Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF561026C92711EF8B52DEB5762E951A.roa
File: AF561026C92711EF8B52DEB5762E951A.roa (raw, json)
Hash identifier: AQ/QtWz2tcyKzZi1cuJ289B4V/HnzWqP5GU9908q2Mo=
Subject key identifier: C1:8E:A5:DF:B9:6E:A9:67:AB:93:E6:96:24:6B:E7:28:1F:72:23:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013361
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF561026C92711EF8B52DEB5762E951A.roa
Signing time: Thu 02 Jan 2025 16:36:16 +0000
ROA not before: Thu 02 Jan 2025 16:36:12 +0000
ROA not after: Sat 13 Dec 2025 16:36:12 +0000
asID: 984
IP address blocks: 154.222.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78689 (0x13361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:36:12 2025 GMT
Not After : Dec 13 16:36:12 2025 GMT
Subject: CN=6776c07f-c3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:d7:a9:ca:e5:e9:a5:5b:01:6d:5e:d1:f3:
20:07:32:0e:1e:da:d2:9c:fd:81:12:a6:57:7a:49:
63:e8:88:de:dc:7f:c6:ca:f3:77:05:5a:f5:e1:a5:
03:d1:18:c8:4f:3f:bd:d7:75:f1:71:70:e3:fd:3c:
2f:3c:ff:38:de:ec:f5:24:0b:51:69:9f:96:40:09:
de:20:8c:c4:55:e4:62:6a:fd:ce:01:b4:0d:be:28:
04:9f:e5:65:6c:4d:36:df:1e:cb:0c:cd:32:ea:9f:
ba:43:dc:04:3e:6e:bf:09:73:84:38:bd:56:a4:6e:
7c:c9:d1:6d:ad:88:bf:ac:9b:c6:e0:12:11:96:d0:
a5:e3:23:da:01:e9:41:2c:47:0f:1e:a4:cc:3b:60:
17:69:9a:aa:3f:9f:4a:ce:29:4a:0d:b4:2e:8d:69:
4a:74:39:83:c3:6b:c8:ed:0d:0b:7e:c3:cc:26:7e:
12:52:d1:ed:94:e8:4b:30:bd:5d:08:b0:42:89:87:
93:3a:de:23:a5:c0:6f:95:ff:f6:21:72:ac:a4:9b:
4c:56:0a:20:a0:32:a2:94:07:04:38:63:b5:5b:86:
e3:ef:c3:e1:4d:6b:38:c9:4b:b3:fa:f6:db:02:c8:
95:49:ec:64:b6:21:9c:03:cb:fc:40:b2:95:47:0f:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8E:A5:DF:B9:6E:A9:67:AB:93:E6:96:24:6B:E7:28:1F:72:23:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF561026C92711EF8B52DEB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.123.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:1b:d6:74:c7:5a:af:5a:35:19:5b:09:13:95:fd:6c:f7:ae:
6a:76:fa:a6:6a:1f:1a:4c:cf:c5:5d:13:7e:05:87:3f:80:58:
cf:35:af:79:a1:82:3d:87:29:29:91:45:38:83:bb:1e:54:3e:
c1:80:ed:2e:61:b6:b5:a1:db:a5:36:ae:82:8d:94:03:86:19:
3e:52:a6:26:59:34:49:70:58:3b:92:9e:1b:7d:fc:38:3e:73:
f3:4f:dd:b1:73:78:21:8a:af:c4:80:2a:1e:64:93:09:da:2a:
97:c2:9e:99:ce:e5:f8:9b:b3:25:3f:43:68:da:a1:8b:ec:55:
e9:76:73:01:fe:9c:89:45:29:51:e6:ea:e8:0f:0d:e4:ae:7b:
a4:5e:84:a7:8a:34:12:c3:75:5b:c5:d2:5a:4d:7b:bf:f3:59:
78:b2:d4:c4:47:52:ae:51:9b:d8:ad:06:9b:cd:64:90:96:f3:
36:44:88:b4:b2:90:6a:0f:7a:bb:d3:7e:ba:e4:38:e9:24:ff:
8a:f2:ee:48:d9:70:97:24:d4:3b:51:1b:16:80:51:12:93:34:
cb:7e:e1:06:c3:e8:c4:ca:d6:8f:02:03:12:a5:2b:ad:1b:0e:
a1:7d:b5:19:4e:95:66:da:15:52:91:4d:03:03:3d:77:78:92:
41:60:60:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATNhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTYzNjEyWhcNMjUxMjEzMTYzNjEyWjAYMRYw
FAYDVQQDEw02Nzc2YzA3Zi1jM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1mHXqcrl6aVbAW1e0fMgBzIOHtrSnP2BEqZXeklj6Ije3H/GyvN3BVr1
4aUD0RjITz+913XxcXDj/TwvPP843uz1JAtRaZ+WQAneIIzEVeRiav3OAbQNvigE
n+VlbE023x7LDM0y6p+6Q9wEPm6/CXOEOL1WpG58ydFtrYi/rJvG4BIRltCl4yPa
AelBLEcPHqTMO2AXaZqqP59KzilKDbQujWlKdDmDw2vI7Q0LfsPMJn4SUtHtlOhL
ML1dCLBCiYeTOt4jpcBvlf/2IXKspJtMVgogoDKilAcEOGO1W4bj78PhTWs4yUuz
+vbbAsiVSexktiGcA8v8QLKVRw+e4wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMGO
pd+5bqlnq5PmliRr5ygfciNWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRjU2MTAyNkM5MjcxMUVGOEI1MkRFQjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt57MA0GCSqGSIb3DQEB
CwUAA4IBAQDQG9Z0x1qvWjUZWwkTlf1s965qdvqmah8aTM/FXRN+BYc/gFjPNa95
oYI9hykpkUU4g7seVD7BgO0uYba1odulNq6CjZQDhhk+UqYmWTRJcFg7kp4bffw4
PnPzT92xc3ghiq/EgCoeZJMJ2iqXwp6ZzuX4m7MlP0No2qGL7FXpdnMB/pyJRSlR
5uroDw3krnukXoSnijQSw3VbxdJaTXu/81l4stTER1KuUZvYrQabzWSQlvM2RIi0
spBqD3q703665DjpJP+K8u5I2XCXJNQ7URsWgFESkzTLfuEGw+jEytaPAgMSpSut
Gw6hfbUZTpVm2hVSkU0DAz13eJJBYGCu
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:58 2025 by rpki-client