Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1373F4BCF81511EFAA6D8081762E951A.roa
File: 1373F4BCF81511EFAA6D8081762E951A.roa (raw, json)
Hash identifier: ipfSi81o1F3yEHNI5fJrb8mAuvC9gOwUPI19fzL4DtI=
Subject key identifier: 63:F7:B5:7C:F1:7A:45:14:EB:E9:EA:59:8F:19:E2:06:87:B3:4E:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1373F4BCF81511EFAA6D8081762E951A.roa
Signing time: Mon 03 Mar 2025 09:51:28 +0000
ROA not before: Mon 03 Mar 2025 09:51:23 +0000
ROA not after: Wed 30 Apr 2025 09:51:23 +0000
asID: 63139
IP address blocks: 154.94.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94164 (0x16fd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:51:23 2025 GMT
Not After : Apr 30 09:51:23 2025 GMT
Subject: CN=67c57b9f-7ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:f6:15:94:15:d8:37:cc:75:62:ca:2c:f9:
59:ba:12:8a:cc:88:29:a8:98:55:fc:61:8a:de:d1:
59:11:2b:f4:9c:24:11:e9:34:c0:d1:e1:a2:70:d2:
98:1e:c0:69:1e:15:97:fe:b3:65:7c:cf:fa:f8:10:
5b:99:a9:91:02:43:03:4d:9f:81:9c:fa:c9:15:b5:
f2:10:f6:f0:ce:74:a3:42:69:e2:5f:fd:3f:bf:67:
05:75:56:b6:e1:d6:80:b5:f8:3e:14:93:a8:57:1e:
c2:c8:87:40:8d:08:11:88:b9:19:a9:4b:bb:29:72:
02:1a:ca:20:6e:ff:d1:44:1a:86:46:ac:a8:69:fc:
cb:d0:88:c5:a8:eb:43:56:47:f3:45:ed:4a:ac:38:
55:f4:6f:ba:a6:e7:ab:06:a9:e7:fe:e7:36:f5:6d:
85:41:10:c2:b2:6b:c7:b5:b9:96:bf:57:82:a6:a0:
1a:30:48:ea:c7:33:91:19:e9:b9:ba:8c:98:85:84:
09:8c:a2:3d:81:37:9c:20:ae:27:50:c6:be:37:ed:
08:9b:34:82:09:44:1c:18:86:4e:8c:e6:3e:ef:23:
83:d1:af:ee:84:3b:10:65:11:62:1e:87:e7:5c:81:
dc:ca:ee:ba:07:67:a0:22:74:e6:0f:9e:2f:a5:bd:
2e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F7:B5:7C:F1:7A:45:14:EB:E9:EA:59:8F:19:E2:06:87:B3:4E:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1373F4BCF81511EFAA6D8081762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.116.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:7f:30:dd:86:44:8a:a5:00:59:bc:7c:f6:57:81:c1:73:94:
a5:8e:a9:bc:57:ad:33:86:76:ba:2e:f5:07:c7:88:8f:76:1d:
32:a2:4a:83:6a:94:c7:a3:99:d3:82:ed:75:86:cf:6d:63:90:
c2:cd:e1:1a:d3:2e:6f:c8:22:d9:5f:4a:ca:e3:53:d6:64:0c:
11:73:09:f1:f2:ae:fb:91:40:fa:9f:94:f1:9f:e3:1e:dd:99:
79:cc:c6:42:ba:0b:39:b7:9b:e3:20:c9:ce:e4:4a:47:5e:c2:
d4:6f:71:a5:00:c6:a4:7f:cc:e9:28:82:fd:3c:e1:85:d9:76:
49:16:e9:bc:1a:46:21:32:bb:83:67:66:d0:02:ee:0c:27:33:
25:81:38:43:3b:bd:11:66:fe:b1:06:0d:09:4f:90:ed:15:8b:
ce:59:3f:06:87:6f:22:62:a1:a6:fd:ef:c8:f6:b5:3d:ac:42:
01:6f:28:42:ba:57:00:79:01:5b:54:5c:de:51:4a:a4:c2:ec:
0e:6b:11:02:02:6f:2f:c2:bb:39:f7:01:43:2a:80:ad:09:5a:
df:40:1a:bc:8e:64:86:0d:d9:2c:ef:d9:09:e8:b5:6b:2c:6a:
a5:cf:d8:ca:aa:e9:ab:c3:4f:dd:56:f6:ae:e1:8f:7c:93:e9:
ba:4f:1d:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW/UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMDk1MTIzWhcNMjUwNDMwMDk1MTIzWjAYMRYw
FAYDVQQDEw02N2M1N2I5Zi03Y2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsJb2FZQV2DfMdWLKLPlZuhKKzIgpqJhV/GGK3tFZESv0nCQR6TTA0eGi
cNKYHsBpHhWX/rNlfM/6+BBbmamRAkMDTZ+BnPrJFbXyEPbwznSjQmniX/0/v2cF
dVa24daAtfg+FJOoVx7CyIdAjQgRiLkZqUu7KXICGsogbv/RRBqGRqyoafzL0IjF
qOtDVkfzRe1KrDhV9G+6puerBqnn/uc29W2FQRDCsmvHtbmWv1eCpqAaMEjqxzOR
Gem5uoyYhYQJjKI9gTecIK4nUMa+N+0ImzSCCUQcGIZOjOY+7yOD0a/uhDsQZRFi
HofnXIHcyu66B2egInTmD54vpb0uaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGP3
tXzxekUU6+nqWY8Z4gaHs043MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMzczRjRCQ0Y4MTUxMUVGQUE2RDgwODE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml50MA0GCSqGSIb3DQEB
CwUAA4IBAQCufzDdhkSKpQBZvHz2V4HBc5Sljqm8V60zhna6LvUHx4iPdh0yokqD
apTHo5nTgu11hs9tY5DCzeEa0y5vyCLZX0rK41PWZAwRcwnx8q77kUD6n5Txn+Me
3Zl5zMZCugs5t5vjIMnO5EpHXsLUb3GlAMakf8zpKIL9POGF2XZJFum8GkYhMruD
Z2bQAu4MJzMlgThDO70RZv6xBg0JT5DtFYvOWT8Gh28iYqGm/e/I9rU9rEIBbyhC
ulcAeQFbVFzeUUqkwuwOaxECAm8vwrs59wFDKoCtCVrfQBq8jmSGDdks79kJ6LVr
LGqlz9jKqumrw0/dVvau4Y98k+m6Tx29
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:22 2025 by rpki-client