Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E020CE6F61111EFA5FEF54A762E951A.roa
File: 9E020CE6F61111EFA5FEF54A762E951A.roa (raw, json)
Hash identifier: blZVwOUTGlOfMbaHiMDm9MGSHp32vXZlYTKNruWBd8Y=
Subject key identifier: 22:01:D9:77:2F:22:65:B7:DA:C7:CB:77:7C:D7:38:FE:72:68:90:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016BF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E020CE6F61111EFA5FEF54A762E951A.roa
Signing time: Fri 28 Feb 2025 20:21:40 +0000
ROA not before: Fri 28 Feb 2025 20:21:36 +0000
ROA not after: Sun 13 Apr 2025 20:21:36 +0000
asID: 138915
IP address blocks: 154.206.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93173 (0x16bf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 20:21:36 2025 GMT
Not After : Apr 13 20:21:36 2025 GMT
Subject: CN=67c21ad4-6ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:37:49:88:95:22:4c:47:5b:44:b4:1a:ff:
cf:bd:f7:e1:c8:26:a5:37:31:6c:54:53:97:09:b1:
a6:09:9d:1b:e6:1f:14:44:5f:aa:cc:6d:06:c7:6b:
79:c5:86:e3:d1:3f:25:48:7a:69:fc:21:9d:13:f4:
68:18:80:df:78:31:ce:f7:4e:22:c1:02:7d:d4:cc:
02:38:95:7a:fb:76:69:70:07:5e:f3:b8:a9:dd:f7:
c8:3f:43:79:8c:46:8d:28:07:7d:2f:35:8d:f7:fb:
05:83:cc:b5:07:78:d3:04:78:72:7e:dd:10:4d:2d:
5b:a2:8d:e8:9a:51:6d:98:e9:c7:15:19:60:54:79:
4e:2d:69:f6:16:ef:a8:5b:09:cf:04:10:b5:09:b9:
03:1b:ca:d0:08:c6:31:be:eb:5a:cd:43:40:24:46:
2c:b2:e6:dc:38:c3:61:ee:d8:8b:25:3e:d9:b9:f2:
91:57:67:0a:b3:4b:2f:7f:6e:ed:8a:ad:e6:11:b7:
3a:61:82:47:90:24:f3:e9:2a:66:6b:87:ba:04:5c:
fa:57:77:51:b8:0d:f2:fd:4a:1c:79:f4:10:c4:80:
01:3e:11:f9:63:64:48:53:a2:75:28:56:e1:92:38:
eb:b4:fe:55:f0:c0:51:54:fd:20:d5:a9:75:72:0c:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:D9:77:2F:22:65:B7:DA:C7:CB:77:7C:D7:38:FE:72:68:90:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E020CE6F61111EFA5FEF54A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.82.0/23
Signature Algorithm: sha256WithRSAEncryption
13:b0:3a:dc:8d:51:83:c1:31:7b:1c:2d:1a:b5:e8:b0:e9:b5:
83:24:44:8c:8b:1d:c9:51:03:81:31:6d:2d:24:b8:63:37:c7:
42:cc:86:19:7e:67:1d:ac:76:89:82:30:12:66:2a:62:3d:8b:
93:9b:ba:05:f2:94:02:17:f7:8a:2a:f3:5d:49:23:a7:eb:03:
33:e0:76:6c:9e:f8:37:75:39:3d:eb:ef:7d:6d:cc:87:86:62:
26:c7:eb:eb:fd:b5:fa:d2:c3:dd:b9:44:29:99:80:aa:8e:ed:
8e:47:83:7d:7a:eb:48:65:41:07:7f:0f:03:16:03:df:8a:6c:
b7:ab:25:51:70:d9:f3:ed:a3:c6:bc:b8:8b:16:af:c7:4d:46:
6f:b4:60:2d:2b:2b:f5:a9:1a:7b:f0:e4:f5:6f:9f:b0:66:c5:
6f:13:49:25:69:80:e3:6c:1c:55:eb:de:57:48:87:d6:4f:b8:
d3:db:94:57:c5:ea:75:bc:79:55:a5:31:13:b5:f6:83:03:20:
a6:db:33:ad:5d:ea:ad:c1:8d:4f:d4:9d:87:1e:ee:9e:e8:50:
81:e0:42:29:eb:b9:d2:63:ec:69:97:4b:be:10:8e:58:cf:55:
e5:1b:cb:c3:d9:fc:e3:2e:11:68:b5:0e:34:95:43:2b:67:c2:
da:11:8c:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWv1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjAyMTM2WhcNMjUwNDEzMjAyMTM2WjAYMRYw
FAYDVQQDEw02N2MyMWFkNC02YWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2y43SYiVIkxHW0S0Gv/PvffhyCalNzFsVFOXCbGmCZ0b5h8URF+qzG0G
x2t5xYbj0T8lSHpp/CGdE/RoGIDfeDHO904iwQJ91MwCOJV6+3ZpcAde87ip3ffI
P0N5jEaNKAd9LzWN9/sFg8y1B3jTBHhyft0QTS1boo3omlFtmOnHFRlgVHlOLWn2
Fu+oWwnPBBC1CbkDG8rQCMYxvutazUNAJEYssubcOMNh7tiLJT7ZufKRV2cKs0sv
f27tiq3mEbc6YYJHkCTz6Spma4e6BFz6V3dRuA3y/UocefQQxIABPhH5Y2RIU6J1
KFbhkjjrtP5V8MBRVP0g1al1cgxIuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCIB
2XcvImW32sfLd3zXOP5yaJCjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RTAyMENFNkY2MTExMUVGQTVGRUY1NEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms5SMA0GCSqGSIb3DQEB
CwUAA4IBAQATsDrcjVGDwTF7HC0ateiw6bWDJESMix3JUQOBMW0tJLhjN8dCzIYZ
fmcdrHaJgjASZipiPYuTm7oF8pQCF/eKKvNdSSOn6wMz4HZsnvg3dTk96+99bcyH
hmImx+vr/bX60sPduUQpmYCqju2OR4N9eutIZUEHfw8DFgPfimy3qyVRcNnz7aPG
vLiLFq/HTUZvtGAtKyv1qRp78OT1b5+wZsVvE0klaYDjbBxV695XSIfWT7jT25RX
xep1vHlVpTETtfaDAyCm2zOtXeqtwY1P1J2HHu6e6FCB4EIp67nSY+xpl0u+EI5Y
z1XlG8vD2fzjLhFotQ40lUMrZ8LaEYzE
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:23 2025 by rpki-client