Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93947B3EC5F311EF8882A458762E951A.roa
File: 93947B3EC5F311EF8882A458762E951A.roa (raw, json)
Hash identifier: zso3pFRU0P2VR23BvRjLc0xgXkd96PEXqnhoWuFGcXg=
Subject key identifier: 96:A7:F2:6B:4F:5E:68:FF:19:7F:AE:A1:10:9E:7F:A4:55:89:B1:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93947B3EC5F311EF8882A458762E951A.roa
Signing time: Sun 29 Dec 2024 14:45:41 +0000
ROA not before: Sun 29 Dec 2024 14:45:38 +0000
ROA not after: Sun 12 Dec 2027 14:45:38 +0000
asID: 17561
IP address blocks: 154.213.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77292 (0x12dec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:45:38 2024 GMT
Not After : Dec 12 14:45:38 2027 GMT
Subject: CN=67716095-c975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:52:9d:f2:3b:9c:c8:a6:38:74:05:a1:c7:
fb:49:2d:76:cb:f1:82:87:97:d4:f1:68:ae:e9:85:
d2:73:49:01:1a:21:92:f5:ee:8b:27:24:80:f2:d2:
0c:24:5d:d8:be:4a:56:13:bd:8b:7a:ec:8b:dd:b0:
f4:f3:57:0b:37:2a:61:dc:85:d9:a6:7e:c4:fa:3e:
50:4e:e1:6a:8e:bc:f2:35:99:7e:2e:73:c9:db:9e:
ba:46:f2:f6:f2:aa:ff:7f:12:8a:3b:1d:3b:ba:28:
7e:4d:df:3c:1c:1c:93:93:17:ce:1f:e9:e3:87:26:
20:7e:2b:cc:cf:bb:c3:c5:43:91:9e:85:34:a1:54:
80:4a:95:00:fe:05:e7:3e:42:db:b5:af:f2:ce:30:
e6:41:70:86:a5:58:13:5f:a8:b2:cd:41:c2:57:6d:
cb:01:ee:30:7a:55:6c:b5:02:e0:2e:87:31:a1:9f:
29:42:3b:58:6e:af:9b:14:cb:7b:1d:63:31:3b:4d:
99:0d:3b:7d:79:23:53:ed:1a:95:ca:5c:35:49:51:
43:d8:93:09:ae:6c:71:f6:2b:2b:d8:35:9e:c8:ec:
33:8b:cc:94:cf:c8:96:51:f0:97:f2:ec:fd:a7:62:
90:b3:32:5b:51:2d:d6:b3:1d:10:20:21:29:6c:70:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A7:F2:6B:4F:5E:68:FF:19:7F:AE:A1:10:9E:7F:A4:55:89:B1:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93947B3EC5F311EF8882A458762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.19.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ea:5e:f0:8e:d1:29:5c:2c:1b:01:a9:8c:20:61:59:da:ce:
e0:ad:ea:18:65:7e:4f:1c:65:e5:97:16:ae:ae:02:a6:76:ce:
f6:a4:e1:0f:0d:84:72:c8:d1:60:ae:fd:93:b5:49:0a:79:db:
f4:3c:b9:b5:78:a2:31:be:c4:be:58:cd:35:fc:64:79:67:7b:
73:9d:28:ee:d6:78:be:44:9b:03:04:70:c9:32:e7:a0:d2:4e:
63:01:bd:29:1b:bb:85:85:7c:ab:17:52:9f:1f:20:e0:08:f2:
24:c5:d1:01:e4:9e:f6:ca:25:35:94:a5:b7:94:83:7b:e5:22:
46:29:4e:04:41:f6:fb:c8:ae:00:8c:64:de:ae:44:f9:c3:f8:
bb:1f:ac:09:c0:3a:60:63:cf:86:cd:f5:10:a5:ec:1e:eb:60:
68:2c:4a:eb:02:7b:f9:63:78:c3:80:01:aa:8a:43:35:db:74:
2c:15:90:11:08:c3:34:65:e9:17:cc:d8:ed:65:fa:f8:c2:1d:
85:0f:7e:72:f4:ea:fa:35:e9:8f:54:16:77:d9:47:61:3f:0f:
d2:79:89:5b:9a:a2:5f:29:c2:12:2f:9e:4a:84:42:b7:cc:ce:
4e:4a:6c:3b:36:00:c9:c3:8b:bd:de:f9:6a:d4:63:de:66:10:
c8:f6:41:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS3sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTQ0NTM4WhcNMjcxMjEyMTQ0NTM4WjAYMRYw
FAYDVQQDEw02NzcxNjA5NS1jOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0C9SnfI7nMimOHQFocf7SS12y/GCh5fU8Wiu6YXSc0kBGiGS9e6LJySA
8tIMJF3YvkpWE72LeuyL3bD081cLNyph3IXZpn7E+j5QTuFqjrzyNZl+LnPJ2566
RvL28qr/fxKKOx07uih+Td88HByTkxfOH+njhyYgfivMz7vDxUORnoU0oVSASpUA
/gXnPkLbta/yzjDmQXCGpVgTX6iyzUHCV23LAe4welVstQLgLocxoZ8pQjtYbq+b
FMt7HWMxO02ZDTt9eSNT7RqVylw1SVFD2JMJrmxx9isr2DWeyOwzi8yUz8iWUfCX
8uz9p2KQszJbUS3Wsx0QICEpbHCJhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJan
8mtPXmj/GX+uoRCef6RVibH3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Mzk0N0IzRUM1RjMxMUVGODg4MkE0NTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtUTMA0GCSqGSIb3DQEB
CwUAA4IBAQA86l7wjtEpXCwbAamMIGFZ2s7greoYZX5PHGXllxaurgKmds72pOEP
DYRyyNFgrv2TtUkKedv0PLm1eKIxvsS+WM01/GR5Z3tznSju1ni+RJsDBHDJMueg
0k5jAb0pG7uFhXyrF1KfHyDgCPIkxdEB5J72yiU1lKW3lIN75SJGKU4EQfb7yK4A
jGTerkT5w/i7H6wJwDpgY8+GzfUQpewe62BoLErrAnv5Y3jDgAGqikM123QsFZAR
CMM0ZekXzNjtZfr4wh2FD35y9Or6NemPVBZ32UdhPw/SeYlbmqJfKcISL55KhEK3
zM5OSmw7NgDJw4u93vlq1GPeZhDI9kEQ
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:08:55 2025 by rpki-client