63:
5d:fb:c4:e6:d9:04:f5:c5:cb:83:c7:cd:a6:85:92:bd:0c:89:
d2:d6:39:e2:5f:dc:61:10:1d:a3:17:9b:6a:c6:7a:4f:a7:12:
ea:7b:4e:bc:b6:be:24:2a:4f:43:6d:1c:17:8e:3c:9b:d9:c5:
63:24:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:48:27 2025 by rpki-client