Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65D53D4EF4AD11EFA5A6AABC762E951A.roa
File: 65D53D4EF4AD11EFA5A6AABC762E951A.roa (raw, json)
Hash identifier: RLojirafWffSMTYkpHo0tShL+iRuzYX5Ff+sourMp3E=
Subject key identifier: D4:46:FD:A8:99:96:6D:78:D5:66:E5:69:5A:F7:7F:0D:27:E1:35:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016624
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65D53D4EF4AD11EFA5A6AABC762E951A.roa
Signing time: Thu 27 Feb 2025 01:51:45 +0000
ROA not before: Thu 27 Feb 2025 01:51:41 +0000
ROA not after: Thu 19 Feb 2026 01:51:41 +0000
asID: 984
IP address blocks: 154.200.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91684 (0x16624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 01:51:41 2025 GMT
Not After : Feb 19 01:51:41 2026 GMT
Subject: CN=67bfc531-a9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:cd:48:ef:35:3d:ba:c1:bb:c6:e5:ef:2e:
16:8a:6f:74:4b:27:3d:de:25:a5:5b:20:79:89:e2:
67:75:b1:a3:44:5d:7b:1d:d4:8a:95:b2:bf:82:39:
7f:7b:67:90:84:22:d9:97:01:4b:bb:34:cc:9f:2f:
f7:20:67:30:98:52:84:7b:d3:09:40:a6:62:38:4a:
44:1d:a5:b5:65:d9:44:86:55:c7:a3:63:6f:51:06:
1e:89:95:f2:c0:6e:9d:91:27:e2:c3:e4:0f:aa:82:
20:c3:5e:34:66:0a:59:e2:1e:40:75:5d:0e:0e:0a:
a3:be:b1:67:69:18:79:b5:94:16:08:84:03:83:ba:
fe:ef:3f:49:d5:9c:ea:6e:e6:66:8e:3a:aa:dd:08:
45:ab:50:ea:05:56:89:de:b1:d2:b8:94:73:3a:b3:
36:a1:53:9e:cc:06:d0:df:24:f2:7a:a1:e8:87:a4:
f5:f9:59:59:97:a6:d8:13:95:eb:8f:9c:11:19:61:
9f:02:39:f1:17:17:68:bf:54:f7:00:40:ba:f5:ca:
29:8a:ef:c5:36:e3:6b:0d:51:c1:07:93:d3:31:85:
96:b0:e2:1c:cb:83:68:13:84:76:da:81:93:19:b1:
66:9d:86:1b:91:40:0b:4c:62:86:8e:04:f9:0f:16:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:46:FD:A8:99:96:6D:78:D5:66:E5:69:5A:F7:7F:0D:27:E1:35:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65D53D4EF4AD11EFA5A6AABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.73.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:16:cf:6d:68:6a:d6:ed:2c:58:6c:09:ab:fb:d3:c2:85:43:
d9:39:9a:29:c6:ed:d4:8a:ee:1d:a0:12:dc:0f:fb:55:34:c0:
8a:af:71:ff:72:6f:fb:64:be:f2:85:c6:cb:1d:16:29:45:b1:
31:53:b3:87:27:9c:03:8d:ca:88:39:0e:7d:21:98:06:40:34:
db:93:5f:9b:52:cb:27:c5:df:bb:ac:6b:b4:3e:97:0b:7c:ff:
90:62:a9:9d:15:7b:0a:f8:ab:dc:c6:b9:1b:59:00:e1:ee:24:
21:ff:7c:2f:c3:34:96:3e:fc:a4:cc:5d:79:bd:10:23:87:e4:
a5:5f:99:94:96:e5:fb:10:f1:79:5f:75:0e:9d:c5:bc:41:52:
1e:a2:16:2d:03:4d:17:e8:24:11:3e:f6:22:c9:f9:f2:88:09:
4f:aa:4d:85:83:74:fb:64:21:81:74:63:fe:11:1b:80:ef:d2:
26:c5:cd:97:ea:3c:50:fb:c9:27:de:a9:e5:40:53:80:28:86:
44:ac:5d:91:96:a0:0b:53:d3:24:c4:b7:50:cb:21:4f:48:8a:
77:a8:85:6c:5e:a1:4d:ff:dc:12:8d:af:4e:1b:35:77:5b:5c:
04:b0:79:08:75:a9:bb:53:a4:d2:11:15:b5:27:0d:39:88:37:
13:37:49:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWYkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDE1MTQxWhcNMjYwMjE5MDE1MTQxWjAYMRYw
FAYDVQQDEw02N2JmYzUzMS1hOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtwzNSO81PbrBu8bl7y4Wim90Syc93iWlWyB5ieJndbGjRF17HdSKlbK/
gjl/e2eQhCLZlwFLuzTMny/3IGcwmFKEe9MJQKZiOEpEHaW1ZdlEhlXHo2NvUQYe
iZXywG6dkSfiw+QPqoIgw140ZgpZ4h5AdV0ODgqjvrFnaRh5tZQWCIQDg7r+7z9J
1ZzqbuZmjjqq3QhFq1DqBVaJ3rHSuJRzOrM2oVOezAbQ3yTyeqHoh6T1+VlZl6bY
E5Xrj5wRGWGfAjnxFxdov1T3AEC69copiu/FNuNrDVHBB5PTMYWWsOIcy4NoE4R2
2oGTGbFmnYYbkUALTGKGjgT5Dxb5DQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNRG
/aiZlm141WblaVr3fw0n4TWyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NUQ1M0Q0RUY0QUQxMUVGQTVBNkFBQkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmshJMA0GCSqGSIb3DQEB
CwUAA4IBAQC6Fs9taGrW7SxYbAmr+9PChUPZOZopxu3Uiu4doBLcD/tVNMCKr3H/
cm/7ZL7yhcbLHRYpRbExU7OHJ5wDjcqIOQ59IZgGQDTbk1+bUssnxd+7rGu0PpcL
fP+QYqmdFXsK+KvcxrkbWQDh7iQh/3wvwzSWPvykzF15vRAjh+SlX5mUluX7EPF5
X3UOncW8QVIeohYtA00X6CQRPvYiyfnyiAlPqk2Fg3T7ZCGBdGP+ERuA79Imxc2X
6jxQ+8kn3qnlQFOAKIZErF2RlqALU9MkxLdQyyFPSIp3qIVsXqFN/9wSja9OGzV3
W1wEsHkIdam7U6TSERW1Jw05iDcTN0nw
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:42 2025 by rpki-client