Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E1A363CC61711EFB609E3B6762E951A.roa
File: 5E1A363CC61711EFB609E3B6762E951A.roa (raw, json)
Hash identifier: fKv7WxsfinHJq/XwpJZSS8vdtrIHFjzvTqjcrh6esE4=
Subject key identifier: BB:01:3D:D1:55:0B:63:CF:E4:E7:94:22:27:A4:E5:9A:8E:20:C3:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E1A363CC61711EFB609E3B6762E951A.roa
Signing time: Sun 29 Dec 2024 19:01:54 +0000
ROA not before: Sun 29 Dec 2024 19:01:50 +0000
ROA not after: Sun 12 Dec 2027 19:01:50 +0000
asID: 17561
IP address blocks: 154.217.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77596 (0x12f1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:01:50 2024 GMT
Not After : Dec 12 19:01:50 2027 GMT
Subject: CN=67719ca2-c0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:50:a5:80:40:64:d1:96:f1:5b:66:a0:97:
e7:e9:81:df:2f:ac:b8:6c:4f:bd:5f:d5:ed:fd:4a:
d6:6f:63:65:77:55:bc:73:d0:20:cb:67:4e:86:82:
e0:04:22:0b:b2:f4:98:60:5a:a2:37:e1:78:2b:07:
f2:b4:f9:af:57:d3:bf:04:71:a3:bd:88:91:ea:80:
00:94:40:81:a9:28:ca:e7:1b:fe:4e:6c:4b:f5:3c:
ee:85:ce:7e:db:6d:fe:2a:e1:03:66:fd:99:99:3a:
c3:d9:f1:f3:52:97:f3:66:d5:b1:cb:83:0a:39:d6:
0f:e0:12:98:7f:52:fe:ef:80:76:51:9b:dd:6d:2f:
1c:67:ae:1d:0f:49:a9:27:02:18:a5:32:9f:9a:ee:
e2:6c:91:97:af:f9:ec:aa:ef:6e:2d:e1:0d:31:1c:
2b:ae:dd:cd:6e:5b:f7:b2:bf:57:5f:da:ea:96:b5:
19:f9:58:c2:06:8f:8a:2b:6d:21:92:9b:52:87:c5:
8f:ae:58:70:4a:57:03:38:60:ea:28:b4:28:b9:49:
af:1a:0c:af:33:22:5c:61:2a:7f:98:0f:7e:c0:c5:
79:ce:57:81:f5:9c:0a:d5:39:fa:6b:b6:31:3e:ac:
dc:b2:80:5c:7d:e1:b2:ac:40:1f:f2:1d:37:10:2e:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:3D:D1:55:0B:63:CF:E4:E7:94:22:27:A4:E5:9A:8E:20:C3:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E1A363CC61711EFB609E3B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.113.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:40:aa:65:a3:80:41:64:7c:7c:ea:02:5c:d6:61:b7:31:e6:
c8:ac:d3:ca:28:ff:ac:0e:69:48:7f:a6:6d:bf:b4:88:56:ed:
26:94:27:b0:e2:9d:2b:ff:c8:4e:77:aa:54:07:e7:5c:ef:3a:
ff:c0:10:5f:db:bc:81:29:6e:d0:da:e1:16:68:06:ce:c8:c4:
36:a4:9c:cc:bf:81:7c:78:a0:a3:75:fc:3f:63:d7:f4:15:6f:
d6:8a:5c:1a:35:3f:53:fa:31:e9:29:e7:c4:5f:03:3c:6d:93:
5f:e6:1e:db:5a:6d:66:90:35:ed:2a:bb:fa:f7:f7:b7:94:91:
13:b9:82:61:d0:1d:79:92:35:a8:a3:5e:4e:c0:bd:30:6d:ed:
d5:95:5e:2e:14:82:dc:0a:76:8e:a1:0c:1b:04:dc:5f:63:c2:
76:cb:28:03:b7:8f:44:c2:a5:6a:dd:2c:2f:b4:c8:18:80:41:
a9:3d:c1:de:dd:bd:bb:e5:a8:f0:c7:10:1e:58:4d:f5:5c:4a:
b1:c0:cf:08:05:7b:1d:09:cc:8c:b7:54:de:6d:7d:ba:5d:4f:
46:cd:32:57:1a:b6:ed:6b:39:41:07:19:d4:84:11:fb:bf:f7:
0d:a2:4d:d8:3e:55:83:8d:d8:85:56:ff:2a:b0:93:11:c4:ea:
a9:c7:0d:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS8cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTkwMTUwWhcNMjcxMjEyMTkwMTUwWjAYMRYw
FAYDVQQDEw02NzcxOWNhMi1jMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsWJQpYBAZNGW8VtmoJfn6YHfL6y4bE+9X9Xt/UrWb2Nld1W8c9Agy2dO
hoLgBCILsvSYYFqiN+F4KwfytPmvV9O/BHGjvYiR6oAAlECBqSjK5xv+TmxL9Tzu
hc5+223+KuEDZv2ZmTrD2fHzUpfzZtWxy4MKOdYP4BKYf1L+74B2UZvdbS8cZ64d
D0mpJwIYpTKfmu7ibJGXr/nsqu9uLeENMRwrrt3Nblv3sr9XX9rqlrUZ+VjCBo+K
K20hkptSh8WPrlhwSlcDOGDqKLQouUmvGgyvMyJcYSp/mA9+wMV5zleB9ZwK1Tn6
a7YxPqzcsoBcfeGyrEAf8h03EC7afwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLsB
PdFVC2PP5OeUIiek5ZqOIMMaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RTFBMzYzQ0M2MTcxMUVGQjYwOUUzQjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtlxMA0GCSqGSIb3DQEB
CwUAA4IBAQDEQKplo4BBZHx86gJc1mG3MebIrNPKKP+sDmlIf6Ztv7SIVu0mlCew
4p0r/8hOd6pUB+dc7zr/wBBf27yBKW7Q2uEWaAbOyMQ2pJzMv4F8eKCjdfw/Y9f0
FW/WilwaNT9T+jHpKefEXwM8bZNf5h7bWm1mkDXtKrv69/e3lJETuYJh0B15kjWo
o15OwL0wbe3VlV4uFILcCnaOoQwbBNxfY8J2yygDt49EwqVq3SwvtMgYgEGpPcHe
3b275ajwxxAeWE31XEqxwM8IBXsdCcyMt1TebX26XU9GzTJXGrbtazlBBxnUhBH7
v/cNok3YPlWDjdiFVv8qsJMRxOqpxw05
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:20 2025 by rpki-client