Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71C8E228EFAC11EFB695FE78762E951A.roa
File: 71C8E228EFAC11EFB695FE78762E951A.roa (raw, json)
Hash identifier: thRtXRC5VC4yiPzme6BKEc4dgyiftr0MYrtECZJXlEA=
Subject key identifier: 13:48:1C:8E:9D:E4:94:49:39:5D:B9:9D:C8:90:1E:9B:6F:11:FD:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015951
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71C8E228EFAC11EFB695FE78762E951A.roa
Signing time: Thu 20 Feb 2025 17:02:19 +0000
ROA not before: Thu 20 Feb 2025 17:02:16 +0000
ROA not after: Fri 04 Apr 2025 17:02:16 +0000
asID: 3320
IP address blocks: 154.91.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88401 (0x15951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 20 17:02:16 2025 GMT
Not After : Apr 4 17:02:16 2025 GMT
Subject: CN=67b7601b-245d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:89:d1:57:f5:46:dd:97:65:d7:e9:bb:36:
5e:a4:09:b1:92:2e:9c:e2:26:4a:da:ad:e9:31:51:
7b:bc:21:6a:44:c2:8b:e0:bc:8d:17:cb:68:5f:93:
da:b1:22:51:8f:92:85:e9:66:ac:78:dd:95:d2:91:
23:98:ec:3f:99:f0:67:be:d6:b6:fb:82:b2:69:6f:
45:a4:8c:42:df:67:3b:bf:2b:d8:4a:82:0b:3a:c2:
bd:02:e9:46:09:91:b6:43:6e:7f:b6:47:2e:d5:82:
3f:43:2e:d5:97:23:a7:a6:40:b0:b0:5d:31:0d:b6:
7c:09:18:77:47:d9:c5:e7:ee:94:93:44:57:73:9a:
5a:fa:c2:54:4c:87:26:6c:b5:ec:f7:4c:fd:c1:1e:
92:17:67:cb:b9:07:27:db:68:ae:47:a6:7a:dd:6e:
bb:07:a6:d0:7b:5f:50:9f:11:41:d8:51:46:c0:0d:
58:60:a2:5f:ce:84:45:23:42:d5:53:2b:0a:96:9c:
c4:20:0c:0f:5d:e9:f3:a6:47:c8:42:2b:b8:32:64:
3d:79:d5:70:9f:43:0a:8c:65:66:82:b9:13:19:9f:
c4:b1:61:c8:d7:65:ff:6b:4a:9d:10:33:e2:61:30:
d3:aa:d0:26:5f:9a:a7:de:d0:4e:6a:8d:1e:a0:04:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:48:1C:8E:9D:E4:94:49:39:5D:B9:9D:C8:90:1E:9B:6F:11:FD:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71C8E228EFAC11EFB695FE78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:c2:2b:97:cf:3b:e8:c6:ee:9e:24:1f:7d:26:69:aa:2f:e6:
8f:80:52:23:8b:6e:6f:3c:6a:8a:bb:dd:07:12:49:7a:e4:e8:
9a:d7:64:71:d5:08:cc:d9:b8:61:c7:41:24:a8:e2:1b:fe:4b:
ab:9b:0c:7c:06:f2:aa:31:94:ca:62:61:d8:24:7d:36:b3:5d:
c1:0b:c1:5a:68:21:06:53:e3:9a:79:f5:96:14:a6:fb:92:f4:
11:6a:a8:86:8e:46:57:27:c6:39:20:83:8d:05:4d:c3:0e:b4:
c5:14:ca:3e:84:b5:77:21:8c:1f:11:25:1b:a8:0f:c9:60:5f:
29:03:f3:79:15:ff:77:ff:ea:9d:47:30:b1:76:c0:66:f1:60:
10:6d:97:f5:a4:33:28:89:bd:2a:74:61:40:00:0c:02:97:d8:
c5:3c:be:c6:79:aa:43:55:92:67:60:f8:d0:15:e5:62:7d:2f:
8c:17:ea:7e:ed:40:a7:fa:a8:f9:1e:2a:a0:91:80:62:d1:47:
24:ba:d5:4a:09:41:89:d5:8a:cb:89:5b:37:d7:ce:3c:6f:88:
0a:3a:47:e9:80:93:81:3b:4c:b2:f4:8c:c4:1a:8c:75:5e:09:
f5:7c:9f:06:9e:74:86:65:36:45:fd:b8:f6:c9:e9:5b:08:63:
1d:b6:c2:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVlRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjIwMTcwMjE2WhcNMjUwNDA0MTcwMjE2WjAYMRYw
FAYDVQQDEw02N2I3NjAxYi0yNDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuWOJ0Vf1Rt2XZdfpuzZepAmxki6c4iZK2q3pMVF7vCFqRMKL4LyNF8to
X5PasSJRj5KF6WaseN2V0pEjmOw/mfBnvta2+4KyaW9FpIxC32c7vyvYSoILOsK9
AulGCZG2Q25/tkcu1YI/Qy7VlyOnpkCwsF0xDbZ8CRh3R9nF5+6Uk0RXc5pa+sJU
TIcmbLXs90z9wR6SF2fLuQcn22iuR6Z63W67B6bQe19QnxFB2FFGwA1YYKJfzoRF
I0LVUysKlpzEIAwPXenzpkfIQiu4MmQ9edVwn0MKjGVmgrkTGZ/EsWHI12X/a0qd
EDPiYTDTqtAmX5qn3tBOao0eoARM/QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBNI
HI6d5JRJOV25nciQHptvEf3dMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MUM4RTIyOEVGQUMxMUVGQjY5NUZFNzg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmluUMA0GCSqGSIb3DQEB
CwUAA4IBAQAfwiuXzzvoxu6eJB99JmmqL+aPgFIji25vPGqKu90HEkl65Oia12Rx
1QjM2bhhx0EkqOIb/kurmwx8BvKqMZTKYmHYJH02s13BC8FaaCEGU+OaefWWFKb7
kvQRaqiGjkZXJ8Y5IIONBU3DDrTFFMo+hLV3IYwfESUbqA/JYF8pA/N5Ff93/+qd
RzCxdsBm8WAQbZf1pDMoib0qdGFAAAwCl9jFPL7GeapDVZJnYPjQFeVifS+MF+p+
7UCn+qj5HiqgkYBi0UckutVKCUGJ1YrLiVs31848b4gKOkfpgJOBO0yy9IzEGox1
Xgn1fJ8GnnSGZTZF/bj2yelbCGMdtsIg
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:42:21 2025 by rpki-client