Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92276444C5E611EFBA92B886762E951A.roa
File: 92276444C5E611EFBA92B886762E951A.roa (raw, json)
Hash identifier: fpYX+G1+DamNbcFXjBb5yorO6SIVcahbBLSfmlwf/z8=
Subject key identifier: 1B:7E:A9:74:A9:6A:40:26:F7:A2:F6:8B:1F:DD:13:DF:58:5A:A6:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92276444C5E611EFBA92B886762E951A.roa
Signing time: Sun 29 Dec 2024 13:12:36 +0000
ROA not before: Sun 29 Dec 2024 13:12:32 +0000
ROA not after: Sun 12 Dec 2027 13:12:32 +0000
asID: 17561
IP address blocks: 154.210.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77182 (0x12d7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:12:32 2024 GMT
Not After : Dec 12 13:12:32 2027 GMT
Subject: CN=67714ac4-8b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:72:02:11:7a:12:b4:93:af:da:9c:bf:fb:
de:a9:96:8e:8b:55:be:a7:69:79:41:a8:a5:d0:2f:
9e:29:f9:71:b4:d0:f7:1a:f2:4e:47:a9:51:44:06:
1b:a8:f6:de:32:98:48:8a:ef:f3:b2:40:3b:74:a4:
d6:15:75:52:f3:ae:5a:58:34:ef:e9:a7:aa:b2:05:
93:8d:1a:91:5e:64:e3:86:10:72:4c:27:33:70:3e:
0a:5f:0e:ac:9b:b7:f2:cc:75:aa:0c:71:5f:eb:ac:
ba:99:9b:3f:a5:b0:e1:43:2c:73:23:e1:d8:b6:d8:
83:15:31:cd:b9:19:aa:bf:d3:1d:31:6f:0b:6f:9e:
95:de:fa:87:2e:d3:1e:be:55:17:07:ea:60:83:ae:
ab:98:d4:c8:35:00:6d:ce:60:e1:0b:5e:83:ff:28:
2e:12:c8:40:18:8a:31:56:aa:0e:7e:78:0d:05:15:
38:b5:50:78:b8:05:47:dc:af:67:12:e1:d9:80:7c:
3f:6b:c8:74:13:ba:cf:62:92:e8:ff:b6:87:a1:95:
4a:e3:0e:90:ad:a9:56:58:b7:c5:d8:b7:8d:46:97:
a9:f6:90:fc:a8:4d:e0:33:44:0c:33:14:97:c2:ee:
fa:85:62:df:75:67:0b:bb:e1:21:9f:cb:fb:6c:4b:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7E:A9:74:A9:6A:40:26:F7:A2:F6:8B:1F:DD:13:DF:58:5A:A6:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92276444C5E611EFBA92B886762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.238.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3d:7b:24:6f:b0:c1:db:32:1c:3a:5f:1d:43:b0:4a:a0:ce:
4c:bf:73:8a:4d:2a:f2:34:0c:fb:fb:c9:41:d5:75:2c:f0:67:
b3:05:61:b6:d3:f8:69:3c:0e:20:df:8d:6f:83:53:53:6e:3b:
7a:2e:04:42:0e:b6:70:90:97:cd:9c:85:a3:e7:84:d8:0d:1c:
0f:be:2d:38:9e:0f:3f:37:f3:4b:51:b8:d8:15:6f:d8:d5:e1:
a5:ea:52:94:5e:b7:4b:ca:23:65:f8:19:08:04:96:b1:a6:8e:
89:d9:a3:57:2e:8e:2a:e5:70:65:52:72:62:4d:5e:4a:0d:de:
dd:c2:52:87:63:ff:1a:ac:bc:bb:b6:01:7f:87:94:89:49:af:
c7:59:25:e5:1d:f5:8c:0a:86:df:43:44:d4:c9:27:28:13:99:
d8:a3:9c:58:95:9f:35:1c:d3:d0:a0:b4:77:88:a2:9a:ad:f0:
d3:32:67:8e:4c:d8:92:12:58:12:1a:16:a3:94:de:b5:70:59:
68:a6:9c:f8:b5:0b:6a:43:f1:6c:c0:6c:11:41:ae:58:dc:fe:
ca:4d:1b:44:4b:23:5f:a2:77:42:ef:5c:2a:fb:3b:d5:5c:d5:
25:67:0d:5d:66:4c:c7:be:46:e7:36:16:ed:bc:5a:24:d8:5b:
09:9f:a8:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS1+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTMxMjMyWhcNMjcxMjEyMTMxMjMyWjAYMRYw
FAYDVQQDEw02NzcxNGFjNC04YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAue9yAhF6ErSTr9qcv/veqZaOi1W+p2l5Qail0C+eKflxtND3GvJOR6lR
RAYbqPbeMphIiu/zskA7dKTWFXVS865aWDTv6aeqsgWTjRqRXmTjhhByTCczcD4K
Xw6sm7fyzHWqDHFf66y6mZs/pbDhQyxzI+HYttiDFTHNuRmqv9MdMW8Lb56V3vqH
LtMevlUXB+pgg66rmNTINQBtzmDhC16D/yguEshAGIoxVqoOfngNBRU4tVB4uAVH
3K9nEuHZgHw/a8h0E7rPYpLo/7aHoZVK4w6QralWWLfF2LeNRpep9pD8qE3gM0QM
MxSXwu76hWLfdWcLu+Ehn8v7bEvMRQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBt+
qXSpakAm96L2ix/dE99YWqZOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MjI3NjQ0NEM1RTYxMUVGQkE5MkI4ODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLuMA0GCSqGSIb3DQEB
CwUAA4IBAQBYPXskb7DB2zIcOl8dQ7BKoM5Mv3OKTSryNAz7+8lB1XUs8GezBWG2
0/hpPA4g341vg1NTbjt6LgRCDrZwkJfNnIWj54TYDRwPvi04ng8/N/NLUbjYFW/Y
1eGl6lKUXrdLyiNl+BkIBJaxpo6J2aNXLo4q5XBlUnJiTV5KDd7dwlKHY/8arLy7
tgF/h5SJSa/HWSXlHfWMCobfQ0TUyScoE5nYo5xYlZ81HNPQoLR3iKKarfDTMmeO
TNiSElgSGhajlN61cFloppz4tQtqQ/FswGwRQa5Y3P7KTRtESyNfondC71wq+zvV
XNUlZw1dZkzHvkbnNhbtvFok2FsJn6hF
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:11 2025 by rpki-client