Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C2FC7F4E31111EF87391D5B762E951A.roa
File: 4C2FC7F4E31111EF87391D5B762E951A.roa (raw, json)
Hash identifier: HwCD+uz2nCRZFTkPdR4qVPqxqfTWqqo775DY9tinCHk=
Subject key identifier: 59:75:C5:DD:97:7B:19:4C:3A:DB:07:A2:71:AC:28:B0:84:51:55:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015109
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C2FC7F4E31111EF87391D5B762E951A.roa
Signing time: Tue 04 Feb 2025 16:01:31 +0000
ROA not before: Tue 04 Feb 2025 16:01:26 +0000
ROA not after: Wed 30 Apr 2025 16:01:26 +0000
asID: 18229
IP address blocks: 154.210.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86281 (0x15109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 16:01:26 2025 GMT
Not After : Apr 30 16:01:26 2025 GMT
Subject: CN=67a239da-59d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:97:fb:de:1b:e7:30:37:b1:6a:0d:52:9d:
1f:84:8a:a4:88:d2:8d:6e:2a:d0:e9:03:08:37:90:
f1:6a:38:12:83:ae:81:39:1f:94:ba:1e:21:d1:65:
01:ac:39:4c:43:ba:e1:47:b0:85:02:a9:8e:e4:43:
78:65:0d:3d:9f:68:3e:b8:75:a0:69:51:87:29:cb:
ff:85:5c:3e:5b:43:c2:8d:92:0b:98:50:c0:91:f9:
d9:b5:ac:a9:27:dc:81:bf:02:fd:9d:3f:e1:2c:c1:
7b:b5:13:63:21:1c:f2:ed:59:0c:83:89:af:41:17:
b5:6e:75:e3:d9:ce:11:fd:fb:97:47:76:ee:fe:17:
b7:68:cf:03:88:01:f8:17:44:bf:24:6e:41:30:7f:
c6:40:24:f6:c2:5c:6a:c2:ca:c7:28:ac:76:d6:1a:
21:c7:4a:e6:16:2f:ec:c9:6d:6e:b6:d8:e3:e5:bd:
d9:98:0a:44:c9:98:d0:4d:b0:76:7e:af:dd:b5:bd:
77:75:58:85:93:7a:37:51:9d:7c:92:4f:39:98:fc:
d5:d9:62:00:44:b6:09:9f:ff:f4:3f:f3:d8:58:99:
9b:58:c8:86:8a:3f:1a:45:be:59:5a:e0:ce:b3:28:
35:91:4e:57:03:8e:a6:0d:3a:73:16:41:8e:8a:05:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:75:C5:DD:97:7B:19:4C:3A:DB:07:A2:71:AC:28:B0:84:51:55:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C2FC7F4E31111EF87391D5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.130.0/24
Signature Algorithm: sha256WithRSAEncryption
04:52:75:d1:ca:dc:7c:da:16:02:9c:4b:4e:d2:99:65:d9:ce:
b8:6c:b7:ca:b4:ec:93:08:4c:8a:17:14:27:cc:ab:bc:c3:14:
1c:5b:45:12:02:5e:3b:88:24:1f:ac:ec:64:b0:23:5f:7a:4c:
51:1a:da:2f:3b:16:99:27:d2:29:63:0a:b4:fe:1c:d9:0e:3e:
37:24:3e:e1:d3:31:51:b2:ae:22:52:91:a1:5e:5c:c9:2d:30:
c7:55:42:13:1d:d0:e5:01:e8:db:c7:4e:6b:5f:0e:3e:cc:c1:
52:4c:d8:a2:0d:1d:44:ce:ac:c4:68:1f:47:c8:92:17:14:e6:
ad:ef:25:6c:49:30:4d:7e:52:75:6a:58:80:44:41:21:a6:11:
ee:b9:2a:6d:46:00:9a:af:f4:a4:65:f9:64:f7:b0:d4:74:92:
e0:47:ed:37:60:f0:2a:73:a5:7b:57:7a:32:90:a0:31:8c:a6:
ad:09:e1:83:12:64:d0:41:d6:23:ed:75:fe:45:09:78:5c:4d:
ca:8b:63:3c:07:32:3c:3e:f7:b3:f6:aa:25:fb:12:49:e8:17:
09:99:b9:f2:2b:1f:1a:f1:ca:25:14:43:47:d4:34:b5:6c:96:
79:85:0b:52:6a:89:31:fc:c6:7a:23:0a:b2:1a:b1:cb:e5:81:
bc:87:36:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVEJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA0MTYwMTI2WhcNMjUwNDMwMTYwMTI2WjAYMRYw
FAYDVQQDEw02N2EyMzlkYS01OWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz62X+94b5zA3sWoNUp0fhIqkiNKNbirQ6QMIN5DxajgSg66BOR+Uuh4h
0WUBrDlMQ7rhR7CFAqmO5EN4ZQ09n2g+uHWgaVGHKcv/hVw+W0PCjZILmFDAkfnZ
taypJ9yBvwL9nT/hLMF7tRNjIRzy7VkMg4mvQRe1bnXj2c4R/fuXR3bu/he3aM8D
iAH4F0S/JG5BMH/GQCT2wlxqwsrHKKx21hohx0rmFi/syW1uttjj5b3ZmApEyZjQ
TbB2fq/dtb13dViFk3o3UZ18kk85mPzV2WIARLYJn//0P/PYWJmbWMiGij8aRb5Z
WuDOsyg1kU5XA46mDTpzFkGOigVW8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFl1
xd2XexlMOtsHonGsKLCEUVXqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QzJGQzdGNEUzMTExMUVGODczOTFENUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKCMA0GCSqGSIb3DQEB
CwUAA4IBAQAEUnXRytx82hYCnEtO0pll2c64bLfKtOyTCEyKFxQnzKu8wxQcW0US
Al47iCQfrOxksCNfekxRGtovOxaZJ9IpYwq0/hzZDj43JD7h0zFRsq4iUpGhXlzJ
LTDHVUITHdDlAejbx05rXw4+zMFSTNiiDR1EzqzEaB9HyJIXFOat7yVsSTBNflJ1
aliAREEhphHuuSptRgCar/SkZflk97DUdJLgR+03YPAqc6V7V3oykKAxjKatCeGD
EmTQQdYj7XX+RQl4XE3Ki2M8BzI8Pvez9qol+xJJ6BcJmbnyKx8a8colFENH1DS1
bJZ5hQtSaokx/MZ6IwqyGrHL5YG8hzZ3
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:36 2025 by rpki-client