Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3844A9AEC93E11EF8C23CF45762E951A.roa
File: 3844A9AEC93E11EF8C23CF45762E951A.roa (raw, json)
Hash identifier: tT5AMHhCnX6yXDOIHaw0e6DHJhFFR2dPvRUtmgT0UIc=
Subject key identifier: C9:1D:C0:C6:67:8B:E7:55:D0:20:A7:61:C4:23:53:47:F8:93:71:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013413
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3844A9AEC93E11EF8C23CF45762E951A.roa
Signing time: Thu 02 Jan 2025 19:17:34 +0000
ROA not before: Thu 02 Jan 2025 19:17:30 +0000
ROA not after: Mon 13 Dec 2027 19:17:30 +0000
asID: 17561
IP address blocks: 154.223.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78867 (0x13413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:17:30 2025 GMT
Not After : Dec 13 19:17:30 2027 GMT
Subject: CN=6776e64e-57f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:8b:f1:53:13:cb:f5:a1:85:26:5a:19:e9:
96:f6:12:b7:7c:5a:64:99:aa:bc:e1:9a:c9:e0:e2:
a9:63:46:58:50:56:bb:32:14:e0:26:01:0a:02:92:
27:59:cc:88:92:73:b4:71:b1:9f:b7:63:b5:8b:89:
98:c8:df:54:27:61:6e:0e:b9:99:bc:05:a2:36:01:
ab:54:d9:ec:fe:af:24:11:89:54:da:ce:30:9d:85:
77:ec:b7:89:e3:db:c2:89:be:9a:d7:21:ec:45:fd:
6e:b6:25:7a:46:e6:1b:fe:6b:ac:30:86:35:d4:bc:
bb:aa:f6:92:39:cf:13:59:57:87:1b:f5:f7:9f:2b:
b8:4f:2a:ca:f0:09:75:ff:65:ba:4c:11:1d:48:09:
3c:66:f8:01:e6:ad:c2:eb:47:68:62:1a:21:38:ea:
c2:24:3e:30:5b:56:f0:11:39:4f:03:30:48:ad:8d:
ab:a1:61:9e:89:e6:54:70:1d:51:c1:13:3a:a6:3b:
0a:6c:4c:4e:c7:90:c5:99:c7:f1:e8:d9:07:78:cb:
08:81:ec:40:46:94:4c:71:55:3c:5f:b1:f1:b3:97:
47:e8:3d:13:50:53:aa:38:3e:13:3f:a9:4d:c7:28:
e5:4f:81:0c:23:94:39:dc:be:17:b4:35:4d:2b:33:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1D:C0:C6:67:8B:E7:55:D0:20:A7:61:C4:23:53:47:F8:93:71:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3844A9AEC93E11EF8C23CF45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.237.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:0f:86:bc:ac:c4:82:30:7b:b0:64:66:f2:45:85:35:d0:9f:
85:86:f6:a7:19:12:f4:29:28:1e:05:3c:f5:0a:6a:68:17:45:
9d:bb:f1:b0:b8:ce:80:80:1e:2d:65:cc:78:b2:4e:47:b4:d1:
86:c5:ac:7d:95:d9:3d:d3:94:6d:2e:2c:fe:42:29:9b:d8:b2:
ba:70:be:d1:bc:4d:97:d2:cb:e8:14:0f:b6:a4:09:42:78:60:
35:46:d1:47:41:11:0e:23:f4:80:2a:25:8b:ca:fa:07:aa:34:
9f:55:7b:9c:16:b3:0f:40:91:c6:b9:dd:84:ab:dc:bd:4a:ae:
10:68:cb:56:9d:1f:a1:cb:82:82:62:e9:85:44:8e:c6:03:72:
0b:6d:50:a3:22:f1:27:0f:92:c9:dd:f4:17:d7:71:46:e0:fc:
1c:78:11:72:16:42:88:67:3a:f8:fb:fc:44:71:26:88:62:af:
7a:60:3a:e8:ed:12:c8:19:e6:42:fa:6f:2b:cb:50:a4:d6:b5:
4e:4e:e1:77:a9:32:90:8c:86:c6:cd:4e:3a:3e:73:20:fc:14:
28:20:83:c7:a7:95:55:24:7f:02:0c:41:92:0f:5b:7d:b0:13:
16:e3:49:31:18:aa:12:52:ea:dc:24:f4:33:a2:4f:70:0c:cd:
2b:cc:1d:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATQTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTkxNzMwWhcNMjcxMjEzMTkxNzMwWjAYMRYw
FAYDVQQDEw02Nzc2ZTY0ZS01N2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAohCL8VMTy/WhhSZaGemW9hK3fFpkmaq84ZrJ4OKpY0ZYUFa7MhTgJgEK
ApInWcyIknO0cbGft2O1i4mYyN9UJ2FuDrmZvAWiNgGrVNns/q8kEYlU2s4wnYV3
7LeJ49vCib6a1yHsRf1utiV6RuYb/musMIY11Ly7qvaSOc8TWVeHG/X3nyu4TyrK
8Al1/2W6TBEdSAk8ZvgB5q3C60doYhohOOrCJD4wW1bwETlPAzBIrY2roWGeieZU
cB1RwRM6pjsKbExOx5DFmcfx6NkHeMsIgexARpRMcVU8X7Hxs5dH6D0TUFOqOD4T
P6lNxyjlT4EMI5Q53L4XtDVNKzMXdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMkd
wMZni+dV0CCnYcQjU0f4k3EJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zODQ0QTlBRUM5M0UxMUVGOEMyM0NGNDU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt/tMA0GCSqGSIb3DQEB
CwUAA4IBAQDHD4a8rMSCMHuwZGbyRYU10J+FhvanGRL0KSgeBTz1CmpoF0Wdu/Gw
uM6AgB4tZcx4sk5HtNGGxax9ldk905RtLiz+Qimb2LK6cL7RvE2X0svoFA+2pAlC
eGA1RtFHQREOI/SAKiWLyvoHqjSfVXucFrMPQJHGud2Eq9y9Sq4QaMtWnR+hy4KC
YumFRI7GA3ILbVCjIvEnD5LJ3fQX13FG4PwceBFyFkKIZzr4+/xEcSaIYq96YDro
7RLIGeZC+m8ry1Ck1rVOTuF3qTKQjIbGzU46PnMg/BQoIIPHp5VVJH8CDEGSD1t9
sBMW40kxGKoSUurcJPQzok9wDM0rzB31
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:26:37 2025 by rpki-client