Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A8DC0EEBB7711EFAFC39A91762E951A.roa
File: 3A8DC0EEBB7711EFAFC39A91762E951A.roa (raw, json)
Hash identifier: QNGaQboMd2zb1mB5nJMFXQz+OeiLebz71uVv1nwMQgI=
Subject key identifier: BF:AC:74:2B:DB:0D:E6:45:DC:F9:CA:7D:C6:ED:56:44:D6:39:4E:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A8DC0EEBB7711EFAFC39A91762E951A.roa
Signing time: Mon 16 Dec 2024 06:30:23 +0000
ROA not before: Mon 16 Dec 2024 06:30:19 +0000
ROA not after: Wed 24 Dec 2025 06:30:19 +0000
asID: 137184
IP address blocks: 154.198.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72582 (0x11b86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 16 06:30:19 2024 GMT
Not After : Dec 24 06:30:19 2025 GMT
Subject: CN=675fc8ff-d5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:e3:f7:f9:09:f0:c2:65:11:54:85:a0:35:
ab:87:01:df:4a:b4:7b:1f:f3:ce:e8:da:00:36:bc:
11:c8:7d:0a:9c:77:26:e4:81:97:8e:de:9c:b4:7f:
06:43:99:e2:d6:ab:08:bb:67:7d:51:a9:c4:bb:78:
0d:c3:1f:b3:9f:13:5a:5d:02:90:16:3c:bd:33:0f:
65:d8:56:09:fe:66:0f:a7:04:24:00:4b:41:81:93:
22:89:a3:53:4c:aa:b5:1c:7e:c7:7a:6d:31:4b:ef:
53:61:e4:7b:56:d2:ee:f5:84:68:f6:e3:01:c6:d6:
b2:3c:89:b8:50:a8:40:2d:97:49:72:0a:18:cf:8a:
a7:3a:9d:e4:a9:b3:ce:3b:9a:22:bc:1f:80:c1:13:
71:bd:67:c9:3f:0e:f0:c6:2a:9e:ef:05:da:e2:ab:
11:b5:6e:77:ee:0f:ce:be:de:1b:3a:ab:32:a9:00:
b2:f7:5d:a1:f8:bb:14:b6:80:c3:37:e9:dd:ac:b5:
3d:51:a4:12:a0:53:85:13:83:bc:11:d3:3e:d1:9f:
a7:71:4e:22:7a:35:1d:42:11:cd:c0:ab:63:30:41:
ef:31:c4:9d:c0:0d:f1:0d:a4:85:f7:70:48:f1:52:
0f:a3:55:b9:bf:c2:b7:e3:9a:f1:3a:a4:9f:bf:68:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AC:74:2B:DB:0D:E6:45:DC:F9:CA:7D:C6:ED:56:44:D6:39:4E:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A8DC0EEBB7711EFAFC39A91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.6.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:e1:8a:6f:41:c2:ab:45:fd:e0:84:b6:44:26:be:0b:de:92:
30:a8:bc:bb:c0:8d:19:2e:28:a3:90:00:aa:5f:92:34:50:7f:
06:80:c4:2e:28:1f:4f:6f:2a:77:25:3b:d1:24:9e:39:bf:13:
96:1a:a7:08:69:ae:2a:0d:f0:9d:1c:fe:30:9a:51:cd:96:6a:
af:17:fc:d6:7d:70:ff:46:95:47:57:de:76:d3:c4:00:08:b7:
73:a6:42:99:ca:91:b6:28:95:01:24:42:c1:d0:c0:02:f8:e1:
d4:b6:23:8d:01:ac:f1:68:ff:c1:73:ca:d6:66:23:6e:1f:fe:
af:a9:bb:b4:d4:93:4a:cf:dc:2c:c1:45:0a:5c:09:b0:ea:c0:
b8:cb:d7:68:d4:8e:85:f4:bc:ad:89:e5:2f:8c:73:e7:66:35:
ca:04:85:25:c9:ee:9c:8f:10:4b:5a:97:d0:a3:b8:2a:0d:95:
d2:48:37:47:cd:ac:02:18:91:4c:5e:73:2a:33:1f:41:da:8d:
88:a0:ad:a9:de:7b:56:af:b7:25:9e:77:e0:e7:22:28:03:b6:
c8:3f:56:00:d8:49:77:06:55:08:e6:27:f5:1f:e5:06:72:9c:
f3:c4:37:59:0c:53:b3:db:28:e3:41:44:7f:8b:25:f7:76:3e:
ab:28:95:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARuGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjE2MDYzMDE5WhcNMjUxMjI0MDYzMDE5WjAYMRYw
FAYDVQQDEw02NzVmYzhmZi1kNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw+Hj9/kJ8MJlEVSFoDWrhwHfSrR7H/PO6NoANrwRyH0KnHcm5IGXjt6c
tH8GQ5ni1qsIu2d9UanEu3gNwx+znxNaXQKQFjy9Mw9l2FYJ/mYPpwQkAEtBgZMi
iaNTTKq1HH7Hem0xS+9TYeR7VtLu9YRo9uMBxtayPIm4UKhALZdJcgoYz4qnOp3k
qbPOO5oivB+AwRNxvWfJPw7wxiqe7wXa4qsRtW537g/Ovt4bOqsyqQCy912h+LsU
toDDN+ndrLU9UaQSoFOFE4O8EdM+0Z+ncU4iejUdQhHNwKtjMEHvMcSdwA3xDaSF
93BI8VIPo1W5v8K345rxOqSfv2irIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL+s
dCvbDeZF3PnKfcbtVkTWOU68MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQThEQzBFRUJCNzcxMUVGQUZDMzlBOTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsYGMA0GCSqGSIb3DQEB
CwUAA4IBAQAe4YpvQcKrRf3ghLZEJr4L3pIwqLy7wI0ZLiijkACqX5I0UH8GgMQu
KB9Pbyp3JTvRJJ45vxOWGqcIaa4qDfCdHP4wmlHNlmqvF/zWfXD/RpVHV95208QA
CLdzpkKZypG2KJUBJELB0MAC+OHUtiONAazxaP/Bc8rWZiNuH/6vqbu01JNKz9ws
wUUKXAmw6sC4y9do1I6F9LytieUvjHPnZjXKBIUlye6cjxBLWpfQo7gqDZXSSDdH
zawCGJFMXnMqMx9B2o2IoK2p3ntWr7clnnfg5yIoA7bIP1YA2El3BlUI5if1H+UG
cpzzxDdZDFOz2yjjQUR/iyX3dj6rKJU3
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:29 2025 by rpki-client