Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9C3D2B6AB3411EFBA8A93A6762E951A.roa
File: B9C3D2B6AB3411EFBA8A93A6762E951A.roa (raw, json)
Hash identifier: HkOk2T10Zd+aMVsYD0ns7VXQIGfITCVpY8yhkOwoEOE=
Subject key identifier: BC:2E:BA:3B:53:B8:3B:87:B2:F5:42:37:6A:22:35:8C:49:76:FF:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011350
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9C3D2B6AB3411EFBA8A93A6762E951A.roa
Signing time: Mon 25 Nov 2024 13:54:01 +0000
ROA not before: Mon 25 Nov 2024 13:53:57 +0000
ROA not after: Wed 07 Jan 2026 13:53:57 +0000
asID: 139057
IP address blocks: 154.85.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70480 (0x11350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 25 13:53:57 2024 GMT
Not After : Jan 7 13:53:57 2026 GMT
Subject: CN=67448179-41c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:96:4c:fa:98:cf:d9:ed:3d:2b:88:13:b2:
40:d0:4f:5a:71:87:59:29:07:7c:75:b3:e7:19:be:
8c:9c:9c:48:e8:5b:ff:41:32:10:9a:bd:b4:63:d6:
1d:89:95:3c:01:58:e5:c0:b4:3d:cc:e0:18:5e:99:
35:32:9e:f9:97:28:5a:77:b2:c4:d7:e1:33:26:0d:
a2:c7:5e:6f:f1:05:9b:03:ae:43:26:4b:1b:b8:81:
8a:9d:41:97:30:aa:90:9e:89:43:c2:b3:59:18:ae:
d7:6e:35:b4:12:0c:f3:a8:13:45:ef:ac:19:e9:62:
15:09:82:ab:68:b3:bc:c6:12:a5:6e:17:2d:b4:26:
bc:95:d4:45:50:ef:88:69:7f:27:c6:c8:03:35:95:
e7:03:72:bd:9c:4c:0e:16:24:68:1c:20:e4:50:c6:
92:f5:ed:40:b0:9f:8f:e9:36:b6:34:25:6b:95:3d:
45:a9:fd:19:e2:c6:72:93:15:35:7d:27:45:df:72:
38:de:d6:7e:50:a2:d7:e4:03:5c:d9:e5:20:c5:fd:
49:b0:16:73:f9:72:9e:a4:9f:6f:ff:77:1e:26:3b:
e3:2f:90:b6:f0:b8:5a:aa:f3:85:13:19:4c:fb:18:
94:df:ad:d5:a7:87:05:28:15:6d:95:ec:03:48:26:
14:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2E:BA:3B:53:B8:3B:87:B2:F5:42:37:6A:22:35:8C:49:76:FF:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9C3D2B6AB3411EFBA8A93A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.65.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:d5:13:1c:87:4d:eb:db:04:c5:fa:16:da:ac:4e:07:02:fe:
d2:fd:8b:4c:fa:79:39:2e:c7:92:e7:6e:7f:97:bf:67:0b:18:
8f:83:36:48:58:6d:6a:0e:25:d7:c1:5a:d5:bd:de:b4:1d:3d:
9f:39:c8:ef:4e:9b:fe:bf:89:ec:9b:c7:5e:8d:de:74:13:57:
e4:93:4b:31:bc:f5:dc:83:24:34:bc:0f:9d:fc:4c:c7:64:72:
5d:11:cd:08:02:35:82:c2:05:6e:e6:c5:03:53:d1:67:b8:d8:
48:71:3a:9f:78:8a:60:66:54:be:1b:cf:79:cc:45:cf:47:33:
b1:2a:83:4c:aa:0e:dc:be:34:00:9b:cb:48:03:92:3b:77:6f:
2a:97:1e:fe:fe:28:cd:bc:10:28:38:80:33:4e:a8:be:82:ec:
c5:ef:dd:f3:97:cd:a4:9d:e7:ac:86:42:38:f2:06:03:42:66:
42:f6:33:4d:29:f1:49:73:5b:a3:51:c1:dc:43:f8:1d:71:72:
85:c1:f0:e1:5a:8e:ed:6e:d6:a4:b1:ce:99:c3:cd:42:02:3b:
e0:fd:6f:d7:3b:de:53:2f:c8:3e:05:71:01:b5:ce:f6:41:35:
d7:3b:ed:2b:06:25:ac:58:b2:9a:0d:84:de:d0:c6:5a:6b:92:
00:d0:75:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARNQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTI1MTM1MzU3WhcNMjYwMTA3MTM1MzU3WjAYMRYw
FAYDVQQDEw02NzQ0ODE3OS00MWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzQ2WTPqYz9ntPSuIE7JA0E9acYdZKQd8dbPnGb6MnJxI6Fv/QTIQmr20
Y9YdiZU8AVjlwLQ9zOAYXpk1Mp75lyhad7LE1+EzJg2ix15v8QWbA65DJksbuIGK
nUGXMKqQnolDwrNZGK7XbjW0EgzzqBNF76wZ6WIVCYKraLO8xhKlbhcttCa8ldRF
UO+IaX8nxsgDNZXnA3K9nEwOFiRoHCDkUMaS9e1AsJ+P6Ta2NCVrlT1Fqf0Z4sZy
kxU1fSdF33I43tZ+UKLX5ANc2eUgxf1JsBZz+XKepJ9v/3ceJjvjL5C28LhaqvOF
ExlM+xiU363Vp4cFKBVtlewDSCYUKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLwu
ujtTuDuHsvVCN2oiNYxJdv+jMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9COUMzRDJCNkFCMzQxMUVGQkE4QTkzQTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlVBMA0GCSqGSIb3DQEB
CwUAA4IBAQC81RMch03r2wTF+hbarE4HAv7S/YtM+nk5LseS525/l79nCxiPgzZI
WG1qDiXXwVrVvd60HT2fOcjvTpv+v4nsm8dejd50E1fkk0sxvPXcgyQ0vA+d/EzH
ZHJdEc0IAjWCwgVu5sUDU9FnuNhIcTqfeIpgZlS+G895zEXPRzOxKoNMqg7cvjQA
m8tIA5I7d28qlx7+/ijNvBAoOIAzTqi+guzF793zl82kneeshkI48gYDQmZC9jNN
KfFJc1ujUcHcQ/gdcXKFwfDhWo7tbtaksc6Zw81CAjvg/W/XO95TL8g+BXEBtc72
QTXXO+0rBiWsWLKaDYTe0MZaa5IA0HXG
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:44:14 2025 by rpki-client