Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86DF8E98F2CA11EF97F01449762E951A.roa
File: 86DF8E98F2CA11EF97F01449762E951A.roa (raw, json)
Hash identifier: Ugtx4TPT7IjMdy5/KfxVOWBFY2ivQRcuxFhjwhnUpDE=
Subject key identifier: 69:12:11:0B:87:D0:E7:6D:D4:EB:D2:B4:7A:D5:E3:87:C0:3B:BD:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86DF8E98F2CA11EF97F01449762E951A.roa
Signing time: Mon 24 Feb 2025 16:15:13 +0000
ROA not before: Mon 24 Feb 2025 16:15:10 +0000
ROA not after: Fri 18 Jul 2025 16:15:10 +0000
asID: 18013
IP address blocks: 154.204.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89182 (0x15c5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 16:15:10 2025 GMT
Not After : Jul 18 16:15:10 2025 GMT
Subject: CN=67bc9b11-3eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:f7:1c:76:37:e5:da:5c:06:ce:7d:ea:70:
0d:4e:2a:d4:7e:9d:fa:69:09:08:87:2a:c8:99:93:
79:2a:a6:46:9e:64:43:04:72:b3:47:98:eb:52:d8:
cb:a3:56:1c:5d:47:be:6f:eb:4f:11:38:65:76:f0:
e3:55:98:6a:87:c2:99:51:2f:2c:45:2d:6b:51:3f:
92:72:13:bc:c0:85:83:a2:f6:54:f3:3b:9a:5e:26:
ab:66:54:48:42:e6:00:5f:31:d1:67:00:20:d0:fa:
34:3a:e8:83:25:c3:40:94:92:ba:22:5f:37:46:11:
9e:28:54:a6:d6:a0:18:ea:47:a7:19:76:0c:01:a6:
c2:29:01:a6:a7:df:1f:36:22:90:83:7a:dc:64:42:
f2:81:6d:53:b5:61:f1:d2:2f:01:af:4d:27:47:73:
23:df:e6:53:21:fb:97:56:e3:17:92:e9:95:05:02:
c1:30:29:e9:8e:cf:f7:b3:16:17:42:8c:cc:43:5d:
af:73:e8:ad:ad:0e:95:1d:db:59:32:0b:96:47:80:
70:ee:ee:5f:fe:07:a3:97:ef:14:9b:75:5c:07:c6:
a3:e4:f7:ec:e8:24:7e:25:89:4c:9e:7a:e3:0c:da:
28:f1:08:8b:6e:bb:92:a1:fa:2d:a3:2a:47:b9:96:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:12:11:0B:87:D0:E7:6D:D4:EB:D2:B4:7A:D5:E3:87:C0:3B:BD:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86DF8E98F2CA11EF97F01449762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.8.0/21
Signature Algorithm: sha256WithRSAEncryption
94:91:ea:80:00:eb:c8:06:7c:3a:93:a4:fa:c0:66:3a:0d:83:
69:e2:90:09:c3:96:62:3e:e1:66:42:d0:a7:ac:7d:c8:9c:36:
e1:52:e9:3f:38:40:79:da:bb:9d:41:52:03:3f:01:c5:e1:77:
89:8f:b6:0f:a5:a3:2d:12:08:3c:32:8b:da:38:4c:4e:20:6a:
ca:35:f2:d5:40:1f:7c:1f:03:64:54:57:7b:8c:cd:46:e3:0c:
b5:85:65:25:b3:d4:33:c0:9a:46:80:b2:39:b8:7b:ed:2c:0c:
f2:5c:fc:bc:b8:05:63:c7:b6:3c:fa:00:e5:84:e0:16:ef:b5:
f7:60:57:47:5b:27:5a:8f:ca:ae:cb:18:4f:84:34:55:ee:0b:
fb:2d:2a:20:e3:43:80:00:e6:a0:76:c3:f4:cc:a6:f9:7d:ac:
5e:35:b3:26:3c:df:d8:94:64:de:34:4d:2a:a9:40:1e:6a:ba:
11:2a:c9:5e:03:6f:b4:ed:59:36:39:06:4f:04:2d:02:c6:45:
f3:77:60:cc:9f:ee:4a:c1:59:10:65:c6:76:c8:3d:ae:84:3a:
53:00:19:22:94:44:5a:f1:ee:08:a2:7f:3e:10:bd:eb:e1:59:
58:46:29:9a:f9:ea:c9:18:1d:de:46:12:26:f3:da:82:be:b2:
ea:b2:d7:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVxeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTYxNTEwWhcNMjUwNzE4MTYxNTEwWjAYMRYw
FAYDVQQDEw02N2JjOWIxMS0zZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6DT3HHY35dpcBs596nANTirUfp36aQkIhyrImZN5KqZGnmRDBHKzR5jr
UtjLo1YcXUe+b+tPEThldvDjVZhqh8KZUS8sRS1rUT+SchO8wIWDovZU8zuaXiar
ZlRIQuYAXzHRZwAg0Po0OuiDJcNAlJK6Il83RhGeKFSm1qAY6kenGXYMAabCKQGm
p98fNiKQg3rcZELygW1TtWHx0i8Br00nR3Mj3+ZTIfuXVuMXkumVBQLBMCnpjs/3
sxYXQozMQ12vc+itrQ6VHdtZMguWR4Bw7u5f/gejl+8Um3VcB8aj5Pfs6CR+JYlM
nnrjDNoo8QiLbruSofotoypHuZY9hwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGkS
EQuH0Odt1OvStHrV44fAO70IMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NkRGOEU5OEYyQ0ExMUVGOTdGMDE0NDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmswIMA0GCSqGSIb3DQEB
CwUAA4IBAQCUkeqAAOvIBnw6k6T6wGY6DYNp4pAJw5ZiPuFmQtCnrH3InDbhUuk/
OEB52rudQVIDPwHF4XeJj7YPpaMtEgg8MovaOExOIGrKNfLVQB98HwNkVFd7jM1G
4wy1hWUls9QzwJpGgLI5uHvtLAzyXPy8uAVjx7Y8+gDlhOAW77X3YFdHWydaj8qu
yxhPhDRV7gv7LSog40OAAOagdsP0zKb5faxeNbMmPN/YlGTeNE0qqUAearoRKsle
A2+07Vk2OQZPBC0CxkXzd2DMn+5KwVkQZcZ2yD2uhDpTABkilERa8e4Ion8+EL3r
4VlYRima+erJGB3eRhIm89qCvrLqstci
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:34 2025 by rpki-client