Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01EAFC08C26A11EF84AF1065762E951A.roa
File: 01EAFC08C26A11EF84AF1065762E951A.roa (raw, json)
Hash identifier: if+mZkPNDfUjULuLv8vacl4SGWz5OtWYo+hr/Cqt2ao=
Subject key identifier: 9B:FE:89:30:A7:C5:BD:E1:3B:74:15:19:D8:06:9A:49:11:1D:1A:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012416
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01EAFC08C26A11EF84AF1065762E951A.roa
Signing time: Wed 25 Dec 2024 02:43:23 +0000
ROA not before: Wed 25 Dec 2024 02:43:19 +0000
ROA not after: Wed 10 Dec 2025 02:43:19 +0000
asID: 984
IP address blocks: 154.211.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74774 (0x12416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:43:19 2024 GMT
Not After : Dec 10 02:43:19 2025 GMT
Subject: CN=676b714a-5cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:e1:5f:79:92:11:61:91:2a:96:8b:17:b5:
05:c9:1f:ea:4e:79:c6:8a:28:9e:4a:c4:55:76:19:
f6:93:ef:a6:26:c2:97:ca:5e:d0:2c:b3:be:24:fa:
0a:f1:45:27:a1:75:72:71:d2:e8:6a:8b:8a:07:2f:
11:8f:ee:10:72:5a:a9:d4:74:37:4c:28:fa:d7:81:
51:e6:e1:c4:20:44:70:03:a4:86:07:dd:86:70:d4:
c1:66:1c:4b:4c:2e:98:09:e8:ab:c8:8c:0d:c3:63:
14:ff:f6:e6:3b:74:86:17:66:f7:9c:5d:c0:50:06:
2f:be:3d:17:1f:d4:e3:fd:6e:fd:c9:ea:a1:ed:78:
41:99:3c:22:5d:3c:19:bb:27:39:1d:a4:20:09:1e:
21:71:0a:11:ca:17:68:1e:59:c2:f2:0f:41:b5:3e:
70:6c:aa:46:28:02:6f:72:bc:16:5e:d6:41:37:56:
bc:24:71:33:2d:78:97:d1:4d:c7:bd:b5:c3:bf:4d:
b0:f2:1f:d1:fe:10:28:d6:c3:f1:76:b3:32:88:c3:
33:95:de:46:0c:42:88:c5:69:f5:33:62:1e:ee:41:
39:65:73:19:d3:c0:6c:da:99:c8:11:c9:f5:b7:8d:
cb:de:47:0b:00:61:d5:32:17:05:2e:fa:37:bf:ff:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FE:89:30:A7:C5:BD:E1:3B:74:15:19:D8:06:9A:49:11:1D:1A:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01EAFC08C26A11EF84AF1065762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:bf:70:96:57:81:cd:54:b9:69:fa:b0:f4:61:34:17:c7:e6:
bb:e0:41:00:e1:96:7b:03:fe:90:23:b3:fd:6a:ef:65:82:56:
c6:80:cb:20:09:19:58:bd:e2:3a:a6:b8:e5:4d:ca:5a:58:79:
e4:e3:8c:a7:70:6a:30:92:1f:69:85:18:2e:6c:e9:2f:8e:3d:
1b:35:22:93:11:c7:66:39:1b:5e:4c:e9:f1:68:94:51:3f:b5:
fc:68:e5:f7:e3:dd:5d:20:7f:b8:a3:f3:ea:73:c5:83:be:89:
19:83:b7:76:40:cd:a6:c3:e1:02:f9:b4:34:39:0f:90:15:03:
a8:3c:8c:6e:1e:81:a0:dd:c2:a6:6d:d0:a5:a2:d3:89:5e:21:
dc:b8:a3:c9:7d:20:21:dc:95:0b:73:e7:b8:33:d8:42:80:c2:
70:47:2d:e9:58:7c:2a:11:77:81:bc:4e:64:7e:48:30:31:58:
5d:d1:96:b3:94:cd:b2:47:fb:d8:40:5a:26:bd:98:a0:b9:8a:
53:da:70:96:7b:95:5e:1e:f3:07:27:cb:46:31:e7:2e:88:dd:
c7:bf:50:b8:7c:9c:c0:71:51:69:4f:da:12:95:38:f5:db:b5:
68:5f:ad:1e:50:1a:a6:b6:12:60:a9:66:68:5c:54:c6:60:69:
1d:b2:88:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASQWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDI0MzE5WhcNMjUxMjEwMDI0MzE5WjAYMRYw
FAYDVQQDEw02NzZiNzE0YS01Y2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtJPhX3mSEWGRKpaLF7UFyR/qTnnGiiieSsRVdhn2k++mJsKXyl7QLLO+
JPoK8UUnoXVycdLoaouKBy8Rj+4Qclqp1HQ3TCj614FR5uHEIERwA6SGB92GcNTB
ZhxLTC6YCeiryIwNw2MU//bmO3SGF2b3nF3AUAYvvj0XH9Tj/W79yeqh7XhBmTwi
XTwZuyc5HaQgCR4hcQoRyhdoHlnC8g9BtT5wbKpGKAJvcrwWXtZBN1a8JHEzLXiX
0U3HvbXDv02w8h/R/hAo1sPxdrMyiMMzld5GDEKIxWn1M2Ie7kE5ZXMZ08Bs2pnI
Ecn1t43L3kcLAGHVMhcFLvo3v//yewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJv+
iTCnxb3hO3QVGdgGmkkRHRp4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMUVBRkMwOEMyNkExMUVGODRBRjEwNjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtOXMA0GCSqGSIb3DQEB
CwUAA4IBAQBMv3CWV4HNVLlp+rD0YTQXx+a74EEA4ZZ7A/6QI7P9au9lglbGgMsg
CRlYveI6prjlTcpaWHnk44yncGowkh9phRgubOkvjj0bNSKTEcdmORteTOnxaJRR
P7X8aOX3491dIH+4o/Pqc8WDvokZg7d2QM2mw+EC+bQ0OQ+QFQOoPIxuHoGg3cKm
bdClotOJXiHcuKPJfSAh3JULc+e4M9hCgMJwRy3pWHwqEXeBvE5kfkgwMVhd0Zaz
lM2yR/vYQFomvZiguYpT2nCWe5VeHvMHJ8tGMecuiN3Hv1C4fJzAcVFpT9oSlTj1
27VoX60eUBqmthJgqWZoXFTGYGkdsog7
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:20 2025 by rpki-client