Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DBCFFB2E14811EFB3FD4B60762E951A.roa
File: 4DBCFFB2E14811EFB3FD4B60762E951A.roa (raw, json)
Hash identifier: VzYUyP/RRsyooe1ZXqYISE/DdxrFXu3cwgJczUURxFM=
Subject key identifier: 68:66:38:51:D3:38:E3:4F:07:2C:69:17:90:34:1F:37:D5:98:91:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014F47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DBCFFB2E14811EFB3FD4B60762E951A.roa
Signing time: Sun 02 Feb 2025 09:30:13 +0000
ROA not before: Sun 02 Feb 2025 09:30:09 +0000
ROA not after: Sun 11 May 2025 09:30:09 +0000
asID: 132839
IP address blocks: 154.195.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85831 (0x14f47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 2 09:30:09 2025 GMT
Not After : May 11 09:30:09 2025 GMT
Subject: CN=679f3b25-df17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:e6:d5:ea:b3:1a:5e:06:d1:81:87:10:57:
f5:f7:b3:b1:80:61:3b:5b:9c:7d:eb:27:b7:14:4f:
7b:29:50:e5:0e:53:ba:7d:75:78:a3:15:58:f4:5a:
5f:d5:21:44:46:5a:8e:fb:8f:86:ae:48:ae:91:38:
08:45:0a:1c:64:df:e9:ea:43:3a:1f:3c:66:13:65:
fc:50:cd:e8:ea:b6:f3:d6:f5:2f:48:e6:41:a7:f2:
2a:0d:c7:a7:cb:60:53:7f:30:c0:5d:78:17:40:fd:
b4:62:ef:6d:01:d3:e4:3a:70:a5:a6:df:eb:e7:e6:
ca:1c:79:ee:3b:3b:22:85:99:a0:d9:cc:29:6b:ce:
92:d6:ae:ae:4e:46:67:77:4b:de:e6:15:55:40:45:
d1:ce:8e:59:5d:58:52:45:0e:ce:2d:86:45:ca:b0:
2a:3f:35:8d:6c:8b:13:b2:1a:97:f1:0e:13:0c:b6:
63:8e:9e:14:7c:88:64:9e:ac:26:d4:83:29:8e:c0:
87:0e:b0:ed:cb:9e:40:25:80:27:79:88:59:03:64:
fc:4b:a4:a1:87:7a:39:50:fe:2f:41:89:10:e1:4e:
d6:ea:05:f9:04:40:e0:8c:a2:44:a9:fe:69:9a:2e:
5b:e2:73:f7:36:4d:d6:16:24:fa:2a:ab:5f:a5:d7:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:66:38:51:D3:38:E3:4F:07:2C:69:17:90:34:1F:37:D5:98:91:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DBCFFB2E14811EFB3FD4B60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.224.0/19
Signature Algorithm: sha256WithRSAEncryption
04:f3:1c:98:7a:e0:cd:da:95:a0:a9:76:47:df:00:27:98:12:
7b:1b:f2:b2:b4:f8:0b:d5:30:79:b0:08:d5:51:fd:48:70:4f:
c2:00:e8:7b:39:7f:8e:d4:a5:c4:88:50:32:39:a1:d7:cc:c1:
34:ad:76:37:4d:3e:60:16:46:f3:77:ce:aa:76:b8:13:90:0f:
b8:48:32:44:0b:2c:a1:41:d9:96:6d:cc:bb:fb:02:d3:9d:4e:
b4:d5:f4:ad:98:cc:e7:c9:2f:61:bf:1c:c7:90:0f:65:0d:50:
16:2e:f3:40:13:4b:a1:9f:dd:d8:d4:0a:58:04:83:23:cb:fc:
fc:9d:8f:4d:58:6b:bb:c4:b7:36:34:2e:b7:f2:47:8e:d0:ef:
ad:d2:ae:b0:48:1b:de:22:8e:88:9f:74:45:73:3b:78:15:22:
62:bf:12:94:a3:cf:54:d4:7a:d7:2f:3b:60:f8:af:0d:e4:a6:
40:62:2d:8b:a5:a9:f9:ae:c3:1a:4b:ae:42:3e:ef:3b:1d:09:
20:b7:a4:a7:a8:d3:17:0b:b6:81:43:e3:c3:3e:99:62:0e:67:
2c:60:70:41:80:0c:bb:f0:36:d3:82:0f:06:05:b5:c2:87:31:
89:81:52:28:b1:51:cd:d1:d0:1e:f0:27:ad:73:ca:b5:22:42:
93:0d:24:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU9HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjAyMDkzMDA5WhcNMjUwNTExMDkzMDA5WjAYMRYw
FAYDVQQDEw02NzlmM2IyNS1kZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt7Hm1eqzGl4G0YGHEFf197OxgGE7W5x96ye3FE97KVDlDlO6fXV4oxVY
9Fpf1SFERlqO+4+GrkiukTgIRQocZN/p6kM6HzxmE2X8UM3o6rbz1vUvSOZBp/Iq
Dceny2BTfzDAXXgXQP20Yu9tAdPkOnClpt/r5+bKHHnuOzsihZmg2cwpa86S1q6u
TkZnd0ve5hVVQEXRzo5ZXVhSRQ7OLYZFyrAqPzWNbIsTshqX8Q4TDLZjjp4UfIhk
nqwm1IMpjsCHDrDty55AJYAneYhZA2T8S6Shh3o5UP4vQYkQ4U7W6gX5BEDgjKJE
qf5pmi5b4nP3Nk3WFiT6Kqtfpdd9nwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGhm
OFHTOONPByxpF5A0HzfVmJGYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80REJDRkZCMkUxNDgxMUVGQjNGRDRCNjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsPgMA0GCSqGSIb3DQEB
CwUAA4IBAQAE8xyYeuDN2pWgqXZH3wAnmBJ7G/KytPgL1TB5sAjVUf1IcE/CAOh7
OX+O1KXEiFAyOaHXzME0rXY3TT5gFkbzd86qdrgTkA+4SDJECyyhQdmWbcy7+wLT
nU601fStmMznyS9hvxzHkA9lDVAWLvNAE0uhn93Y1ApYBIMjy/z8nY9NWGu7xLc2
NC638keO0O+t0q6wSBveIo6In3RFczt4FSJivxKUo89U1HrXLztg+K8N5KZAYi2L
pan5rsMaS65CPu87HQkgt6SnqNMXC7aBQ+PDPpliDmcsYHBBgAy78DbTgg8GBbXC
hzGJgVIosVHN0dAe8Cetc8q1IkKTDSRO
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:21 2025 by rpki-client