Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57BF5CB6C37B11EFA5FF4FAB762E951A.roa
File: 57BF5CB6C37B11EFA5FF4FAB762E951A.roa (raw, json)
Hash identifier: tARckPKeJTFPOSS5mnl5jaatuhow6R6ju2qz5q/q5fw=
Subject key identifier: 06:ED:5F:96:8F:8E:09:79:83:4E:8C:66:13:86:CE:C9:6B:65:EF:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012724
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57BF5CB6C37B11EFA5FF4FAB762E951A.roa
Signing time: Thu 26 Dec 2024 11:19:59 +0000
ROA not before: Thu 26 Dec 2024 11:19:55 +0000
ROA not after: Fri 12 Dec 2025 11:19:55 +0000
asID: 984
IP address blocks: 154.94.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75556 (0x12724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:19:55 2024 GMT
Not After : Dec 12 11:19:55 2025 GMT
Subject: CN=676d3bdf-fe88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:b2:51:23:22:ed:9b:ea:ba:32:dd:42:49:
0f:bd:b0:36:a1:7c:f7:46:26:5d:2d:2c:01:ba:12:
e7:6a:1a:f4:2f:96:4b:c2:87:e6:36:35:ad:6e:d8:
e7:2d:38:6a:33:41:5d:6c:2b:09:fa:d2:20:bb:47:
6d:09:46:7a:74:07:0e:bb:ab:ff:62:36:d1:fb:64:
9b:48:68:69:ae:3d:88:d6:1e:42:fb:9f:d6:b7:9f:
bd:a8:ca:43:fc:bf:bf:ef:36:56:23:6c:11:74:21:
e0:7b:f3:05:99:eb:48:91:55:3a:19:a7:49:87:a8:
88:f6:b0:e9:29:2f:72:3b:7f:44:54:98:b3:a4:7c:
75:e3:65:6b:7e:f8:ef:5c:5d:f8:dd:46:4a:ef:a4:
27:9e:d3:62:00:83:3d:e8:4c:7b:5b:92:97:fd:4f:
07:51:d6:fe:21:0a:00:cb:18:b5:35:ad:56:f9:72:
a4:4d:0b:7c:65:a9:8a:38:36:0a:a9:0c:2d:63:ac:
3b:c2:92:2e:4e:4b:10:70:bb:fb:82:71:56:28:af:
de:94:13:3e:6e:76:20:e5:61:32:00:fe:dd:d9:97:
71:06:21:e9:5c:7a:7f:24:9c:dc:7a:2d:44:ce:a1:
45:3c:1c:5b:da:56:45:6e:a5:98:df:8e:fc:a7:4b:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:ED:5F:96:8F:8E:09:79:83:4E:8C:66:13:86:CE:C9:6B:65:EF:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57BF5CB6C37B11EFA5FF4FAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:39:14:21:7c:ac:3d:65:c9:a9:08:24:0a:b0:be:18:48:a3:
5c:35:cb:f0:8f:2c:bd:cc:90:c7:f7:b1:c1:2a:0b:7a:9d:0a:
fc:62:80:e1:3b:d3:89:86:f3:b6:47:38:b7:11:63:8d:46:43:
dc:57:6d:19:b3:81:af:38:c0:f7:ff:a8:ae:06:b6:70:69:68:
d2:21:93:3c:11:65:9e:61:1c:4d:c5:ab:56:f8:6f:a9:0f:e3:
08:7c:6b:01:c9:27:7a:a4:9a:c2:02:9a:5a:12:b8:42:d0:a1:
57:e1:1b:7b:49:a2:c9:cf:c5:b0:95:25:9c:f1:68:c8:a9:f8:
71:54:51:f1:0b:1d:91:24:83:3b:a3:b6:94:80:e7:06:f0:9e:
e5:21:30:5b:f9:ee:ad:cb:3d:7e:e7:c9:a5:c3:b6:34:70:82:
1d:73:af:4a:a1:73:76:1a:a4:43:f5:9a:50:84:4d:83:be:74:
63:e4:69:45:c0:1d:63:bd:e3:01:9c:d2:9d:94:a3:71:18:65:
3e:cc:84:dd:1f:05:52:de:28:d3:ae:47:0f:f1:db:e9:da:36:
9f:1d:a1:68:0f:7b:22:5f:96:79:f8:f3:a9:03:08:02:1a:89:
4b:bc:6e:da:96:ca:6a:27:6b:fa:7a:e0:92:23:0b:5e:4a:8a:
6d:38:7e:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASckMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MTExOTU1WhcNMjUxMjEyMTExOTU1WjAYMRYw
FAYDVQQDEw02NzZkM2JkZi1mZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoZOyUSMi7ZvqujLdQkkPvbA2oXz3RiZdLSwBuhLnahr0L5ZLwofmNjWt
btjnLThqM0FdbCsJ+tIgu0dtCUZ6dAcOu6v/YjbR+2SbSGhprj2I1h5C+5/Wt5+9
qMpD/L+/7zZWI2wRdCHge/MFmetIkVU6GadJh6iI9rDpKS9yO39EVJizpHx142Vr
fvjvXF343UZK76QnntNiAIM96Ex7W5KX/U8HUdb+IQoAyxi1Na1W+XKkTQt8ZamK
ODYKqQwtY6w7wpIuTksQcLv7gnFWKK/elBM+bnYg5WEyAP7d2ZdxBiHpXHp/JJzc
ei1EzqFFPBxb2lZFbqWY3478p0tm9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAbt
X5aPjgl5g06MZhOGzslrZe8YMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81N0JGNUNCNkMzN0IxMUVGQTVGRjRGQUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml6pMA0GCSqGSIb3DQEB
CwUAA4IBAQBuORQhfKw9ZcmpCCQKsL4YSKNcNcvwjyy9zJDH97HBKgt6nQr8YoDh
O9OJhvO2Rzi3EWONRkPcV20Zs4GvOMD3/6iuBrZwaWjSIZM8EWWeYRxNxatW+G+p
D+MIfGsBySd6pJrCAppaErhC0KFX4Rt7SaLJz8WwlSWc8WjIqfhxVFHxCx2RJIM7
o7aUgOcG8J7lITBb+e6tyz1+58mlw7Y0cIIdc69KoXN2GqRD9ZpQhE2DvnRj5GlF
wB1jveMBnNKdlKNxGGU+zITdHwVS3ijTrkcP8dvp2jafHaFoD3siX5Z5+POpAwgC
GolLvG7alspqJ2v6euCSIwteSoptOH6d
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:24 2025 by rpki-client