Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6BD9C12243511F0883BB7B1DAE4EC9C.roa
File: B6BD9C12243511F0883BB7B1DAE4EC9C.roa (raw, json)
Hash identifier: Jrpc58yKfK2kFvAtpIpfUzGPSJlY70l7nCPvDkB+jAs=
Subject key identifier: A4:A0:17:35:69:E8:9C:C8:32:24:F2:29:36:23:66:E0:F8:77:87:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6BD9C12243511F0883BB7B1DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:35:57 +0000
ROA not before: Mon 28 Apr 2025 13:35:52 +0000
ROA not after: Mon 23 Mar 2026 13:35:52 +0000
asID: 984
IP address blocks: 154.207.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97263 (0x17bef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:35:52 2025 GMT
Not After : Mar 23 13:35:52 2026 GMT
Subject: CN=680f843d-ef5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:cf:c3:39:00:b0:63:13:f1:ee:82:4e:ae:
cd:db:17:4b:cc:e2:9d:cb:a5:e2:4f:d7:22:e1:12:
93:b3:37:31:5d:bf:dc:aa:2d:11:4b:03:7d:3b:c5:
83:8d:28:37:d4:d1:c4:a2:ed:28:8f:ea:e0:6f:bf:
e4:81:7a:92:3e:f2:a7:97:1f:26:03:0d:16:ea:6c:
b5:1a:5b:bc:1b:40:e5:40:bc:7d:9a:c8:14:03:d5:
94:48:aa:53:ba:85:f8:ee:2e:12:25:d2:2d:51:be:
04:41:6a:1f:30:fe:f8:a7:e1:9d:3d:c1:c6:bc:48:
b8:12:6c:89:fb:bf:24:f1:a9:dd:16:23:42:d1:28:
93:77:69:68:bd:97:63:e7:e0:11:69:d8:86:a3:9c:
1e:b1:1b:ca:bf:83:4e:c4:ca:50:41:38:f9:e4:99:
c1:b9:68:df:78:28:3c:93:6a:6e:5c:60:27:36:b9:
b2:90:9d:5d:fc:98:61:cd:3c:cf:97:3a:1e:57:b6:
11:34:c4:40:9c:fc:80:71:74:af:f7:30:89:79:80:
20:6d:74:f6:e5:81:0c:0f:85:1c:14:a6:15:9e:e4:
24:1a:20:79:74:53:48:ec:d6:a5:76:1d:e6:89:51:
d0:47:03:a2:38:6b:9f:32:13:09:3d:b9:cb:f5:c9:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:17:35:69:E8:9C:C8:32:24:F2:29:36:23:66:E0:F8:77:87:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6BD9C12243511F0883BB7B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.237.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a5:c6:45:df:6e:dc:41:ec:77:72:05:f1:3d:46:05:f7:b5:
17:25:c4:c9:63:97:44:84:22:bc:f6:2a:d9:5d:68:a7:6a:d4:
6b:aa:15:91:50:dc:8b:e6:63:ca:a8:52:39:4b:db:17:37:c1:
5d:8a:4b:c9:2e:40:8d:79:92:21:c6:62:54:8e:ac:20:a9:d9:
5e:a2:ba:76:5c:4a:d8:aa:d6:09:3b:bb:3a:d0:86:97:5e:db:
d8:d5:9c:a6:e1:3e:fd:9d:9b:b9:6a:5c:0c:03:cd:41:dd:67:
3b:ba:2a:94:07:a0:d0:11:c9:45:18:70:1d:b8:85:22:cf:46:
d1:76:e8:26:d7:ed:67:4c:5c:99:ed:7a:a0:57:88:9e:16:be:
3f:24:b6:65:3e:c0:c9:cb:ca:6a:66:18:e2:b1:c1:f9:2c:8b:
74:dc:6a:a6:71:a1:21:07:d5:4e:2a:d3:c3:9d:10:31:09:52:
d5:49:f5:8d:7b:e6:31:00:f6:48:32:13:ab:ab:4a:53:ac:8c:
da:62:9a:4e:2c:e6:59:50:96:cd:30:b3:cd:11:da:b4:4e:ad:
1e:7c:f8:00:36:87:7c:44:bd:db:a2:2a:a6:7c:9e:e5:6b:e5:
fd:83:26:00:59:5a:d3:a2:0e:fc:a6:46:6a:01:14:88:42:b3:
17:c6:a6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:17:14 2025 by rpki-client