Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A82F696F46611EFBAADC352762E951A.roa
File: 3A82F696F46611EFBAADC352762E951A.roa (raw, json)
Hash identifier: 2P3sNv2DKz31AgSs9UPzvBqEiAbta7hgpgZ14RzYvjQ=
Subject key identifier: 97:02:55:8C:3C:27:3C:2E:9E:3B:13:4C:AC:71:F3:FA:1E:42:29:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016546
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A82F696F46611EFBAADC352762E951A.roa
Signing time: Wed 26 Feb 2025 17:22:18 +0000
ROA not before: Wed 26 Feb 2025 17:22:14 +0000
ROA not after: Sat 19 Feb 2028 17:22:14 +0000
asID: 17561
IP address blocks: 154.197.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91462 (0x16546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 17:22:14 2025 GMT
Not After : Feb 19 17:22:14 2028 GMT
Subject: CN=67bf4dca-b528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:3e:68:cb:a5:40:f9:31:5e:3c:73:5f:82:
67:c9:84:f3:1d:0e:5c:56:e6:52:78:05:a0:04:c8:
03:12:7a:2d:9e:21:18:a1:ba:5c:8b:ee:63:5d:2c:
57:71:8e:35:b3:6d:ff:c8:df:f5:8e:b0:ab:73:9e:
fe:59:98:6b:7c:9e:0e:88:04:f2:02:a9:1c:39:ef:
b8:7a:e4:63:79:4c:66:7e:eb:0d:3a:45:5c:14:f8:
87:38:18:ca:01:c6:50:ac:ff:bc:d2:5b:9e:5a:b4:
b2:da:b1:99:80:5f:62:a1:28:fa:b5:30:2d:5e:18:
56:81:61:67:a6:b6:00:9d:da:66:ff:ba:bb:41:2a:
0c:fd:f5:73:00:ed:79:26:78:d2:d7:8e:3a:2e:0c:
c2:0d:87:b0:5f:10:4e:fe:90:95:35:c2:6b:e7:ee:
a3:12:7d:91:7e:2a:15:a1:7f:ba:86:fe:de:b6:f1:
1f:6d:3b:f6:45:53:24:bc:6c:d7:07:55:12:a6:03:
9e:4c:74:f1:a0:79:eb:b3:e7:f9:9b:d4:06:98:9c:
48:d2:cf:0d:43:70:2d:7a:e1:d5:7b:72:54:d0:53:
cb:74:dc:7a:e9:5f:ea:a4:c9:3e:d0:c3:9a:45:3e:
ee:e3:ed:fc:65:90:ff:3c:b9:62:62:9c:81:d7:c3:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:02:55:8C:3C:27:3C:2E:9E:3B:13:4C:AC:71:F3:FA:1E:42:29:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A82F696F46611EFBAADC352762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.94.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d9:62:96:76:82:64:b4:d6:03:d1:b1:2a:5b:c8:56:07:1e:
4d:d2:52:b9:80:52:45:74:c2:dc:30:87:59:55:d7:c9:90:77:
4b:b7:ba:4c:b7:3a:ae:a7:a4:be:85:6d:e1:71:10:8d:83:83:
0c:e6:29:1a:b4:c0:95:af:e2:4e:e4:c1:4e:d5:d9:d9:d7:91:
e6:6c:b1:37:b2:06:ce:71:17:e4:98:2e:24:a9:3c:df:b7:92:
67:71:da:5c:2b:de:e3:3a:f6:e8:dd:65:2c:7a:1f:8f:8b:f3:
34:cd:93:49:95:43:19:ad:4d:ee:ee:76:66:15:fd:48:c6:9d:
10:ff:de:9f:f8:a9:e7:30:14:c4:76:d1:f4:b4:05:d1:52:48:
58:36:b9:76:59:13:99:ac:c5:64:08:af:e9:49:41:ee:0a:67:
fc:ef:80:ce:c0:51:82:0b:c1:6a:f6:89:bf:8a:21:73:44:9f:
f7:5f:bb:06:db:4c:c7:66:9e:67:e1:eb:23:6b:4c:f3:b0:c6:
f9:ae:1a:bf:50:39:0e:59:8a:c5:8f:f9:09:30:cf:16:d6:c1:
d8:51:8d:b2:56:f0:e6:3a:41:01:0c:c3:9a:b1:03:cc:ad:fc:
bd:4c:46:e1:70:72:e4:28:2a:a4:58:46:fe:7a:96:81:9a:4e:
2e:81:7e:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWVGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTcyMjE0WhcNMjgwMjE5MTcyMjE0WjAYMRYw
FAYDVQQDEw02N2JmNGRjYS1iNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqKU+aMulQPkxXjxzX4JnyYTzHQ5cVuZSeAWgBMgDEnotniEYobpci+5j
XSxXcY41s23/yN/1jrCrc57+WZhrfJ4OiATyAqkcOe+4euRjeUxmfusNOkVcFPiH
OBjKAcZQrP+80lueWrSy2rGZgF9ioSj6tTAtXhhWgWFnprYAndpm/7q7QSoM/fVz
AO15JnjS1446LgzCDYewXxBO/pCVNcJr5+6jEn2RfioVoX+6hv7etvEfbTv2RVMk
vGzXB1USpgOeTHTxoHnrs+f5m9QGmJxI0s8NQ3AteuHVe3JU0FPLdNx66V/qpMk+
0MOaRT7u4+38ZZD/PLliYpyB18NhwQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJcC
VYw8JzwunjsTTKxx8/oeQimUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQTgyRjY5NkY0NjYxMUVGQkFBREMzNTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVeMA0GCSqGSIb3DQEB
CwUAA4IBAQBz2WKWdoJktNYD0bEqW8hWBx5N0lK5gFJFdMLcMIdZVdfJkHdLt7pM
tzqup6S+hW3hcRCNg4MM5ikatMCVr+JO5MFO1dnZ15HmbLE3sgbOcRfkmC4kqTzf
t5JncdpcK97jOvbo3WUseh+Pi/M0zZNJlUMZrU3u7nZmFf1Ixp0Q/96f+KnnMBTE
dtH0tAXRUkhYNrl2WROZrMVkCK/pSUHuCmf874DOwFGCC8Fq9om/iiFzRJ/3X7sG
20zHZp5n4esja0zzsMb5rhq/UDkOWYrFj/kJMM8W1sHYUY2yVvDmOkEBDMOasQPM
rfy9TEbhcHLkKCqkWEb+epaBmk4ugX4M
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:33 2025 by rpki-client