Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05C05B3EC5EE11EFB643ADB4762E951A.roa
File: 05C05B3EC5EE11EFB643ADB4762E951A.roa (raw, json)
Hash identifier: pRmThtlfAlyqFvwGkRQ5/JgMte68FHU/2E21vhJ6xyo=
Subject key identifier: D1:AE:7A:DB:AB:32:3B:6F:E2:98:95:81:9C:25:B0:75:D4:D6:9B:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05C05B3EC5EE11EFB643ADB4762E951A.roa
Signing time: Sun 29 Dec 2024 14:05:56 +0000
ROA not before: Sun 29 Dec 2024 14:05:52 +0000
ROA not after: Sun 12 Dec 2027 14:05:52 +0000
asID: 17561
IP address blocks: 154.211.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77246 (0x12dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:05:52 2024 GMT
Not After : Dec 12 14:05:52 2027 GMT
Subject: CN=67715744-8f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:10:41:a9:e6:ff:94:27:8e:2a:82:26:97:
f1:c0:a9:20:9c:e9:3a:2e:8a:15:24:15:40:51:1e:
af:51:ee:fd:8b:44:d4:05:8d:b7:cc:80:60:99:fb:
84:c9:0d:0a:15:32:7d:ba:42:bc:86:0f:27:b1:dd:
c4:16:12:8b:30:bc:a4:c8:be:53:5d:c2:6d:33:3b:
2b:6e:92:a5:af:6e:71:1c:3e:da:99:a4:42:ac:f9:
2d:20:26:76:87:1f:af:18:4a:e8:0f:cb:8b:92:4a:
91:73:d8:a4:93:c8:ba:a5:6a:c4:56:74:b9:e9:fb:
c9:9b:3f:04:97:b7:ff:07:01:e5:49:95:f2:86:12:
50:4a:56:4e:3e:81:b1:4f:fd:79:a1:e7:2d:08:d7:
d7:33:1a:dc:6c:16:e0:6a:86:1c:ac:0e:44:d1:ea:
e5:86:1e:f6:82:4f:6e:e3:53:36:85:9d:0e:03:f2:
c4:07:67:22:b9:11:14:21:c1:12:b5:4e:80:bc:be:
93:ab:d2:0c:9f:f2:9e:c3:8a:23:e3:b5:18:e7:9f:
ae:0c:b7:9a:51:20:ca:4e:5b:16:7a:27:f4:12:8b:
0f:cc:f8:f4:18:ba:55:50:82:13:6a:e1:5c:ad:eb:
d4:ba:9d:6a:f5:b5:0a:c5:ce:f2:50:67:32:69:a1:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AE:7A:DB:AB:32:3B:6F:E2:98:95:81:9C:25:B0:75:D4:D6:9B:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05C05B3EC5EE11EFB643ADB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.38.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7f:65:36:aa:8e:13:5c:b3:2b:fd:73:18:9f:8e:2b:1d:65:
00:51:c2:74:f0:2e:74:33:d4:31:4c:5b:2e:30:c3:69:ac:44:
3d:7c:da:da:8f:02:1f:d6:81:e0:27:8c:7f:ed:3d:c3:dd:cb:
7e:75:31:d4:ed:2e:91:61:90:b4:9b:a1:9b:75:da:55:5e:8d:
b2:00:47:eb:f8:20:b4:6b:5a:7c:83:75:a7:81:a9:05:c7:bc:
98:5b:81:fc:22:c7:eb:8a:60:a2:3c:1a:a1:a8:5d:54:8e:83:
88:fd:b5:18:13:9e:af:e0:73:5a:af:35:37:d2:08:7d:88:25:
6e:ec:22:a2:d1:b0:2a:c0:68:76:95:89:dc:43:7a:99:06:5a:
38:a6:64:8b:a6:6b:7b:ee:46:f9:a5:9c:63:db:c6:32:b0:d8:
3d:c7:cd:bc:e9:c6:f2:6c:15:1f:b9:45:6a:5c:a2:52:1b:bd:
2f:f6:11:6f:ad:f6:b3:ec:ad:f6:a5:c2:95:68:35:2b:c1:aa:
1c:5c:42:3c:e2:06:57:e5:a7:96:a2:f1:6d:35:64:7d:c2:82:
14:9f:64:c8:96:80:95:56:33:c7:d6:6f:3b:cb:4e:ab:7c:91:
73:32:ca:cf:6f:d6:dc:9e:93:0a:20:62:5a:64:5c:a5:ae:76:
c9:4f:1d:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS2+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTQwNTUyWhcNMjcxMjEyMTQwNTUyWjAYMRYw
FAYDVQQDEw02NzcxNTc0NC04ZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvvYQQanm/5QnjiqCJpfxwKkgnOk6LooVJBVAUR6vUe79i0TUBY23zIBg
mfuEyQ0KFTJ9ukK8hg8nsd3EFhKLMLykyL5TXcJtMzsrbpKlr25xHD7amaRCrPkt
ICZ2hx+vGEroD8uLkkqRc9ikk8i6pWrEVnS56fvJmz8El7f/BwHlSZXyhhJQSlZO
PoGxT/15oectCNfXMxrcbBbgaoYcrA5E0erlhh72gk9u41M2hZ0OA/LEB2ciuREU
IcEStU6AvL6Tq9IMn/Kew4oj47UY55+uDLeaUSDKTlsWeif0EosPzPj0GLpVUIIT
auFcrevUup1q9bUKxc7yUGcyaaHvqQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNGu
eturMjtv4piVgZwlsHXU1ptzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNUMwNUIzRUM1RUUxMUVGQjY0M0FEQjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMmMA0GCSqGSIb3DQEB
CwUAA4IBAQAYf2U2qo4TXLMr/XMYn44rHWUAUcJ08C50M9QxTFsuMMNprEQ9fNra
jwIf1oHgJ4x/7T3D3ct+dTHU7S6RYZC0m6GbddpVXo2yAEfr+CC0a1p8g3WngakF
x7yYW4H8IsfrimCiPBqhqF1UjoOI/bUYE56v4HNarzU30gh9iCVu7CKi0bAqwGh2
lYncQ3qZBlo4pmSLpmt77kb5pZxj28YysNg9x8286cbybBUfuUVqXKJSG70v9hFv
rfaz7K32pcKVaDUrwaocXEI84gZX5aeWovFtNWR9woIUn2TIloCVVjPH1m87y06r
fJFzMsrPb9bcnpMKIGJaZFylrnbJTx3W
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:26 2025 by rpki-client