Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/348DAE14CDB711EF8D713F42762E951A.roa
File: 348DAE14CDB711EF8D713F42762E951A.roa (raw, json)
Hash identifier: Y5ZGTC0mP6AuSfMrkKTHmQjWcpbB41ijxXEwG7lufWQ=
Subject key identifier: 95:93:E5:4A:30:95:79:E1:EC:6D:D4:5A:1D:C7:F4:C1:C7:16:D0:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/348DAE14CDB711EF8D713F42762E951A.roa
Signing time: Wed 08 Jan 2025 11:53:42 +0000
ROA not before: Wed 08 Jan 2025 11:53:38 +0000
ROA not after: Tue 16 Dec 2025 11:53:38 +0000
asID: 984
IP address blocks: 154.200.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79552 (0x136c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 11:53:38 2025 GMT
Not After : Dec 16 11:53:38 2025 GMT
Subject: CN=677e6746-718a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:76:14:4e:7f:a3:3c:11:5f:df:a4:7f:c3:
e0:d3:c6:c4:a5:8b:a8:a2:2d:ee:e2:eb:81:ae:34:
1e:25:c8:f7:aa:34:0d:dc:dd:04:fa:b6:7c:e3:22:
75:64:72:e4:4e:fe:fc:a7:8b:3b:95:e2:a1:25:7d:
3f:02:9a:e4:52:ee:1c:d5:44:0e:db:62:64:84:33:
63:69:82:fb:a0:70:7b:f2:8d:71:f6:e1:e9:20:8b:
11:8f:03:e4:b8:2f:6c:83:4c:c1:d7:b5:de:98:46:
44:9a:55:61:57:38:7b:4c:c4:a3:11:ac:6b:99:39:
a6:3f:03:3d:20:45:a2:42:b1:bc:4b:a5:f5:e1:1a:
4a:fd:53:09:be:ec:99:9e:16:cc:77:a3:c0:93:8b:
6f:2d:e4:c2:d3:74:ef:f1:c4:9a:50:23:fb:b1:ed:
2f:27:ca:f4:2d:46:de:55:49:1f:61:4f:b2:9c:40:
18:13:5f:90:ec:f2:1e:53:19:ea:dd:d8:a5:dc:d3:
50:29:32:79:26:27:59:93:81:71:ff:d0:a7:81:36:
0e:49:b5:cf:0e:4d:fa:86:79:66:7c:e4:59:09:a1:
02:f9:28:d3:8d:48:d8:e7:7f:ce:7e:f7:4d:ca:36:
83:fb:ee:dc:20:ff:5c:15:4e:5f:58:0c:38:93:a7:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:E5:4A:30:95:79:E1:EC:6D:D4:5A:1D:C7:F4:C1:C7:16:D0:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/348DAE14CDB711EF8D713F42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.168.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cb:f5:98:a9:7c:ed:68:72:45:e6:a9:a6:34:21:2d:13:d9:
9c:6c:56:ee:b1:0f:1c:bd:7c:31:a3:0b:57:72:2d:3d:e0:22:
d8:07:06:6c:4a:f7:50:33:73:02:ab:0e:07:50:68:a4:a8:c7:
a6:7a:96:a3:e0:ef:a7:ad:c9:cc:75:43:3f:38:2d:db:e7:77:
e0:26:cc:63:81:67:a1:26:27:56:3f:2b:fd:67:c7:20:d1:1e:
32:58:47:cf:df:60:eb:7f:16:a6:73:6f:3c:95:e7:4b:c4:ee:
f1:1e:06:00:a1:e4:d8:18:a4:af:6c:49:ee:d2:d8:5c:80:d5:
30:61:ed:d3:c8:c8:4a:7c:55:93:8e:ff:6c:cb:d7:c3:8d:1c:
97:a0:07:e8:20:02:0b:37:c1:99:49:ab:51:41:c4:51:80:26:
23:e2:ec:26:f0:48:ba:4e:eb:76:cf:9c:30:14:a6:16:06:86:
b9:dd:6a:71:ce:4c:f9:03:78:8e:2d:3e:d7:ba:ce:69:ff:af:
59:fb:53:e3:46:f6:ac:52:00:39:eb:a5:d2:8f:24:8c:6f:4d:
03:47:64:38:d0:ea:a9:ad:d6:59:aa:17:06:15:a5:a4:cd:9b:
0d:7c:bb:33:cd:e2:f5:a0:e7:fc:65:e7:a4:b6:01:da:ac:cc:
78:b3:f6:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATbAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTE1MzM4WhcNMjUxMjE2MTE1MzM4WjAYMRYw
FAYDVQQDEw02NzdlNjc0Ni03MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwFp2FE5/ozwRX9+kf8Pg08bEpYuooi3u4uuBrjQeJcj3qjQN3N0E+rZ8
4yJ1ZHLkTv78p4s7leKhJX0/AprkUu4c1UQO22JkhDNjaYL7oHB78o1x9uHpIIsR
jwPkuC9sg0zB17XemEZEmlVhVzh7TMSjEaxrmTmmPwM9IEWiQrG8S6X14RpK/VMJ
vuyZnhbMd6PAk4tvLeTC03Tv8cSaUCP7se0vJ8r0LUbeVUkfYU+ynEAYE1+Q7PIe
Uxnq3dil3NNQKTJ5JidZk4Fx/9CngTYOSbXPDk36hnlmfORZCaEC+SjTjUjY53/O
fvdNyjaD++7cIP9cFU5fWAw4k6faMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJWT
5UowlXnh7G3UWh3H9MHHFtBaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNDhEQUUxNENEQjcxMUVGOEQ3MTNGNDI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsioMA0GCSqGSIb3DQEB
CwUAA4IBAQBZy/WYqXztaHJF5qmmNCEtE9mcbFbusQ8cvXwxowtXci094CLYBwZs
SvdQM3MCqw4HUGikqMemepaj4O+nrcnMdUM/OC3b53fgJsxjgWehJidWPyv9Z8cg
0R4yWEfP32Drfxamc288ledLxO7xHgYAoeTYGKSvbEnu0thcgNUwYe3TyMhKfFWT
jv9sy9fDjRyXoAfoIAILN8GZSatRQcRRgCYj4uwm8Ei6Tut2z5wwFKYWBoa53Wpx
zkz5A3iOLT7Xus5p/69Z+1PjRvasUgA566XSjySMb00DR2Q40OqprdZZqhcGFaWk
zZsNfLszzeL1oOf8ZeektgHarMx4s/a5
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:37 2025 by rpki-client