Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DB3014C60C11EF9F7C5875762E951A.roa
File: B2DB3014C60C11EF9F7C5875762E951A.roa (raw, json)
Hash identifier: ywC5QkErXgefw986rqpv6w84MSiZAy2UykzskGhs++4=
Subject key identifier: C2:28:95:EF:8B:CD:C4:AD:EA:82:F3:4B:F1:5E:D4:3F:BC:D1:76:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DB3014C60C11EF9F7C5875762E951A.roa
Signing time: Sun 29 Dec 2024 17:45:31 +0000
ROA not before: Sun 29 Dec 2024 17:45:28 +0000
ROA not after: Sun 12 Dec 2027 17:45:28 +0000
asID: 17561
IP address blocks: 154.217.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77506 (0x12ec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:45:28 2024 GMT
Not After : Dec 12 17:45:28 2027 GMT
Subject: CN=67718abb-9c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:29:d4:66:ca:50:3c:00:17:d0:dd:41:84:
8f:64:d9:f2:d1:ae:af:ca:46:76:fa:c2:7b:e7:39:
0f:a3:6a:d9:42:9a:94:62:eb:43:fb:1a:7a:9f:cf:
e0:9a:13:f5:e8:5b:86:51:6c:c7:1c:59:a8:22:fb:
8c:83:90:8c:c7:14:37:4c:b8:d2:8f:bb:a2:8c:ed:
94:92:95:f2:73:c8:8a:c4:1e:5d:75:f6:7d:0d:10:
5f:a6:e8:1e:2b:47:2c:ce:5b:3a:91:e1:55:b7:11:
d5:d8:90:e7:a6:2a:a6:36:3e:0e:64:27:72:87:05:
19:c9:6e:b3:7d:a5:eb:25:43:e0:f5:90:9c:cb:7f:
45:f6:ee:ca:eb:2f:9a:e7:a1:8d:e7:0f:a0:16:70:
f5:bd:8c:fa:05:af:ff:4e:44:06:09:c9:23:40:52:
90:ee:0b:70:4e:29:3f:f7:4c:19:61:60:93:9b:b4:
d7:8b:fe:9b:dd:a6:73:98:5c:9a:22:18:b9:a1:aa:
f3:77:01:21:b1:71:62:ec:1d:af:d1:7d:91:01:0c:
e4:5f:37:de:54:0a:3e:f9:e5:c3:63:7c:44:5c:a1:
d5:99:00:0a:08:5a:02:e7:4b:c2:7b:b2:ca:24:f7:
25:b4:ff:a7:32:ff:73:df:19:17:7b:8d:14:5b:3f:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:28:95:EF:8B:CD:C4:AD:EA:82:F3:4B:F1:5E:D4:3F:BC:D1:76:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DB3014C60C11EF9F7C5875762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.68.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:05:9d:f4:5f:08:4b:1e:29:3f:de:d9:f8:bb:83:15:03:a8:
a7:e9:85:bd:61:66:d9:d1:bd:2b:41:25:ca:df:c9:7f:21:cc:
fb:c0:f3:98:9a:d7:65:b4:5e:5f:7c:f5:57:90:4f:c9:57:68:
3d:9e:f1:10:b8:6a:05:46:ae:b7:70:40:a7:a4:fb:5b:79:4b:
8d:2b:66:92:44:b5:e5:34:a5:67:52:ce:21:fb:12:fa:5d:60:
57:4e:f7:02:6e:41:75:cd:9e:5b:08:4e:8f:72:a7:88:98:29:
18:e8:8a:e1:25:8a:33:10:68:47:e0:6d:32:fc:d0:6c:56:67:
eb:22:bb:74:98:9e:0e:16:bc:7a:44:20:06:88:f5:5e:75:03:
18:0a:2f:0f:30:5a:d6:f0:b4:3a:18:c2:ed:44:8e:de:86:95:
fb:db:eb:b3:d3:20:70:7f:69:05:d2:23:80:58:99:d2:bc:49:
2d:25:c3:c9:c8:8a:4b:ab:36:59:0f:d1:60:1b:1a:f9:18:9f:
da:30:71:a7:10:64:59:56:c9:09:90:52:ab:69:cf:ee:a4:ef:
58:9a:ae:bd:82:8e:b5:d2:98:62:9c:c6:95:d1:45:56:15:86:
fe:81:a6:46:aa:94:11:34:44:17:20:0d:b4:bc:28:8a:be:1a:
be:55:ca:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS7CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTc0NTI4WhcNMjcxMjEyMTc0NTI4WjAYMRYw
FAYDVQQDEw02NzcxOGFiYi05YzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwowp1GbKUDwAF9DdQYSPZNny0a6vykZ2+sJ75zkPo2rZQpqUYutD+xp6
n8/gmhP16FuGUWzHHFmoIvuMg5CMxxQ3TLjSj7uijO2UkpXyc8iKxB5ddfZ9DRBf
pugeK0cszls6keFVtxHV2JDnpiqmNj4OZCdyhwUZyW6zfaXrJUPg9ZCcy39F9u7K
6y+a56GN5w+gFnD1vYz6Ba//TkQGCckjQFKQ7gtwTik/90wZYWCTm7TXi/6b3aZz
mFyaIhi5oarzdwEhsXFi7B2v0X2RAQzkXzfeVAo++eXDY3xEXKHVmQAKCFoC50vC
e7LKJPcltP+nMv9z3xkXe40UWz/FuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMIo
le+LzcSt6oLzS/Fe1D+80XZ1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMkRCMzAxNEM2MEMxMUVGOUY3QzU4NzU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtlEMA0GCSqGSIb3DQEB
CwUAA4IBAQArBZ30XwhLHik/3tn4u4MVA6in6YW9YWbZ0b0rQSXK38l/Icz7wPOY
mtdltF5ffPVXkE/JV2g9nvEQuGoFRq63cECnpPtbeUuNK2aSRLXlNKVnUs4h+xL6
XWBXTvcCbkF1zZ5bCE6PcqeImCkY6IrhJYozEGhH4G0y/NBsVmfrIrt0mJ4OFrx6
RCAGiPVedQMYCi8PMFrW8LQ6GMLtRI7ehpX72+uz0yBwf2kF0iOAWJnSvEktJcPJ
yIpLqzZZD9FgGxr5GJ/aMHGnEGRZVskJkFKrac/upO9Ymq69go610phinMaV0UVW
FYb+gaZGqpQRNEQXIA20vCiKvhq+Vcpx
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:16 2025 by rpki-client