Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D980650CF6311EFB424B969762E951A.roa
File: 8D980650CF6311EFB424B969762E951A.roa (raw, json)
Hash identifier: 91sytHWEnCF9WNwFTNjYW+GTAy9cIMUwLzPAEzGw6D0=
Subject key identifier: 1D:0F:A4:52:F3:6F:15:B0:3B:F5:2C:B6:4B:86:C3:4B:40:DA:62:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D980650CF6311EFB424B969762E951A.roa
Signing time: Fri 10 Jan 2025 14:59:56 +0000
ROA not before: Fri 10 Jan 2025 14:59:52 +0000
ROA not after: Sun 12 Dec 2027 14:59:52 +0000
asID: 17561
IP address blocks: 154.81.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80424 (0x13a28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:59:52 2025 GMT
Not After : Dec 12 14:59:52 2027 GMT
Subject: CN=678135eb-fccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:cf:a8:b4:f0:15:f9:56:94:68:8d:78:b2:
c1:74:12:20:f4:b0:27:56:4f:bd:73:22:91:a0:d0:
e8:d9:12:3b:de:e8:b8:3e:67:cd:b4:2b:02:29:37:
6d:fa:54:23:55:13:a3:e7:5e:21:5f:f6:dc:41:b8:
57:0d:fe:45:71:f6:5e:c9:17:5f:9b:52:a6:4a:66:
77:00:21:7d:0a:0a:3d:21:91:86:dd:ca:97:99:6b:
69:9c:de:d7:0a:78:92:dc:31:2f:54:98:39:88:64:
57:09:c9:7c:f8:2f:ce:6c:8b:2b:f0:79:1c:a6:80:
4a:45:eb:69:49:48:9c:3c:45:83:38:66:1d:bd:06:
af:62:9c:2f:4a:2b:a7:c2:35:e6:35:e7:ba:ce:a7:
2e:1d:b3:a9:0f:2a:6e:0f:5e:d0:4c:4f:8e:bb:0a:
f4:1c:e9:f0:47:7e:40:fc:0c:a4:d1:67:9e:40:ff:
64:9d:4c:04:a7:fa:85:d4:d8:d1:e2:4a:e3:10:32:
13:46:e8:1d:68:3b:71:22:a2:23:58:08:f6:38:fe:
01:30:02:e0:96:03:71:0a:df:45:58:73:bd:6f:0f:
76:23:59:27:fb:4d:66:d6:c6:3c:a2:e4:ba:5b:04:
60:28:24:99:95:66:f7:30:08:e3:72:84:7e:63:d8:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0F:A4:52:F3:6F:15:B0:3B:F5:2C:B6:4B:86:C3:4B:40:DA:62:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D980650CF6311EFB424B969762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.149.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d5:d7:16:6b:04:3a:03:6e:08:01:02:39:58:32:fc:7e:04:
26:16:d4:57:7f:b8:a7:3a:c7:ef:78:2c:4c:a8:58:d8:dd:d6:
ea:0b:7d:0a:46:0b:6e:0d:bb:94:0e:a7:28:d0:52:20:e1:4e:
12:bb:70:ff:51:3f:d4:6b:1d:fe:be:45:c1:cf:20:f9:46:06:
f6:98:77:20:09:0d:79:24:3c:3e:e5:2c:5d:a2:ef:17:e6:2e:
4a:89:ab:6c:4a:ea:95:d8:87:4e:f4:12:c0:90:bb:6f:56:ab:
18:64:38:a1:0b:26:2c:0d:70:d3:61:ce:38:14:f8:45:0d:16:
ec:ff:81:18:9e:8d:b7:31:b4:ee:cf:2f:38:ed:be:a0:a8:ce:
2d:9b:94:b9:6c:ca:65:04:09:91:67:09:90:30:c1:1a:d0:1a:
93:18:36:b2:3e:dc:e0:0f:39:dc:96:e7:2c:ce:ab:21:a2:7c:
e9:20:63:b5:28:96:11:a3:bf:74:1c:21:bb:e4:b8:dd:c7:fd:
c3:89:16:4b:3f:4d:02:c4:87:4d:1e:48:33:38:0f:5b:ce:4e:
3c:6f:65:7e:08:ab:ae:d8:e6:43:d9:d0:6f:09:ac:cf:4c:a5:
b5:17:0d:2d:0e:e9:ce:e1:70:9c:ba:c0:47:50:ac:8f:f0:73:
de:83:6d:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATooMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTEwMTQ1OTUyWhcNMjcxMjEyMTQ1OTUyWjAYMRYw
FAYDVQQDEw02NzgxMzVlYi1mY2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy5PPqLTwFflWlGiNeLLBdBIg9LAnVk+9cyKRoNDo2RI73ui4PmfNtCsC
KTdt+lQjVROj514hX/bcQbhXDf5FcfZeyRdfm1KmSmZ3ACF9Cgo9IZGG3cqXmWtp
nN7XCniS3DEvVJg5iGRXCcl8+C/ObIsr8HkcpoBKRetpSUicPEWDOGYdvQavYpwv
SiunwjXmNee6zqcuHbOpDypuD17QTE+Ouwr0HOnwR35A/Ayk0WeeQP9knUwEp/qF
1NjR4krjEDITRugdaDtxIqIjWAj2OP4BMALglgNxCt9FWHO9bw92I1kn+01m1sY8
ouS6WwRgKCSZlWb3MAjjcoR+Y9hMNQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB0P
pFLzbxWwO/UstkuGw0tA2mIOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RDk4MDY1MENGNjMxMUVGQjQyNEI5Njk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlGVMA0GCSqGSIb3DQEB
CwUAA4IBAQAb1dcWawQ6A24IAQI5WDL8fgQmFtRXf7inOsfveCxMqFjY3dbqC30K
RgtuDbuUDqco0FIg4U4Su3D/UT/Uax3+vkXBzyD5Rgb2mHcgCQ15JDw+5Sxdou8X
5i5KiatsSuqV2IdO9BLAkLtvVqsYZDihCyYsDXDTYc44FPhFDRbs/4EYno23MbTu
zy847b6gqM4tm5S5bMplBAmRZwmQMMEa0BqTGDayPtzgDznclucszqshonzpIGO1
KJYRo790HCG75Ljdx/3DiRZLP00CxIdNHkgzOA9bzk48b2V+CKuu2OZD2dBvCazP
TKW1Fw0tDunO4XCcusBHUKyP8HPeg22q
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:49 2025 by rpki-client