Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13E8F85AC63011EFA6505253762E951A.roa
File: 13E8F85AC63011EFA6505253762E951A.roa (raw, json)
Hash identifier: zYfP6A+b1r0VVswI0TiUx3rHVXcDnUstoFDJhjdApQE=
Subject key identifier: 2C:DF:00:2E:65:66:41:51:42:F5:CB:8C:75:A9:14:1C:8D:73:99:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13E8F85AC63011EFA6505253762E951A.roa
Signing time: Sun 29 Dec 2024 21:58:47 +0000
ROA not before: Sun 29 Dec 2024 21:58:43 +0000
ROA not after: Sun 12 Dec 2027 21:58:43 +0000
asID: 17561
IP address blocks: 154.217.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77802 (0x12fea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:58:43 2024 GMT
Not After : Dec 12 21:58:43 2027 GMT
Subject: CN=6771c617-1bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:46:86:d5:6c:54:c3:19:4f:e9:14:0f:7b:
e8:0b:9d:a1:ef:12:60:94:79:f0:28:5d:36:1a:e2:
4d:d9:4a:91:57:da:fb:a4:f1:2d:37:da:f8:63:eb:
94:71:63:34:43:8a:0e:68:f0:99:af:05:5a:a9:fb:
03:4f:a6:a3:7b:48:f2:54:f3:52:54:69:e5:59:98:
3a:67:75:4f:d8:94:59:0c:5f:f1:8b:40:53:00:80:
98:a8:cb:6b:00:8b:b6:57:a5:f7:c3:87:1c:92:d3:
d5:80:65:c6:63:c3:ff:e2:44:78:a9:6b:bf:08:42:
a4:94:0b:03:70:ab:01:c2:7b:4b:21:14:b3:63:3c:
95:f2:23:60:ac:c8:fd:a5:b9:a4:14:3a:91:4d:90:
53:ba:b9:1c:94:a6:7f:88:f3:e8:54:07:fa:60:96:
0b:f7:e5:e3:39:71:16:20:f1:77:99:18:5e:84:d5:
87:a7:5e:d7:e5:48:5e:78:cd:74:cf:99:17:06:db:
6f:52:f4:d9:b0:e8:aa:65:96:39:a8:6d:71:db:d1:
69:20:7e:46:f0:73:ef:26:22:f4:75:6d:91:0c:28:
3f:a0:f3:48:dc:bb:b9:63:46:da:86:32:e0:95:1e:
4f:92:bb:47:15:f5:78:39:bb:ce:02:3c:c1:7b:aa:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DF:00:2E:65:66:41:51:42:F5:CB:8C:75:A9:14:1C:8D:73:99:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13E8F85AC63011EFA6505253762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.216.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:9d:68:69:2d:7c:34:6c:ec:60:72:d7:9c:05:ff:f0:d3:02:
2c:b1:ef:c5:a6:b5:1c:17:dc:5e:36:14:bf:00:6f:b7:f7:69:
1c:7c:4f:67:38:a8:cd:75:e1:72:39:98:95:6b:c2:28:53:0a:
9c:a1:0f:c2:2d:c3:d7:0e:82:3c:e3:35:30:3c:0c:4a:a4:17:
99:9f:8c:0a:b4:13:01:f8:ee:2b:6f:ec:db:19:6f:91:26:4a:
23:a3:12:40:f4:28:84:72:54:2e:17:76:c6:fb:2c:65:b1:56:
02:3b:3d:a2:19:eb:11:68:32:b7:0d:ac:50:cb:3d:07:0c:87:
d8:91:9d:98:be:e9:41:6d:87:ea:66:ea:38:23:58:d8:c4:e1:
87:eb:1d:0a:1f:c5:84:09:8e:ac:a5:a4:30:ef:40:0d:89:fc:
51:84:73:a4:62:62:ea:ac:bf:5f:53:d6:87:d2:7e:52:df:cc:
2b:2c:76:04:6b:fc:55:40:c0:f8:95:47:a2:97:0c:ed:45:72:
b8:e0:1e:45:e6:35:6f:5a:b5:1e:c1:87:98:1e:e5:d2:96:2e:
f1:81:7e:fa:5a:16:42:8a:47:8e:a4:31:9f:44:2a:f7:22:94:
3a:40:3f:3a:32:8f:75:b2:1c:0b:7b:da:40:69:dc:07:2d:21:
7d:31:ea:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS/qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MjE1ODQzWhcNMjcxMjEyMjE1ODQzWjAYMRYw
FAYDVQQDEw02NzcxYzYxNy0xYmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArghGhtVsVMMZT+kUD3voC52h7xJglHnwKF02GuJN2UqRV9r7pPEtN9r4
Y+uUcWM0Q4oOaPCZrwVaqfsDT6aje0jyVPNSVGnlWZg6Z3VP2JRZDF/xi0BTAICY
qMtrAIu2V6X3w4ccktPVgGXGY8P/4kR4qWu/CEKklAsDcKsBwntLIRSzYzyV8iNg
rMj9pbmkFDqRTZBTurkclKZ/iPPoVAf6YJYL9+XjOXEWIPF3mRhehNWHp17X5Uhe
eM10z5kXBttvUvTZsOiqZZY5qG1x29FpIH5G8HPvJiL0dW2RDCg/oPNI3Lu5Y0ba
hjLglR5PkrtHFfV4ObvOAjzBe6qJJwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCzf
AC5lZkFRQvXLjHWpFByNc5l5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xM0U4Rjg1QUM2MzAxMUVGQTY1MDUyNTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtnYMA0GCSqGSIb3DQEB
CwUAA4IBAQDXnWhpLXw0bOxgctecBf/w0wIsse/FprUcF9xeNhS/AG+392kcfE9n
OKjNdeFyOZiVa8IoUwqcoQ/CLcPXDoI84zUwPAxKpBeZn4wKtBMB+O4rb+zbGW+R
JkojoxJA9CiEclQuF3bG+yxlsVYCOz2iGesRaDK3DaxQyz0HDIfYkZ2YvulBbYfq
Zuo4I1jYxOGH6x0KH8WECY6spaQw70ANifxRhHOkYmLqrL9fU9aH0n5S38wrLHYE
a/xVQMD4lUeilwztRXK44B5F5jVvWrUewYeYHuXSli7xgX76WhZCikeOpDGfRCr3
IpQ6QD86Mo91shwLe9pAadwHLSF9MepH
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:16:11 2025 by rpki-client