Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/588D8B5CC90911EF92AAB277762E951A.roa
File: 588D8B5CC90911EF92AAB277762E951A.roa (raw, json)
Hash identifier: U0eShbBjo5Nu8O749VaNJIr0b2YqqKtnYutoaD+yzpA=
Subject key identifier: 8F:92:8E:E5:01:FC:22:6D:21:79:75:61:44:5F:3B:1D:09:C6:04:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013285
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/588D8B5CC90911EF92AAB277762E951A.roa
Signing time: Thu 02 Jan 2025 12:59:05 +0000
ROA not before: Thu 02 Jan 2025 12:59:01 +0000
ROA not after: Sat 13 Dec 2025 12:59:01 +0000
asID: 984
IP address blocks: 154.221.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78469 (0x13285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 12:59:01 2025 GMT
Not After : Dec 13 12:59:01 2025 GMT
Subject: CN=67768d99-12db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:ff:03:e1:ab:cb:2c:b2:54:71:e6:5c:96:
9d:ed:e6:43:0a:f6:0c:ce:62:05:a0:c7:7e:ff:b0:
00:8d:7f:93:b8:98:22:2b:a5:44:e3:13:14:11:94:
98:dd:94:d1:f4:f4:b3:a3:14:5e:48:ab:a7:b4:6d:
c0:7f:77:05:e1:10:3c:27:af:7e:88:60:f4:cf:23:
b5:cf:d9:b0:31:28:e8:5d:87:82:22:e6:c1:44:87:
d4:ea:da:0e:db:5d:33:de:c8:d9:17:7e:9f:c2:e7:
6e:1b:cf:ed:a2:52:ee:fa:21:ad:b7:66:40:35:b7:
2c:df:af:be:63:7e:72:f4:90:a0:51:6f:d4:35:52:
b7:49:bd:1c:5a:34:3f:7f:8c:bb:c1:2b:65:c1:d9:
d0:de:c3:0d:7e:3d:91:77:36:5d:35:44:db:ef:f7:
1b:8d:b6:74:a6:24:85:4a:3a:2f:6e:52:ef:fd:f8:
e8:b5:1c:74:da:45:4b:6a:ed:a0:be:2c:7e:fb:77:
57:8c:ef:e2:c9:61:3e:4e:40:05:88:60:69:93:b9:
5f:47:c0:41:57:ec:bc:97:ea:a2:fa:83:ad:d1:92:
33:9c:27:d7:01:70:38:af:86:54:af:fd:7a:d2:ff:
dc:85:76:33:fd:7b:45:cd:87:07:8c:2d:8c:a0:d6:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:8E:E5:01:FC:22:6D:21:79:75:61:44:5F:3B:1D:09:C6:04:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/588D8B5CC90911EF92AAB277762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.207.0/24
Signature Algorithm: sha256WithRSAEncryption
34:69:3d:61:72:02:12:57:46:50:ae:8b:34:56:69:8f:64:d6:
e0:f1:fd:59:bf:8b:18:e5:87:98:61:d7:f8:a3:d3:40:cb:46:
00:5c:55:d1:37:c3:63:ab:4c:68:61:21:1e:c6:fb:ba:57:f9:
0d:5e:87:82:86:f0:08:c0:6f:f6:e4:ed:d0:c7:a6:6d:8b:ff:
c9:62:f3:5b:c7:aa:b6:a2:4a:77:12:59:81:07:13:47:fe:dd:
23:35:09:e7:12:8c:33:76:02:bc:70:0c:bf:d1:b1:35:e2:c4:
b9:f3:28:d6:69:1c:ba:26:e8:02:dd:0a:b3:4e:76:c1:a7:1c:
96:b8:aa:1c:ec:ad:46:ed:88:7a:ac:30:a8:38:51:bf:f7:21:
6d:d5:bd:be:47:70:6b:66:31:6d:64:ba:b8:5b:0f:1e:4a:2e:
3c:99:51:93:50:6b:fc:1a:d2:c7:48:5f:ba:24:0c:e6:35:b9:
23:25:7a:1d:18:c8:5a:21:7b:23:30:21:51:00:59:e6:9f:4d:
9e:0d:4b:8b:63:47:72:34:39:71:e8:a1:3c:8e:97:05:9e:fb:
08:c7:ff:39:f6:de:67:bf:fc:da:d9:69:fa:65:6b:b2:68:48:
d9:fc:03:05:4b:b6:13:f8:0f:1c:14:88:28:8a:48:65:d3:d2:
b3:c2:09:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATKFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTI1OTAxWhcNMjUxMjEzMTI1OTAxWjAYMRYw
FAYDVQQDEw02Nzc2OGQ5OS0xMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0MT/A+GryyyyVHHmXJad7eZDCvYMzmIFoMd+/7AAjX+TuJgiK6VE4xMU
EZSY3ZTR9PSzoxReSKuntG3Af3cF4RA8J69+iGD0zyO1z9mwMSjoXYeCIubBRIfU
6toO210z3sjZF36fwuduG8/tolLu+iGtt2ZANbcs36++Y35y9JCgUW/UNVK3Sb0c
WjQ/f4y7wStlwdnQ3sMNfj2RdzZdNUTb7/cbjbZ0piSFSjovblLv/fjotRx02kVL
au2gvix++3dXjO/iyWE+TkAFiGBpk7lfR8BBV+y8l+qi+oOt0ZIznCfXAXA4r4ZU
r/160v/chXYz/XtFzYcHjC2MoNYzywIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI+S
juUB/CJtIXl1YURfOx0JxgR/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81ODhEOEI1Q0M5MDkxMUVGOTJBQUIyNzc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3PMA0GCSqGSIb3DQEB
CwUAA4IBAQA0aT1hcgISV0ZQros0VmmPZNbg8f1Zv4sY5YeYYdf4o9NAy0YAXFXR
N8Njq0xoYSEexvu6V/kNXoeChvAIwG/25O3Qx6Zti//JYvNbx6q2okp3ElmBBxNH
/t0jNQnnEowzdgK8cAy/0bE14sS58yjWaRy6JugC3QqzTnbBpxyWuKoc7K1G7Yh6
rDCoOFG/9yFt1b2+R3BrZjFtZLq4Ww8eSi48mVGTUGv8GtLHSF+6JAzmNbkjJXod
GMhaIXsjMCFRAFnmn02eDUuLY0dyNDlx6KE8jpcFnvsIx/859t5nv/za2Wn6ZWuy
aEjZ/AMFS7YT+A8cFIgoikhl09KzwgmM
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:48 2025 by rpki-client