Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20DCB270C27211EF947C239C762E951A.roa
File: 20DCB270C27211EF947C239C762E951A.roa (raw, json)
Hash identifier: CK564kJ3iXt7LUr0KjKv86cCJBLvrA6e9mO9IfX+zPc=
Subject key identifier: 89:27:CD:F5:65:13:28:4F:5B:8C:B6:D2:F2:E3:96:FB:0E:DC:2D:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012470
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20DCB270C27211EF947C239C762E951A.roa
Signing time: Wed 25 Dec 2024 03:41:30 +0000
ROA not before: Wed 25 Dec 2024 03:41:27 +0000
ROA not after: Wed 10 Dec 2025 03:41:27 +0000
asID: 984
IP address blocks: 154.211.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74864 (0x12470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:41:27 2024 GMT
Not After : Dec 10 03:41:27 2025 GMT
Subject: CN=676b7eea-59ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:7a:96:95:cf:1f:42:c8:d8:8e:f8:da:ee:
e6:25:03:ed:4d:47:01:44:15:32:7a:31:7c:a2:24:
3c:db:62:3d:13:3f:46:51:c8:18:c0:38:61:04:07:
1f:83:de:8e:4f:f9:75:f5:98:8a:f9:3c:24:97:4a:
a2:37:09:6e:f8:b6:b3:f0:0a:27:2f:6f:35:56:b3:
f6:d0:45:2a:cd:10:e9:47:52:9a:6f:b0:c4:e1:6f:
f9:ae:d6:df:d4:35:aa:55:9d:c0:39:d5:28:d8:1a:
59:e1:b1:b4:35:f9:d0:60:3b:88:d0:dc:68:22:58:
fb:69:80:57:1b:2f:f2:b9:e5:52:e7:da:f7:49:18:
04:55:56:c2:49:78:46:f3:36:6d:8c:6e:47:91:17:
ae:3c:8e:54:9e:41:ad:89:c9:a6:bf:ca:72:cd:e5:
2a:d4:fc:07:b4:38:32:f4:cc:df:d5:06:61:d1:85:
6f:18:04:20:65:df:e8:00:9e:da:87:f9:fc:e4:27:
6c:a9:e9:80:30:bb:40:d9:d9:04:bd:a9:cb:24:56:
f4:e2:7e:2e:b9:43:bd:25:04:49:a0:b0:c5:8a:cc:
27:0b:01:5f:30:6e:cf:ce:38:d3:ed:5e:10:d3:e9:
0d:a1:81:b6:eb:cc:5a:6d:d5:cf:d8:93:e9:6a:35:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:27:CD:F5:65:13:28:4F:5B:8C:B6:D2:F2:E3:96:FB:0E:DC:2D:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20DCB270C27211EF947C239C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.207.0/24
Signature Algorithm: sha256WithRSAEncryption
67:73:12:f8:45:2d:e6:2e:06:8b:ba:80:64:ea:6c:7b:60:c9:
5b:45:a7:1f:f7:ec:a7:32:c3:60:81:4f:ce:13:da:b7:f3:23:
cf:79:ea:c7:fc:77:bf:3f:97:33:f4:35:61:0a:13:e7:70:9f:
80:51:1d:52:cc:ef:ee:8e:21:73:b5:9f:02:6b:7e:48:1c:5c:
49:ae:09:bb:64:96:fd:4d:c8:e0:18:04:49:f7:2e:e7:0f:8e:
d7:43:ee:c4:a7:58:a1:76:cd:8f:3d:f0:2b:31:73:51:a3:11:
5f:8c:48:78:cc:45:61:88:13:4c:c7:d6:da:82:73:fe:2b:8f:
0c:59:2f:2c:c7:d4:c2:80:7d:28:36:1c:7d:5b:05:75:4b:62:
a1:45:c9:bf:20:6f:75:56:97:51:14:b7:d9:5a:ce:e2:d6:d3:
76:79:07:37:ad:09:69:64:e8:36:16:2e:2f:42:90:ba:0c:5d:
4b:da:b8:fe:4f:42:94:79:f7:f6:6d:52:ec:a9:e5:55:39:e2:
1b:d2:a5:3e:ab:f2:fa:2a:40:44:a3:25:7b:b3:92:14:0f:af:
70:d6:e8:33:0f:d7:b5:4f:b1:6d:b5:82:fc:78:54:c6:db:58:
a2:5c:1a:e8:a4:ff:14:eb:f2:27:ed:8c:5b:c8:e6:8f:c6:42:
a1:d7:f9:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASRwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDM0MTI3WhcNMjUxMjEwMDM0MTI3WjAYMRYw
FAYDVQQDEw02NzZiN2VlYS01OWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8j16lpXPH0LI2I742u7mJQPtTUcBRBUyejF8oiQ822I9Ez9GUcgYwDhh
BAcfg96OT/l19ZiK+Twkl0qiNwlu+Laz8AonL281VrP20EUqzRDpR1Kab7DE4W/5
rtbf1DWqVZ3AOdUo2BpZ4bG0NfnQYDuI0NxoIlj7aYBXGy/yueVS59r3SRgEVVbC
SXhG8zZtjG5HkReuPI5UnkGticmmv8pyzeUq1PwHtDgy9Mzf1QZh0YVvGAQgZd/o
AJ7ah/n85CdsqemAMLtA2dkEvanLJFb04n4uuUO9JQRJoLDFiswnCwFfMG7PzjjT
7V4Q0+kNoYG268xabdXP2JPpajULMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIkn
zfVlEyhPW4y20vLjlvsO3C3tMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMERDQjI3MEMyNzIxMUVGOTQ3QzIzOUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtPPMA0GCSqGSIb3DQEB
CwUAA4IBAQBncxL4RS3mLgaLuoBk6mx7YMlbRacf9+ynMsNggU/OE9q38yPPeerH
/He/P5cz9DVhChPncJ+AUR1SzO/ujiFztZ8Ca35IHFxJrgm7ZJb9TcjgGARJ9y7n
D47XQ+7Ep1ihds2PPfArMXNRoxFfjEh4zEVhiBNMx9bagnP+K48MWS8sx9TCgH0o
Nhx9WwV1S2KhRcm/IG91VpdRFLfZWs7i1tN2eQc3rQlpZOg2Fi4vQpC6DF1L2rj+
T0KUeff2bVLsqeVVOeIb0qU+q/L6KkBEoyV7s5IUD69w1ugzD9e1T7FttYL8eFTG
21iiXBropP8U6/In7YxbyOaPxkKh1/ln
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:11:21 2025 by rpki-client