Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/833B2D82C91811EFBAF49758762E951A.roa
File: 833B2D82C91811EFBAF49758762E951A.roa (raw, json)
Hash identifier: lrYsj229WGOoqn0GxpB6Mv3WZgFcLKy2MWpweNdMk+8=
Subject key identifier: 55:23:8B:D6:EB:DD:41:61:39:18:49:D1:18:50:53:17:B8:43:1F:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/833B2D82C91811EFBAF49758762E951A.roa
Signing time: Thu 02 Jan 2025 14:47:39 +0000
ROA not before: Thu 02 Jan 2025 14:47:35 +0000
ROA not after: Mon 13 Dec 2027 14:47:35 +0000
asID: 17561
IP address blocks: 154.221.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78565 (0x132e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:47:35 2025 GMT
Not After : Dec 13 14:47:35 2027 GMT
Subject: CN=6776a70b-2553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:93:81:4d:48:e8:4c:6c:7f:66:82:c4:60:
e6:28:70:8f:8b:61:03:e8:bc:ab:34:5b:ea:9f:37:
94:6c:97:00:ad:f6:86:fc:79:1e:e9:17:94:56:75:
96:4f:dc:a2:b4:bc:00:26:59:dd:f1:a3:5f:4e:0a:
31:e4:b4:ff:b4:b4:a3:52:d7:59:b8:e6:47:04:26:
f9:6c:45:36:eb:e1:7c:13:2a:4f:72:7f:1b:4a:49:
74:60:fe:45:78:8b:5e:a1:ee:90:c1:d0:2b:9c:ca:
03:87:7f:7b:3b:79:74:59:09:2b:e1:ac:62:76:0f:
01:c7:7a:bf:1a:0f:8b:10:3b:63:77:21:86:d5:f7:
3b:c3:5a:e1:fa:1d:89:23:50:b2:f8:06:97:20:dd:
da:0e:01:c2:5b:ce:44:98:22:d1:4e:24:60:ef:aa:
23:68:8d:a4:ca:27:2e:2f:71:3a:18:4b:b0:00:32:
a5:44:3a:ae:53:df:21:23:a4:43:a5:d4:c9:86:a4:
43:7a:e7:5b:c5:fc:d2:c9:ce:2d:b7:5e:73:71:e0:
a4:4f:a4:37:54:b9:e5:fb:14:e3:b1:67:0e:5d:13:
aa:5b:0f:39:7b:48:74:ef:57:99:a1:df:73:c7:4e:
65:3b:fc:4a:dd:ce:a3:ea:a4:95:4b:ea:6c:2a:4b:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:23:8B:D6:EB:DD:41:61:39:18:49:D1:18:50:53:17:B8:43:1F:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/833B2D82C91811EFBAF49758762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.255.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:19:f0:16:f3:6d:a4:90:eb:ec:a5:b7:93:00:9a:96:cd:fd:
28:e9:8b:69:e4:c5:a2:33:c9:95:c8:bc:16:fa:a8:a2:ee:50:
52:ec:29:7d:44:d9:d8:a0:d4:d1:a3:da:04:18:08:90:ee:3c:
d5:01:f6:a4:7a:45:bb:04:1e:2e:43:8c:30:66:83:ca:7b:89:
6c:cf:ae:a5:13:ec:9b:28:17:2a:46:0c:9f:7c:82:e4:c1:de:
fc:b8:db:f2:6d:0a:a7:b6:fe:96:27:08:d4:fe:3a:56:fa:97:
0f:cd:4f:b6:a2:32:b9:91:d5:40:29:36:c5:2e:d2:4b:e1:ec:
17:1a:24:8e:5d:da:24:30:74:d2:88:08:39:98:b3:6f:b8:5a:
64:fc:da:a2:35:39:fa:8b:fa:ef:d9:fa:7b:b7:c4:76:93:bf:
34:d5:67:0d:60:69:f1:d3:71:78:01:54:a4:ff:cb:c9:c1:54:
b6:1a:68:0f:c1:89:4a:df:16:6b:e7:2e:d2:2d:6b:c3:a5:b1:
c1:f8:54:54:01:e2:83:38:29:7d:66:fc:75:ef:7e:38:80:89:
ad:06:46:57:b7:dd:a3:3b:87:d1:0d:3a:39:b4:46:b5:01:97:
fe:c4:31:a1:90:fd:bf:53:5c:9e:55:08:38:27:63:c9:a7:4b:
e4:e9:e0:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATLlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTQ0NzM1WhcNMjcxMjEzMTQ0NzM1WjAYMRYw
FAYDVQQDEw02Nzc2YTcwYi0yNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1EuTgU1I6Exsf2aCxGDmKHCPi2ED6LyrNFvqnzeUbJcArfaG/Hke6ReU
VnWWT9yitLwAJlnd8aNfTgox5LT/tLSjUtdZuOZHBCb5bEU26+F8EypPcn8bSkl0
YP5FeIteoe6QwdArnMoDh397O3l0WQkr4axidg8Bx3q/Gg+LEDtjdyGG1fc7w1rh
+h2JI1Cy+AaXIN3aDgHCW85EmCLRTiRg76ojaI2kyicuL3E6GEuwADKlRDquU98h
I6RDpdTJhqRDeudbxfzSyc4tt15zceCkT6Q3VLnl+xTjsWcOXROqWw85e0h071eZ
od9zx05lO/xK3c6j6qSVS+psKkvjpwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFUj
i9br3UFhORhJ0RhQUxe4Qx/uMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MzNCMkQ4MkM5MTgxMUVGQkFGNDk3NTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3/MA0GCSqGSIb3DQEB
CwUAA4IBAQDSGfAW822kkOvspbeTAJqWzf0o6Ytp5MWiM8mVyLwW+qii7lBS7Cl9
RNnYoNTRo9oEGAiQ7jzVAfakekW7BB4uQ4wwZoPKe4lsz66lE+ybKBcqRgyffILk
wd78uNvybQqntv6WJwjU/jpW+pcPzU+2ojK5kdVAKTbFLtJL4ewXGiSOXdokMHTS
iAg5mLNvuFpk/NqiNTn6i/rv2fp7t8R2k7801WcNYGnx03F4AVSk/8vJwVS2GmgP
wYlK3xZr5y7SLWvDpbHB+FRUAeKDOCl9Zvx17344gImtBkZXt92jO4fRDTo5tEa1
AZf+xDGhkP2/U1yeVQg4J2PJp0vk6eBc
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:54 2025 by rpki-client