Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C3E302AFE5211EF81E33EA5762E951A.roa
File: 0C3E302AFE5211EF81E33EA5762E951A.roa (raw, json)
Hash identifier: UHT6EWnNTZq/vRE/Q7vcdarbL8FLhUCDEk7WAo89U00=
Subject key identifier: 05:DE:44:A5:39:C0:3F:1B:8A:E2:72:D9:2D:53:E3:94:C7:76:C7:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01737A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C3E302AFE5211EF81E33EA5762E951A.roa
Signing time: Tue 11 Mar 2025 08:23:02 +0000
ROA not before: Tue 11 Mar 2025 08:22:58 +0000
ROA not after: Sat 14 Mar 2026 08:22:58 +0000
asID: 138456
IP address blocks: 154.213.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95098 (0x1737a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 11 08:22:58 2025 GMT
Not After : Mar 14 08:22:58 2026 GMT
Subject: CN=67cff2e6-d5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7c:4a:c4:61:58:87:c4:cb:21:6b:54:48:85:
3b:bc:aa:79:a2:3e:11:4e:2a:bc:98:50:76:35:40:
37:80:aa:49:86:20:44:2a:e8:9a:4d:1a:4b:aa:57:
f2:d2:57:1d:ee:1d:7b:1b:44:09:c8:ac:d3:c4:96:
62:27:a6:ba:bf:1d:08:8e:bc:97:12:8e:e2:ce:47:
a1:37:9d:58:57:c6:59:55:ee:bb:9e:a1:21:b2:3f:
70:6a:25:75:63:56:41:0a:29:60:5b:b4:b9:a8:be:
0c:5a:ac:89:bd:27:f1:7b:27:37:c3:55:1e:53:bb:
e7:5b:55:17:f8:8c:92:99:71:8a:67:45:c3:09:ae:
6b:ba:d2:a2:a2:e6:3a:eb:0b:99:1f:b9:ba:81:82:
92:91:52:f1:a7:9f:f9:a7:6b:c1:05:f9:76:85:63:
0d:bc:d6:57:6b:51:a8:72:0f:f8:35:b5:4c:7a:68:
07:9c:cd:15:d7:08:46:ba:fb:ee:03:c8:12:ad:04:
19:e1:bf:67:18:f5:fb:55:7b:31:bb:8a:0b:e5:e8:
4b:ac:60:58:fe:cb:f3:01:08:35:a0:b3:ff:65:45:
4a:69:11:87:ae:e8:29:25:31:04:91:75:99:61:86:
33:c0:66:46:b5:3e:bd:19:d5:ae:44:43:49:60:d7:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DE:44:A5:39:C0:3F:1B:8A:E2:72:D9:2D:53:E3:94:C7:76:C7:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C3E302AFE5211EF81E33EA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.2.0/23
Signature Algorithm: sha256WithRSAEncryption
92:b3:86:53:7c:d8:8c:95:de:c0:16:94:19:16:ba:32:5c:70:
af:08:b2:2e:11:bd:e0:84:94:8f:e6:59:7c:b1:c1:a5:da:6f:
95:5f:21:e2:3a:ca:75:f8:c9:30:7c:47:67:a3:72:c5:16:d6:
5f:f3:8f:0c:35:54:12:8b:35:1a:30:14:4f:5f:fe:5d:af:4d:
48:fc:c6:86:36:55:b7:43:58:b1:b3:96:89:50:f4:44:e7:07:
50:65:c3:e5:fc:e2:8b:77:ec:e1:57:60:14:b2:ff:d2:13:12:
7d:4c:d1:ed:7c:77:f3:a3:a1:a7:a8:31:88:fc:4e:6e:3d:97:
89:b7:c0:58:20:ec:44:19:da:43:cd:67:ef:72:4a:f5:8d:e6:
c2:35:66:9a:1e:8c:83:27:22:b6:f5:29:93:87:f3:c1:5b:b6:
0d:9e:6e:e6:85:47:f3:cf:3b:73:c9:5c:81:fd:59:2a:27:4a:
67:c6:88:90:e2:7c:2b:f2:d5:6d:28:4d:9c:1e:6e:a4:64:0f:
d3:5d:71:fc:91:64:8e:d3:cb:c9:1d:6e:12:76:07:a8:23:e6:
de:66:2b:10:6f:33:d4:28:1c:50:a2:da:ee:16:a7:5e:a0:2b:
55:14:77:af:dd:e3:0e:c2:87:19:b4:ec:ef:c5:9d:24:18:6e:
2b:0a:16:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXN6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzExMDgyMjU4WhcNMjYwMzE0MDgyMjU4WjAYMRYw
FAYDVQQDEw02N2NmZjJlNi1kNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4XxKxGFYh8TLIWtUSIU7vKp5oj4RTiq8mFB2NUA3gKpJhiBEKuiaTRpL
qlfy0lcd7h17G0QJyKzTxJZiJ6a6vx0IjryXEo7izkehN51YV8ZZVe67nqEhsj9w
aiV1Y1ZBCilgW7S5qL4MWqyJvSfxeyc3w1UeU7vnW1UX+IySmXGKZ0XDCa5rutKi
ouY66wuZH7m6gYKSkVLxp5/5p2vBBfl2hWMNvNZXa1Gocg/4NbVMemgHnM0V1whG
uvvuA8gSrQQZ4b9nGPX7VXsxu4oL5ehLrGBY/svzAQg1oLP/ZUVKaRGHrugpJTEE
kXWZYYYzwGZGtT69GdWuRENJYNcLiQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAXe
RKU5wD8biuJy2S1T45THdsfqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQzNFMzAyQUZFNTIxMUVGODFFMzNFQTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtUCMA0GCSqGSIb3DQEB
CwUAA4IBAQCSs4ZTfNiMld7AFpQZFroyXHCvCLIuEb3ghJSP5ll8scGl2m+VXyHi
Osp1+MkwfEdno3LFFtZf848MNVQSizUaMBRPX/5dr01I/MaGNlW3Q1ixs5aJUPRE
5wdQZcPl/OKLd+zhV2AUsv/SExJ9TNHtfHfzo6GnqDGI/E5uPZeJt8BYIOxEGdpD
zWfvckr1jebCNWaaHoyDJyK29SmTh/PBW7YNnm7mhUfzzztzyVyB/VkqJ0pnxoiQ
4nwr8tVtKE2cHm6kZA/TXXH8kWSO08vJHW4SdgeoI+beZisQbzPUKBxQotruFqde
oCtVFHev3eMOwocZtOzvxZ0kGG4rChY2
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:42 2025 by rpki-client