Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/610663D6F2DE11EFBE188451762E951A.roa
File: 610663D6F2DE11EFBE188451762E951A.roa (raw, json)
Hash identifier: QRvxQU8nFBhxiq0myetoap482SptJAnoN6/qt0nxqoA=
Subject key identifier: 84:45:DC:FC:46:C6:9C:A6:73:69:8B:41:54:9D:99:68:CF:0B:D0:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/610663D6F2DE11EFBE188451762E951A.roa
Signing time: Mon 24 Feb 2025 18:37:20 +0000
ROA not before: Mon 24 Feb 2025 18:37:16 +0000
ROA not after: Mon 07 Apr 2025 18:37:16 +0000
asID: 138915
IP address blocks: 154.223.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89254 (0x15ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:37:16 2025 GMT
Not After : Apr 7 18:37:16 2025 GMT
Subject: CN=67bcbc5f-61c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:c7:27:05:aa:6b:01:c0:ed:ef:fc:14:59:
d0:60:ff:f6:f7:30:9e:63:2b:a0:f3:f4:25:25:af:
5e:fd:3b:81:18:de:26:da:83:ab:45:ff:5e:5d:de:
6f:ed:1f:12:48:3b:40:15:b7:12:0c:98:45:33:8e:
49:b8:b9:23:fe:ce:8c:0e:a4:1b:81:04:59:a4:6c:
3d:cd:92:bf:a3:89:19:8d:c4:fe:40:51:47:a7:1e:
65:b3:f3:ee:c7:8e:57:79:4e:05:d8:35:bd:12:0d:
01:db:5c:58:e1:b0:c8:fa:f9:9d:64:62:42:d0:2a:
10:6e:1c:2f:84:ed:ac:01:00:0d:8b:fa:61:a8:78:
24:56:ea:c6:bd:1c:90:d8:ea:2c:03:3f:59:93:5c:
b3:48:4f:e5:62:3e:2f:0f:7b:20:09:be:a9:72:c9:
b1:f9:0d:73:60:12:ce:a9:9b:5b:74:1b:c8:17:e1:
d0:b6:12:69:e8:dc:d1:0c:73:80:83:75:6c:dd:21:
32:89:b8:74:af:08:87:2d:4b:dc:28:58:fe:0b:ae:
ba:02:0b:df:87:a3:00:59:2c:68:5d:f2:c5:4a:84:
d1:50:48:be:db:60:95:e6:53:f4:e7:e2:6a:56:6e:
03:6b:2f:e3:d2:8c:9e:06:65:97:e1:6e:36:93:01:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:45:DC:FC:46:C6:9C:A6:73:69:8B:41:54:9D:99:68:CF:0B:D0:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/610663D6F2DE11EFBE188451762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.60.0/23
Signature Algorithm: sha256WithRSAEncryption
16:df:98:96:9e:99:82:a4:14:ed:5b:da:56:45:0e:c7:bf:b4:
4e:65:9b:86:58:29:51:10:4b:a6:9e:95:a8:9b:bf:ac:c2:8d:
47:d2:1f:0f:b8:2e:90:cf:7f:37:ca:54:89:38:7b:3b:31:54:
d8:34:40:94:68:06:00:c8:a7:0a:5f:49:04:fd:42:4a:bf:61:
83:f6:ac:9b:06:77:c9:20:94:67:f1:e6:b5:7c:f2:fa:58:40:
2f:e6:a3:13:2f:7d:dd:12:25:30:9d:cc:e7:90:51:46:a5:25:
78:ef:7c:c7:9e:ee:8d:1c:43:7c:8c:2d:da:f7:af:62:4b:83:
e3:94:95:d8:c4:81:5a:59:a9:d6:76:6b:b0:eb:98:b7:35:5d:
30:6a:9e:cf:a1:e5:0c:1b:0e:57:e9:4f:78:0b:4c:3e:b0:e6:
91:81:50:35:47:6f:0a:af:24:75:07:89:52:4b:1b:8a:44:3b:
44:c5:fe:e8:b2:54:eb:ab:93:84:61:a3:58:29:7f:b7:11:b6:
11:73:37:e1:31:68:20:15:58:a6:91:8d:f7:e3:b9:af:99:ff:
3e:f9:b7:94:ad:95:15:12:0f:97:18:95:c8:2e:cf:f1:c2:1e:
ee:e6:96:34:a7:2e:22:a7:11:68:9b:41:ce:0d:f1:f3:54:c0:
35:37:dd:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVymMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTgzNzE2WhcNMjUwNDA3MTgzNzE2WjAYMRYw
FAYDVQQDEw02N2JjYmM1Zi02MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvXzHJwWqawHA7e/8FFnQYP/29zCeYyug8/QlJa9e/TuBGN4m2oOrRf9e
Xd5v7R8SSDtAFbcSDJhFM45JuLkj/s6MDqQbgQRZpGw9zZK/o4kZjcT+QFFHpx5l
s/Pux45XeU4F2DW9Eg0B21xY4bDI+vmdZGJC0CoQbhwvhO2sAQANi/phqHgkVurG
vRyQ2OosAz9Zk1yzSE/lYj4vD3sgCb6pcsmx+Q1zYBLOqZtbdBvIF+HQthJp6NzR
DHOAg3Vs3SEyibh0rwiHLUvcKFj+C666Agvfh6MAWSxoXfLFSoTRUEi+22CV5lP0
5+JqVm4Day/j0oyeBmWX4W42kwHLkQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIRF
3PxGxpymc2mLQVSdmWjPC9D+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MTA2NjNENkYyREUxMUVGQkUxODg0NTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt88MA0GCSqGSIb3DQEB
CwUAA4IBAQAW35iWnpmCpBTtW9pWRQ7Hv7ROZZuGWClREEumnpWom7+swo1H0h8P
uC6Qz383ylSJOHs7MVTYNECUaAYAyKcKX0kE/UJKv2GD9qybBnfJIJRn8ea1fPL6
WEAv5qMTL33dEiUwncznkFFGpSV473zHnu6NHEN8jC3a969iS4PjlJXYxIFaWanW
dmuw65i3NV0wap7PoeUMGw5X6U94C0w+sOaRgVA1R28KryR1B4lSSxuKRDtExf7o
slTrq5OEYaNYKX+3EbYRczfhMWggFVimkY3347mvmf8++beUrZUVEg+XGJXILs/x
wh7u5pY0py4ipxFom0HODfHzVMA1N900
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:49 2025 by rpki-client