Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4474F4EC40B11EF80B8074E762E951A.roa
File: B4474F4EC40B11EF80B8074E762E951A.roa (raw, json)
Hash identifier: Uf2RxG3UaJyUzIqd2ax8z6w9/guEDBuo2GXnbYmdk34=
Subject key identifier: 37:F1:29:64:16:B0:04:F0:04:24:4F:14:A2:2A:7D:A9:88:47:12:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01291B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4474F4EC40B11EF80B8074E762E951A.roa
Signing time: Fri 27 Dec 2024 04:33:22 +0000
ROA not before: Fri 27 Dec 2024 04:33:18 +0000
ROA not after: Fri 12 Dec 2025 04:33:18 +0000
asID: 984
IP address blocks: 154.196.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76059 (0x1291b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:33:18 2024 GMT
Not After : Dec 12 04:33:18 2025 GMT
Subject: CN=676e2e12-fa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:8a:bd:60:7d:47:a0:a4:6e:93:f0:2d:a3:
7d:05:63:c9:98:fe:d7:13:b5:b5:41:09:53:96:68:
d1:09:05:f9:d0:24:f0:e9:15:f6:ff:f2:41:fb:7e:
c3:2c:fa:1f:17:e4:05:3b:f8:98:94:68:65:6a:02:
35:97:04:ed:39:5a:3d:53:da:c1:94:32:82:62:78:
23:0a:2f:3b:36:61:b9:a7:3d:b9:ed:b5:56:39:1d:
d7:da:88:b7:cf:05:df:5b:6c:d2:38:5f:43:3e:2b:
e0:36:84:1c:ca:06:1e:cb:7f:c6:8d:3f:3a:9c:e6:
b1:c5:6d:3d:b0:a2:73:cd:40:b8:fb:d3:fd:19:91:
8a:a5:94:ea:48:2f:32:6b:1a:1d:75:16:1c:d5:05:
fb:e7:59:7d:7a:8a:23:11:b3:65:36:e3:a1:78:db:
6a:db:1c:2a:22:56:1e:75:40:88:01:5e:ac:9c:da:
e3:1e:54:88:2d:a3:e0:09:84:b2:f7:82:67:1f:78:
6c:d0:b0:79:26:f7:02:56:cd:c0:d8:35:56:8a:3f:
4e:af:24:a5:e5:58:b6:5c:0d:a1:52:35:7f:27:17:
bd:19:b6:35:0d:78:4a:fc:dd:bc:82:30:42:d8:cf:
40:b1:2a:5b:18:c4:d9:7c:b4:53:7b:fe:72:c7:f0:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F1:29:64:16:B0:04:F0:04:24:4F:14:A2:2A:7D:A9:88:47:12:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4474F4EC40B11EF80B8074E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.215.0/24
Signature Algorithm: sha256WithRSAEncryption
14:cc:a8:97:ce:b3:19:bd:74:00:a9:25:f3:32:37:cf:f0:31:
f4:4a:d3:7b:f2:b8:04:27:2f:3f:e3:7a:ed:d4:29:94:3f:7d:
dc:d4:a5:4a:cc:35:58:1f:04:bf:d2:ab:10:12:39:f3:2d:75:
d8:0c:2a:63:5d:9b:33:ab:cd:be:75:36:3e:f6:17:a0:8c:8c:
80:1c:e0:2a:30:8a:0e:93:2d:a5:ff:45:b3:8c:ce:53:be:d0:
26:c0:79:e0:c0:ee:f7:61:ce:73:5e:a5:18:25:1d:a3:31:9b:
22:a6:00:8d:c9:0f:75:54:31:89:6f:c4:50:b0:21:6a:e5:96:
0e:dc:ca:5e:00:30:72:54:73:e1:b3:b4:7c:fc:28:aa:77:73:
3d:0b:6b:c2:42:cc:17:8e:d3:af:ca:8b:1f:46:42:29:4a:0d:
89:7f:47:c5:fb:f7:30:54:f8:7e:4a:e1:f0:51:d3:27:fd:d0:
f9:5f:4e:54:88:56:b0:d6:7c:e8:b4:90:8d:10:c0:b7:35:e1:
ac:a0:d0:18:f4:f5:f4:38:fb:e3:0a:79:6f:e1:e3:be:5d:d6:
81:d0:41:16:d6:01:77:b5:69:43:30:f4:0c:5f:e0:55:b7:27:
e9:17:2f:b3:63:03:7a:14:3b:16:db:07:b6:15:05:58:5d:b8:
68:e9:18:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASkbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDQzMzE4WhcNMjUxMjEyMDQzMzE4WjAYMRYw
FAYDVQQDEw02NzZlMmUxMi1mYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvduKvWB9R6CkbpPwLaN9BWPJmP7XE7W1QQlTlmjRCQX50CTw6RX2//JB
+37DLPofF+QFO/iYlGhlagI1lwTtOVo9U9rBlDKCYngjCi87NmG5pz257bVWOR3X
2oi3zwXfW2zSOF9DPivgNoQcygYey3/GjT86nOaxxW09sKJzzUC4+9P9GZGKpZTq
SC8yaxoddRYc1QX751l9eoojEbNlNuOheNtq2xwqIlYedUCIAV6snNrjHlSILaPg
CYSy94JnH3hs0LB5JvcCVs3A2DVWij9OrySl5Vi2XA2hUjV/Jxe9GbY1DXhK/N28
gjBC2M9AsSpbGMTZfLRTe/5yx/AlLwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDfx
KWQWsATwBCRPFKIqfamIRxK1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNDQ3NEY0RUM0MEIxMUVGODBCODA3NEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsTXMA0GCSqGSIb3DQEB
CwUAA4IBAQAUzKiXzrMZvXQAqSXzMjfP8DH0StN78rgEJy8/43rt1CmUP33c1KVK
zDVYHwS/0qsQEjnzLXXYDCpjXZszq82+dTY+9hegjIyAHOAqMIoOky2l/0WzjM5T
vtAmwHngwO73Yc5zXqUYJR2jMZsipgCNyQ91VDGJb8RQsCFq5ZYO3MpeADByVHPh
s7R8/Ciqd3M9C2vCQswXjtOvyosfRkIpSg2Jf0fF+/cwVPh+SuHwUdMn/dD5X05U
iFaw1nzotJCNEMC3NeGsoNAY9PX0OPvjCnlv4eO+XdaB0EEW1gF3tWlDMPQMX+BV
tyfpFy+zYwN6FDsW2we2FQVYXbho6RhI
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:40:18 2025 by rpki-client