Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C614C9CC26C11EFBEC54974762E951A.roa
File: 2C614C9CC26C11EFBEC54974762E951A.roa (raw, json)
Hash identifier: FzSSHNLohkY0LQVZagxm8hl8K7lICoJRwWsLr0mPPPo=
Subject key identifier: 98:32:22:FB:0F:50:96:E3:46:E1:D6:EA:59:AB:A9:E2:FD:66:A1:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01242E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C614C9CC26C11EFBEC54974762E951A.roa
Signing time: Wed 25 Dec 2024 02:58:53 +0000
ROA not before: Wed 25 Dec 2024 02:58:49 +0000
ROA not after: Wed 10 Dec 2025 02:58:49 +0000
asID: 984
IP address blocks: 154.211.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74798 (0x1242e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:58:49 2024 GMT
Not After : Dec 10 02:58:49 2025 GMT
Subject: CN=676b74ed-69c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:ff:08:95:e7:12:07:88:46:1f:2b:70:53:
11:42:5e:6d:75:73:a2:22:45:c3:84:a2:51:1a:b5:
f7:7f:53:69:f5:07:ac:dd:15:d4:aa:9b:73:32:5c:
54:b0:7e:06:f6:d0:d4:0f:db:76:e2:80:df:28:e7:
b8:e5:d1:01:78:19:a9:8b:14:48:e5:48:4b:46:c0:
ff:db:b1:5e:63:4d:d5:25:ae:5a:af:27:d6:43:69:
55:4f:8a:fc:ac:c7:d6:36:8a:ce:a3:f4:ba:5f:3c:
7c:1d:c6:d5:79:40:02:fd:25:1c:15:d9:96:f4:20:
75:8e:04:85:a7:41:8f:f0:85:20:aa:93:d1:42:4b:
e8:9e:cf:5f:16:94:3e:0c:c8:7a:84:1b:f1:14:0a:
f1:0d:1c:cd:e8:0c:67:57:69:be:a8:3e:92:81:23:
d3:30:5a:c8:7d:7e:b7:87:23:c1:95:47:63:1e:7f:
ad:a4:88:97:ce:28:36:19:6f:cf:47:12:e5:1e:f7:
d5:aa:c5:ed:24:8a:ea:a4:e2:55:bd:e0:84:d4:be:
fb:33:9b:de:92:be:47:5a:70:4f:55:7c:1b:79:2a:
49:08:b3:7c:81:09:e8:d8:e3:13:ea:a0:d8:ba:ba:
27:fc:a7:0d:0c:e2:ec:d7:92:61:67:3a:c8:2a:f7:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:32:22:FB:0F:50:96:E3:46:E1:D6:EA:59:AB:A9:E2:FD:66:A1:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C614C9CC26C11EFBEC54974762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.163.0/24
Signature Algorithm: sha256WithRSAEncryption
93:44:00:17:10:65:f8:8c:2f:df:05:84:65:c4:4e:35:95:d6:
9d:a2:e9:7f:59:0c:6f:db:ee:e5:3a:0c:1d:cb:65:26:a4:42:
1f:d1:13:a6:f6:a6:3a:02:be:91:14:b8:3c:d9:92:81:7d:3f:
54:33:47:bd:f2:f9:c2:40:e4:77:56:b2:cf:9d:87:a7:f1:e2:
24:f0:43:ad:97:4b:83:21:e5:f3:3b:b7:ac:cd:39:12:5f:33:
ad:5c:4f:c3:30:af:2d:41:4b:29:6c:06:37:01:3f:cc:ce:2d:
fc:39:bf:55:47:61:b3:0b:7f:fa:39:2d:eb:e0:55:8a:15:5a:
48:30:9e:0e:e7:a3:e8:5b:b8:91:32:57:b1:32:c4:5e:cc:20:
29:a1:ae:5f:88:12:6f:87:4b:69:05:16:be:43:6e:54:2c:1c:
37:1d:f0:52:40:fd:47:0f:8e:b9:ff:d5:85:f2:ae:77:34:f3:
48:d0:de:f2:93:b7:19:4f:61:d2:a5:8a:0c:62:ff:02:30:4c:
06:2f:61:ab:12:3f:e7:5f:41:99:91:c3:06:a3:2c:56:a3:67:
93:02:2f:60:ef:a8:88:5e:13:87:1e:7b:8b:c3:6c:c2:ac:88:
fd:2f:1b:d0:f8:ef:84:1f:c7:a2:0a:35:d1:58:9a:7c:fb:70:
08:03:30:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASQuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDI1ODQ5WhcNMjUxMjEwMDI1ODQ5WjAYMRYw
FAYDVQQDEw02NzZiNzRlZC02OWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApWz/CJXnEgeIRh8rcFMRQl5tdXOiIkXDhKJRGrX3f1Np9Qes3RXUqptz
MlxUsH4G9tDUD9t24oDfKOe45dEBeBmpixRI5UhLRsD/27FeY03VJa5aryfWQ2lV
T4r8rMfWNorOo/S6Xzx8HcbVeUAC/SUcFdmW9CB1jgSFp0GP8IUgqpPRQkvons9f
FpQ+DMh6hBvxFArxDRzN6AxnV2m+qD6SgSPTMFrIfX63hyPBlUdjHn+tpIiXzig2
GW/PRxLlHvfVqsXtJIrqpOJVveCE1L77M5vekr5HWnBPVXwbeSpJCLN8gQno2OMT
6qDYuron/KcNDOLs15JhZzrIKveG4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJgy
IvsPUJbjRuHW6lmrqeL9ZqFnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQzYxNEM5Q0MyNkMxMUVGQkVDNTQ5NzQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtOjMA0GCSqGSIb3DQEB
CwUAA4IBAQCTRAAXEGX4jC/fBYRlxE41ldadoul/WQxv2+7lOgwdy2UmpEIf0ROm
9qY6Ar6RFLg82ZKBfT9UM0e98vnCQOR3VrLPnYen8eIk8EOtl0uDIeXzO7eszTkS
XzOtXE/DMK8tQUspbAY3AT/Mzi38Ob9VR2GzC3/6OS3r4FWKFVpIMJ4O56PoW7iR
MlexMsRezCApoa5fiBJvh0tpBRa+Q25ULBw3HfBSQP1HD465/9WF8q53NPNI0N7y
k7cZT2HSpYoMYv8CMEwGL2GrEj/nX0GZkcMGoyxWo2eTAi9g76iIXhOHHnuLw2zC
rIj9LxvQ+O+EH8eiCjXRWJp8+3AIAzDA
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:07:24 2025 by rpki-client