Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08D5B0A6C1A411EFBC04DF6C762E951A.roa
File: 08D5B0A6C1A411EFBC04DF6C762E951A.roa (raw, json)
Hash identifier: EIMb7UD5z3hMAT5+6q0eOVM8X0RqswwdpSz3o00Wy/Y=
Subject key identifier: 8E:31:A6:49:90:2A:83:E4:E9:CD:0B:96:DC:68:BD:35:3A:92:CA:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08D5B0A6C1A411EFBC04DF6C762E951A.roa
Signing time: Tue 24 Dec 2024 03:06:14 +0000
ROA not before: Tue 24 Dec 2024 03:06:10 +0000
ROA not after: Wed 10 Dec 2025 03:06:10 +0000
asID: 984
IP address blocks: 154.92.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73943 (0x120d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:06:10 2024 GMT
Not After : Dec 10 03:06:10 2025 GMT
Subject: CN=676a2526-f394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:e4:de:00:38:8d:9e:29:4a:23:12:35:ae:
82:e2:ca:b6:65:ee:47:4b:fb:4f:4f:0d:41:59:b8:
48:94:90:e5:b4:b3:dc:59:68:66:d1:71:f5:10:ff:
ad:83:e2:c9:b1:76:7c:a2:0f:cc:8f:cd:72:97:b3:
44:c5:2c:d7:d1:dc:4d:88:63:d6:fe:f2:dc:a6:ad:
8c:36:3b:21:c5:a1:8c:30:c7:62:3e:78:db:a4:e7:
72:18:54:47:dc:35:31:c5:4f:ae:08:44:e3:4f:4c:
e4:7b:05:43:74:7c:8b:98:ba:f6:25:7c:50:ad:f3:
9b:a5:d0:8c:b7:24:a3:70:5c:86:7a:79:0c:b6:12:
16:2a:ab:62:e6:bf:1c:69:bb:58:d6:c5:d1:de:0a:
7c:21:7c:67:c2:a8:29:3d:54:40:77:ee:91:81:f7:
d9:b6:52:a6:a2:7a:ee:a2:7b:27:16:66:a4:53:60:
4b:12:94:eb:b5:21:a3:b3:d3:e5:af:39:5d:8e:56:
44:df:c0:d6:0f:47:b9:49:7e:d6:b0:3d:5b:5c:dc:
f5:5e:db:71:58:07:c6:33:1b:50:b2:d1:61:c2:d1:
2e:51:35:da:c6:59:73:e4:1b:71:1d:42:95:3b:49:
38:b7:3f:2e:76:54:3f:16:b9:b2:aa:00:9e:04:8c:
36:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:A6:49:90:2A:83:E4:E9:CD:0B:96:DC:68:BD:35:3A:92:CA:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08D5B0A6C1A411EFBC04DF6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.147.0/24
Signature Algorithm: sha256WithRSAEncryption
45:af:10:03:10:75:c1:b0:81:d8:54:3d:c8:b1:b2:a1:24:3c:
ce:f4:3f:fe:36:3d:c8:b5:b7:bb:8b:96:2b:ea:6f:70:6e:1e:
d6:9e:53:19:e1:6a:f9:3f:8b:5d:7e:e7:37:25:6b:bb:b5:66:
79:df:b9:5c:1d:59:77:14:e4:82:50:ba:d5:2b:0b:c2:df:09:
18:fb:b1:87:9f:a4:8a:17:2c:42:3b:c0:d3:f2:75:ba:b4:d9:
fd:96:05:18:cf:d2:30:eb:eb:03:1c:1c:16:09:30:3b:b6:e1:
58:50:3b:4f:23:8f:62:65:d3:33:9b:ac:b9:da:a9:95:40:c0:
d8:8e:02:ca:96:69:52:97:d7:22:35:57:d5:80:78:95:d8:c8:
84:dd:c6:a7:29:62:19:55:1e:6a:fa:90:fe:81:4a:00:e9:76:
2c:ab:e8:dd:29:ce:75:55:20:50:22:6a:a9:47:e6:a1:4d:fd:
9e:6a:97:e8:2e:20:2e:44:4a:44:b8:55:50:e6:d7:d8:16:88:
ed:e6:44:3e:97:1e:47:bb:74:e5:69:6c:ff:a8:d3:42:4d:bc:
7b:5d:e4:e7:75:b7:ee:41:23:83:45:00:38:de:7d:e9:ec:63:
c5:19:3f:eb:83:bc:bb:2d:25:73:75:ec:c7:2c:ca:c2:73:39:
f4:06:96:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASDXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDMwNjEwWhcNMjUxMjEwMDMwNjEwWjAYMRYw
FAYDVQQDEw02NzZhMjUyNi1mMzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv0Lk3gA4jZ4pSiMSNa6C4sq2Ze5HS/tPTw1BWbhIlJDltLPcWWhm0XH1
EP+tg+LJsXZ8og/Mj81yl7NExSzX0dxNiGPW/vLcpq2MNjshxaGMMMdiPnjbpOdy
GFRH3DUxxU+uCETjT0zkewVDdHyLmLr2JXxQrfObpdCMtySjcFyGenkMthIWKqti
5r8cabtY1sXR3gp8IXxnwqgpPVRAd+6RgffZtlKmonruonsnFmakU2BLEpTrtSGj
s9PlrzldjlZE38DWD0e5SX7WsD1bXNz1XttxWAfGMxtQstFhwtEuUTXaxllz5Btx
HUKVO0k4tz8udlQ/FrmyqgCeBIw2HQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI4x
pkmQKoPk6c0LltxovTU6ksrVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wOEQ1QjBBNkMxQTQxMUVGQkMwNERGNkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlyTMA0GCSqGSIb3DQEB
CwUAA4IBAQBFrxADEHXBsIHYVD3IsbKhJDzO9D/+Nj3Itbe7i5Yr6m9wbh7WnlMZ
4Wr5P4tdfuc3JWu7tWZ537lcHVl3FOSCULrVKwvC3wkY+7GHn6SKFyxCO8DT8nW6
tNn9lgUYz9Iw6+sDHBwWCTA7tuFYUDtPI49iZdMzm6y52qmVQMDYjgLKlmlSl9ci
NVfVgHiV2MiE3canKWIZVR5q+pD+gUoA6XYsq+jdKc51VSBQImqpR+ahTf2eapfo
LiAuREpEuFVQ5tfYFojt5kQ+lx5Hu3TlaWz/qNNCTbx7XeTndbfuQSODRQA43n3p
7GPFGT/rg7y7LSVzdezHLMrCczn0BpZM
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:02 2025 by rpki-client