Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB1CDEF2F35311EFB6EF9C74762E951A.roa
File: BB1CDEF2F35311EFB6EF9C74762E951A.roa (raw, json)
Hash identifier: K8gRw5IAajkwtY8wBvWmNb+jTyk6L0X3ihi6ATSOUoQ=
Subject key identifier: 6C:D2:7A:31:45:3C:20:FA:16:C8:F3:7F:23:FA:95:DF:1B:5A:44:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB1CDEF2F35311EFB6EF9C74762E951A.roa
Signing time: Tue 25 Feb 2025 08:37:22 +0000
ROA not before: Tue 25 Feb 2025 08:37:18 +0000
ROA not after: Mon 07 Apr 2025 08:37:18 +0000
asID: 63139
IP address blocks: 154.223.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89518 (0x15dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 08:37:18 2025 GMT
Not After : Apr 7 08:37:18 2025 GMT
Subject: CN=67bd8142-7876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:9f:b0:6f:be:1e:a6:ec:14:5e:ac:0e:45:
06:93:73:57:5a:11:94:86:ea:03:ed:92:87:c3:bc:
e0:66:b6:3a:2d:ed:db:fd:96:15:db:a2:fa:7a:ad:
9c:1b:02:93:87:03:6d:a9:95:bc:4f:ed:e7:5c:a8:
f3:d2:f1:c1:aa:fc:18:2b:20:a3:b7:9d:8a:51:dc:
d6:98:e2:39:75:82:5c:e0:8a:ed:dc:7d:c8:d6:68:
11:5c:5c:84:93:22:9e:3f:e4:b2:83:36:7b:ba:f8:
b4:0a:f1:23:60:45:40:32:2e:64:b5:cd:6e:8c:81:
89:7d:58:9a:49:ec:b3:68:87:3c:1a:b6:d4:d2:26:
79:48:f2:73:5a:61:20:5d:62:ed:30:c2:51:22:fc:
64:fb:61:82:d5:78:31:75:32:a5:16:e7:9a:ec:57:
e4:bb:ab:a7:2f:39:59:e2:45:c4:91:cf:9b:b8:4b:
cd:76:aa:b5:ae:2e:47:fe:68:7e:3c:b7:26:3d:81:
36:12:f3:af:1d:3d:5a:f1:7f:a0:94:34:f5:a4:3f:
09:05:c9:de:a2:47:4f:29:8b:92:87:bb:55:8f:56:
e7:70:31:c9:bb:7b:4c:38:90:5a:b4:11:fe:fc:43:
70:7d:47:05:1a:ad:84:19:78:da:f5:96:bd:a2:01:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D2:7A:31:45:3C:20:FA:16:C8:F3:7F:23:FA:95:DF:1B:5A:44:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB1CDEF2F35311EFB6EF9C74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.39.0/24
Signature Algorithm: sha256WithRSAEncryption
16:36:80:5b:9e:f8:e7:d3:b9:87:af:16:23:69:c9:6d:d7:2a:
c2:31:38:28:a2:c0:26:f9:83:c8:6f:be:c4:a7:b4:a3:d0:1c:
41:21:ef:ee:02:31:d6:03:92:b7:5d:95:1f:f3:88:39:42:04:
ce:0b:8d:bd:68:52:88:a5:ca:6a:99:97:dc:1b:a3:d7:0c:55:
3e:a8:d1:86:49:df:23:4c:a5:4d:53:7c:49:71:69:1f:ec:68:
71:75:46:f0:b7:42:66:5f:b9:dd:d8:06:95:3c:ad:74:1e:36:
a7:26:19:03:79:85:37:aa:c5:5f:6b:3d:8d:7a:e1:ce:6c:3a:
20:b3:ef:49:b3:e2:fd:f0:ab:a7:ec:23:0c:52:06:0d:46:ce:
8b:65:b4:55:7b:20:11:d1:16:61:e8:37:7e:99:c7:ed:3b:6d:
ec:fc:1c:c6:8b:0a:0f:ea:6d:4d:87:cc:07:30:c0:e7:3f:dc:
03:38:55:74:09:cc:be:c5:9b:7c:0b:39:f9:b6:13:41:81:a7:
da:e2:ff:4b:71:09:5a:c4:fb:2d:93:3f:b5:38:ec:f1:3c:ca:
ed:50:a7:25:db:52:64:25:25:a4:63:1a:85:9b:97:11:31:14:
5a:04:51:24:26:5a:09:9f:58:5a:b2:a2:11:e0:db:6c:8b:d2:
b8:8c:99:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAV2uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI1MDgzNzE4WhcNMjUwNDA3MDgzNzE4WjAYMRYw
FAYDVQQDEw02N2JkODE0Mi03ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqoqfsG++HqbsFF6sDkUGk3NXWhGUhuoD7ZKHw7zgZrY6Le3b/ZYV26L6
eq2cGwKThwNtqZW8T+3nXKjz0vHBqvwYKyCjt52KUdzWmOI5dYJc4Irt3H3I1mgR
XFyEkyKeP+SygzZ7uvi0CvEjYEVAMi5ktc1ujIGJfViaSeyzaIc8GrbU0iZ5SPJz
WmEgXWLtMMJRIvxk+2GC1XgxdTKlFuea7Ffku6unLzlZ4kXEkc+buEvNdqq1ri5H
/mh+PLcmPYE2EvOvHT1a8X+glDT1pD8JBcneokdPKYuSh7tVj1bncDHJu3tMOJBa
tBH+/ENwfUcFGq2EGXja9Za9ogHu3QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGzS
ejFFPCD6FsjzfyP6ld8bWkRPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQjFDREVGMkYzNTMxMUVGQjZFRjlDNzQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8nMA0GCSqGSIb3DQEB
CwUAA4IBAQAWNoBbnvjn07mHrxYjaclt1yrCMTgoosAm+YPIb77Ep7Sj0BxBIe/u
AjHWA5K3XZUf84g5QgTOC429aFKIpcpqmZfcG6PXDFU+qNGGSd8jTKVNU3xJcWkf
7GhxdUbwt0JmX7nd2AaVPK10HjanJhkDeYU3qsVfaz2NeuHObDogs+9Js+L98Kun
7CMMUgYNRs6LZbRVeyAR0RZh6Dd+mcftO23s/BzGiwoP6m1Nh8wHMMDnP9wDOFV0
Ccy+xZt8Czn5thNBgafa4v9LcQlaxPstkz+1OOzxPMrtUKcl21JkJSWkYxqFm5cR
MRRaBFEkJloJn1hasqIR4Ntsi9K4jJlk
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:13:23 2025 by rpki-client