Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE211A40C1DB11EFA4E9024E762E951A.roa
File: BE211A40C1DB11EFA4E9024E762E951A.roa (raw, json)
Hash identifier: 5pAD5hrESpf8YQVuqLgfYd8fNpY61c/XscluPC3hAvk=
Subject key identifier: F8:D6:4C:FA:30:CC:78:1A:5D:01:5B:C5:27:05:B0:24:74:33:AC:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012309
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE211A40C1DB11EFA4E9024E762E951A.roa
Signing time: Tue 24 Dec 2024 09:45:00 +0000
ROA not before: Tue 24 Dec 2024 09:44:57 +0000
ROA not after: Wed 10 Dec 2025 09:44:57 +0000
asID: 984
IP address blocks: 154.194.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74505 (0x12309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:44:57 2024 GMT
Not After : Dec 10 09:44:57 2025 GMT
Subject: CN=676a829c-2ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:22:99:7d:03:b7:17:6b:ab:ee:e8:af:ef:
3f:52:bf:73:97:d5:bd:1d:2a:88:6b:30:cf:e8:f9:
c2:3a:09:52:13:94:6b:64:17:30:d5:a2:32:f8:63:
4b:b3:e6:69:db:30:5d:d2:a4:2d:c9:20:73:19:54:
e9:f2:ef:eb:2a:39:20:2f:f8:be:be:18:e3:25:42:
99:a8:ee:8f:f8:6d:f0:e8:9e:7d:df:4b:d5:1c:6e:
3d:f9:e0:fb:5a:10:c4:f8:6e:6b:d1:ac:19:6a:42:
f7:a1:cf:23:e7:33:1d:ab:df:29:fb:c5:10:9b:cd:
45:c7:b2:a2:e7:c6:36:91:41:b5:cd:c4:68:3d:fa:
e6:5b:f2:05:7e:12:ee:86:45:ec:b1:a2:25:d2:df:
be:53:30:2e:a8:75:e4:ab:4d:fc:5a:99:25:d4:ce:
36:af:2f:f3:da:a0:36:51:66:13:b3:98:6f:b7:81:
6e:1b:8c:b6:3a:7d:16:e3:28:cd:77:6d:b8:fa:b8:
37:81:c8:95:d3:86:91:6e:5b:90:0c:8c:3a:85:49:
f1:bc:28:e5:3b:88:b5:fd:c8:86:02:3e:d2:af:25:
1f:fd:84:c0:95:f5:bc:ce:9c:5a:78:8a:d7:ca:ed:
0f:3f:7e:a4:25:c6:35:bb:35:f8:c5:2e:5a:0b:8f:
9e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:4C:FA:30:CC:78:1A:5D:01:5B:C5:27:05:B0:24:74:33:AC:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE211A40C1DB11EFA4E9024E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:74:15:f5:79:21:1d:84:6a:b1:11:5c:7f:59:f4:6e:57:6b:
34:af:64:5a:36:7e:be:24:58:a5:2a:07:ea:67:e6:20:e3:ea:
ba:3a:41:0b:03:ea:f8:49:51:ea:f8:ce:f5:ae:26:a6:d3:1a:
fb:f5:68:ac:9f:d9:35:30:e4:62:70:55:d1:42:02:c8:02:4a:
00:a5:07:b2:4f:37:59:c0:d5:a5:eb:ce:be:24:09:6e:ac:21:
68:f3:58:cf:06:2e:7c:5c:6e:6c:f8:0b:1d:63:45:55:09:6f:
f9:26:af:60:2d:ef:88:4b:51:09:5e:33:77:bc:f6:8d:c8:b0:
ac:3b:e5:e0:b5:20:5b:ad:c3:a7:d2:c2:65:73:e7:d5:c5:35:
fb:43:46:83:d7:dc:32:9f:6e:0c:29:56:60:ea:d4:e6:6d:8f:
f1:90:1d:8f:9c:bb:0a:93:3a:df:2c:06:68:86:3b:ae:2d:03:
87:be:bf:7c:2b:56:df:58:f0:3c:25:b7:58:ab:fc:63:5b:c0:
9b:3b:0a:9a:db:0a:25:fb:c9:e5:01:c5:94:02:af:b9:4f:31:
fe:3f:4b:a3:48:c8:a9:26:3b:bc:8b:70:b9:83:09:71:b0:02:
47:a5:8f:df:a0:68:96:99:5d:9b:63:c2:00:51:ea:81:e6:6e:
05:ba:42:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASMJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDk0NDU3WhcNMjUxMjEwMDk0NDU3WjAYMRYw
FAYDVQQDEw02NzZhODI5Yy0yY2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4QUimX0Dtxdrq+7or+8/Ur9zl9W9HSqIazDP6PnCOglSE5RrZBcw1aIy
+GNLs+Zp2zBd0qQtySBzGVTp8u/rKjkgL/i+vhjjJUKZqO6P+G3w6J5930vVHG49
+eD7WhDE+G5r0awZakL3oc8j5zMdq98p+8UQm81Fx7Ki58Y2kUG1zcRoPfrmW/IF
fhLuhkXssaIl0t++UzAuqHXkq038Wpkl1M42ry/z2qA2UWYTs5hvt4FuG4y2On0W
4yjNd224+rg3gciV04aRbluQDIw6hUnxvCjlO4i1/ciGAj7SryUf/YTAlfW8zpxa
eIrXyu0PP36kJcY1uzX4xS5aC4+e8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPjW
TPowzHgaXQFbxScFsCR0M6xiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRTIxMUE0MEMxREIxMUVGQTRFOTAyNEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsL5MA0GCSqGSIb3DQEB
CwUAA4IBAQBsdBX1eSEdhGqxEVx/WfRuV2s0r2RaNn6+JFilKgfqZ+Yg4+q6OkEL
A+r4SVHq+M71riam0xr79Wisn9k1MORicFXRQgLIAkoApQeyTzdZwNWl686+JAlu
rCFo81jPBi58XG5s+AsdY0VVCW/5Jq9gLe+IS1EJXjN3vPaNyLCsO+XgtSBbrcOn
0sJlc+fVxTX7Q0aD19wyn24MKVZg6tTmbY/xkB2PnLsKkzrfLAZohjuuLQOHvr98
K1bfWPA8JbdYq/xjW8CbOwqa2wol+8nlAcWUAq+5TzH+P0ujSMipJju8i3C5gwlx
sAJHpY/foGiWmV2bY8IAUeqB5m4FukJT
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:48 2025 by rpki-client