Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E36F870F53B11EFAD8D358F762E951A.roa
File: 8E36F870F53B11EFAD8D358F762E951A.roa (raw, json)
Hash identifier: pyrAbWIM+dUmLZe9PagC6qMaS9iY4Zcb4tNjJiFoKK4=
Subject key identifier: 7A:2F:10:12:63:2B:F7:4A:88:FF:92:FE:4A:29:88:8F:A6:7B:FB:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016980
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E36F870F53B11EFAD8D358F762E951A.roa
Signing time: Thu 27 Feb 2025 18:49:21 +0000
ROA not before: Thu 27 Feb 2025 18:49:17 +0000
ROA not after: Sat 05 Apr 2025 18:49:17 +0000
asID: 205125
IP address blocks: 154.203.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92544 (0x16980)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 18:49:17 2025 GMT
Not After : Apr 5 18:49:17 2025 GMT
Subject: CN=67c0b3b1-15d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:f0:c1:7a:19:e2:0e:86:13:69:79:7e:aa:
d1:4b:a9:29:c6:80:59:50:e8:9f:9a:3c:6d:1e:f7:
b2:9f:28:f7:23:4f:1e:fb:80:b8:ca:28:4d:1a:87:
de:d9:1d:56:25:5f:a9:41:40:6c:8b:fc:4a:59:ab:
14:ce:07:64:8f:66:fd:25:98:7e:80:77:ef:5c:2b:
f3:a7:82:b7:b4:70:dd:31:b2:09:a3:16:ee:74:d4:
64:20:4c:53:2d:d3:6b:f1:6f:64:1b:23:2e:97:1b:
16:9c:10:1b:74:38:2d:ff:6e:69:0d:32:77:e1:6d:
22:6f:e9:0b:1a:37:24:96:7c:ff:ee:77:56:69:08:
71:e5:80:88:fe:a6:24:9b:95:7f:04:98:ab:ac:a1:
ea:64:56:91:f2:5c:e2:eb:02:03:13:e7:ee:ef:b1:
70:ae:68:a6:cc:8a:cd:a0:c2:03:2c:ad:cf:36:86:
1c:60:9b:b3:7b:7a:8c:e0:0b:b9:3b:3d:68:f0:6d:
aa:ab:30:5a:0f:99:b1:b2:6d:48:31:6b:6c:92:e6:
88:f0:bb:44:04:34:b9:3d:81:cd:18:3f:f5:6b:fd:
45:4f:16:eb:41:d7:db:54:da:61:d4:3f:90:8c:fd:
21:dd:4f:cf:b9:e5:fb:35:f7:ee:3c:70:49:97:35:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2F:10:12:63:2B:F7:4A:88:FF:92:FE:4A:29:88:8F:A6:7B:FB:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E36F870F53B11EFAD8D358F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.192.0/24
Signature Algorithm: sha256WithRSAEncryption
47:37:79:5b:13:fe:16:02:83:07:5d:96:cd:9a:3b:31:26:63:
d7:e8:8d:9e:83:ba:d9:58:f3:81:51:d5:3d:c2:f9:ea:6c:4f:
e9:f0:c0:a9:3f:22:30:23:c3:94:f1:b7:c8:cf:6c:d0:f9:f2:
24:c6:aa:15:0b:c0:68:0e:02:16:7e:55:75:f9:84:14:2a:24:
85:9a:78:2d:7d:5b:22:c5:50:9f:de:f3:fe:ac:87:55:0b:74:
22:6a:da:ba:32:c2:85:db:7c:e1:19:0e:e8:85:e6:9f:17:c4:
28:f1:d6:67:00:b7:ec:02:de:02:7f:50:70:1e:f0:75:1c:18:
28:d3:a4:a1:68:8f:3a:a7:1a:86:22:ee:bc:56:7b:e2:9f:27:
52:8a:55:44:b4:59:73:1b:95:2c:5e:79:5c:47:a0:69:29:7a:
9f:59:f2:30:b1:89:d1:f5:6a:22:ec:5c:20:00:73:4c:bc:b0:
d7:40:17:02:11:6b:fa:9b:82:cb:c9:3c:35:99:f1:dc:62:1b:
10:7b:a2:d7:31:8e:9c:b7:e0:09:4a:fb:8e:3f:93:af:a7:e4:
20:1b:fc:dc:27:f0:de:18:b9:52:97:61:d5:d5:30:a0:48:61:
d5:c3:31:ae:cd:21:d5:e6:3a:5f:0c:37:ee:7d:b5:04:96:dd:
8d:81:45:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWmAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTg0OTE3WhcNMjUwNDA1MTg0OTE3WjAYMRYw
FAYDVQQDEw02N2MwYjNiMS0xNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3MvwwXoZ4g6GE2l5fqrRS6kpxoBZUOifmjxtHveynyj3I08e+4C4yihN
Gofe2R1WJV+pQUBsi/xKWasUzgdkj2b9JZh+gHfvXCvzp4K3tHDdMbIJoxbudNRk
IExTLdNr8W9kGyMulxsWnBAbdDgt/25pDTJ34W0ib+kLGjcklnz/7ndWaQhx5YCI
/qYkm5V/BJirrKHqZFaR8lzi6wIDE+fu77FwrmimzIrNoMIDLK3PNoYcYJuze3qM
4Au5Oz1o8G2qqzBaD5mxsm1IMWtskuaI8LtEBDS5PYHNGD/1a/1FTxbrQdfbVNph
1D+QjP0h3U/PueX7NffuPHBJlzVQ4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHov
EBJjK/dKiP+S/kopiI+me/sIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RTM2Rjg3MEY1M0IxMUVGQUQ4RDM1OEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsvAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHN3lbE/4WAoMHXZbNmjsxJmPX6I2eg7rZWPOBUdU9wvnqbE/p8MCp
PyIwI8OU8bfIz2zQ+fIkxqoVC8BoDgIWflV1+YQUKiSFmngtfVsixVCf3vP+rIdV
C3Qiatq6MsKF23zhGQ7oheafF8Qo8dZnALfsAt4Cf1BwHvB1HBgo06ShaI86pxqG
Iu68VnvinydSilVEtFlzG5UsXnlcR6BpKXqfWfIwsYnR9Woi7FwgAHNMvLDXQBcC
EWv6m4LLyTw1mfHcYhsQe6LXMY6ct+AJSvuOP5Ovp+QgG/zcJ/DeGLlSl2HV1TCg
SGHVwzGuzSHV5jpfDDfufbUElt2NgUWJ
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:52:31 2025 by rpki-client