Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DF5D1D6B6DA11EFB5F8E68F762E951A.roa
File: 9DF5D1D6B6DA11EFB5F8E68F762E951A.roa (raw, json)
Hash identifier: QbLDHLUGKbLSSBlg2lpg3l/MwBOQEBLCkrjdOhWai7A=
Subject key identifier: 0F:93:55:21:61:85:64:12:57:C8:7F:56:FC:D5:BA:92:09:B2:B7:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011A6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DF5D1D6B6DA11EFB5F8E68F762E951A.roa
Signing time: Tue 10 Dec 2024 09:39:14 +0000
ROA not before: Tue 10 Dec 2024 09:39:10 +0000
ROA not after: Thu 11 Dec 2025 09:39:10 +0000
asID: 138456
IP address blocks: 154.197.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72302 (0x11a6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 10 09:39:10 2024 GMT
Not After : Dec 11 09:39:10 2025 GMT
Subject: CN=67580c42-d3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:23:d7:4b:a2:fb:85:96:ab:56:f1:91:9c:
b8:17:62:1c:06:a8:e6:4e:3e:cd:4a:e6:61:81:6b:
79:06:5c:5b:99:ac:5a:41:9f:ba:62:7a:0d:bc:e4:
55:24:3b:ff:49:42:44:3b:26:50:01:c0:af:a3:7f:
fe:cf:df:c3:3a:83:44:31:12:6a:d8:7d:74:5d:91:
1d:cb:0b:6e:53:5d:42:57:ef:15:44:ea:bc:b3:23:
38:d2:ad:96:37:8b:cc:0e:b9:fe:f6:99:7c:41:a2:
2f:6a:77:99:b5:90:33:23:ad:eb:5c:83:da:92:29:
18:8d:1f:02:87:58:46:a5:79:fd:9c:4e:58:7a:74:
e9:b6:6c:e5:ee:98:93:2d:ee:e7:de:e6:0c:35:52:
06:25:33:b1:ae:8a:f8:2b:e9:df:de:17:a3:cf:1f:
fa:e8:f3:bd:c2:7d:1f:6e:91:84:73:a7:f8:35:e4:
9e:cd:c7:d4:fc:7f:71:59:fc:cd:df:ca:36:dd:de:
e3:d1:b9:e6:66:30:7e:f4:27:0f:0f:b7:70:d8:e7:
8f:be:aa:62:0f:ae:93:f0:41:17:1d:9f:61:7f:54:
ea:e1:2d:ee:8d:be:5f:2c:de:2b:15:59:33:5b:ab:
49:a2:39:a5:d7:85:88:8f:2f:33:a3:c9:4f:6a:84:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:93:55:21:61:85:64:12:57:C8:7F:56:FC:D5:BA:92:09:B2:B7:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DF5D1D6B6DA11EFB5F8E68F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.76.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a3:e3:93:ac:af:5a:ba:d9:c0:8e:4f:b3:ba:98:36:9a:47:
ea:12:71:47:6f:45:e4:a7:8d:d4:52:e8:18:51:29:39:6e:e0:
99:27:04:19:7e:9c:d3:57:71:fd:0b:5c:7c:da:d8:01:f5:2a:
cd:97:49:12:2e:d6:f4:2b:c7:19:94:aa:f2:dc:1a:30:a0:c3:
25:25:0a:dd:c8:ea:31:cd:fd:24:19:16:1a:66:83:fd:ba:58:
b3:1a:aa:25:1a:47:14:5c:23:ea:53:fc:f7:eb:7b:f3:fb:35:
fa:8a:c6:7e:a3:2c:e1:75:df:25:45:af:3d:bd:06:8f:ad:65:
3d:ca:39:65:9e:1f:60:d5:12:1a:5f:4d:37:2e:2a:4d:69:e7:
cd:43:4f:61:ac:06:46:a2:f2:48:41:1c:18:00:fd:16:6c:4b:
09:ac:23:7d:63:d2:47:a4:9d:a5:a4:b8:2f:69:38:b8:5a:60:
d3:94:d5:4a:71:0d:33:e1:79:73:99:34:00:30:1d:42:e3:c2:
41:79:95:75:98:1a:83:3d:3a:0f:83:ad:8f:be:fb:d4:bd:51:
b1:6d:f9:12:fd:80:c0:ac:7c:1f:7a:59:11:79:0c:69:8f:e5:
a8:a5:b4:87:1d:93:34:79:d7:5d:2e:c5:09:7d:b2:79:60:0b:
bd:36:0b:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARpuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjEwMDkzOTEwWhcNMjUxMjExMDkzOTEwWjAYMRYw
FAYDVQQDEw02NzU4MGM0Mi1kM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtxUj10ui+4WWq1bxkZy4F2IcBqjmTj7NSuZhgWt5BlxbmaxaQZ+6YnoN
vORVJDv/SUJEOyZQAcCvo3/+z9/DOoNEMRJq2H10XZEdywtuU11CV+8VROq8syM4
0q2WN4vMDrn+9pl8QaIvaneZtZAzI63rXIPakikYjR8Ch1hGpXn9nE5YenTptmzl
7piTLe7n3uYMNVIGJTOxror4K+nf3hejzx/66PO9wn0fbpGEc6f4NeSezcfU/H9x
WfzN38o23d7j0bnmZjB+9CcPD7dw2OePvqpiD66T8EEXHZ9hf1Tq4S3ujb5fLN4r
FVkzW6tJojml14WIjy8zo8lPaoQVRQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA+T
VSFhhWQSV8h/VvzVupIJsrcFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85REY1RDFENkI2REExMUVGQjVGOEU2OEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVMMA0GCSqGSIb3DQEB
CwUAA4IBAQBZo+OTrK9autnAjk+zupg2mkfqEnFHb0Xkp43UUugYUSk5buCZJwQZ
fpzTV3H9C1x82tgB9SrNl0kSLtb0K8cZlKry3BowoMMlJQrdyOoxzf0kGRYaZoP9
ulizGqolGkcUXCPqU/z363vz+zX6isZ+oyzhdd8lRa89vQaPrWU9yjllnh9g1RIa
X003LipNaefNQ09hrAZGovJIQRwYAP0WbEsJrCN9Y9JHpJ2lpLgvaTi4WmDTlNVK
cQ0z4XlzmTQAMB1C48JBeZV1mBqDPToPg62PvvvUvVGxbfkS/YDArHwfelkReQxp
j+WopbSHHZM0edddLsUJfbJ5YAu9Ngtz
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:03 2025 by rpki-client