Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D879C9FCF68611EF9C32A174762E951A.roa
File: D879C9FCF68611EF9C32A174762E951A.roa (raw, json)
Hash identifier: 3yCPMkoLwJvrrnpAoeAzBQTGiZLlA0D4wSIpxFy/thU=
Subject key identifier: A9:F8:A7:27:4F:EB:97:03:59:4E:1B:23:05:57:6F:C1:38:2A:35:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D879C9FCF68611EF9C32A174762E951A.roa
Signing time: Sat 01 Mar 2025 10:20:49 +0000
ROA not before: Sat 01 Mar 2025 10:20:45 +0000
ROA not after: Sat 05 Apr 2025 10:20:45 +0000
asID: 203020
IP address blocks: 154.208.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 10:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93641 (0x16dc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 10:20:45 2025 GMT
Not After : Apr 5 10:20:45 2025 GMT
Subject: CN=67c2df81-3f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:dc:11:63:32:7a:68:fc:33:c8:b2:5c:9a:
fb:ae:0a:dc:4d:39:11:ab:28:ac:2e:67:3f:0c:99:
6b:7d:35:ca:71:b3:37:45:22:00:b9:e2:84:f8:03:
3d:3b:ed:20:00:6a:b9:45:99:c9:f1:06:9f:56:ec:
33:c5:3f:1f:d4:a7:72:32:15:0f:dd:0e:40:26:ba:
d4:55:e7:b0:0a:fd:a8:03:23:6d:7e:1c:bd:e1:8a:
35:79:4f:ac:71:8e:a4:41:a0:60:67:16:cd:42:55:
f6:eb:1b:77:f5:e8:bd:9e:57:54:99:8d:01:ad:8a:
a2:15:7e:94:a0:d2:47:ac:b0:bc:2a:c4:9d:7b:34:
e3:32:a9:55:b3:63:68:3b:e2:81:76:ff:0f:1f:f9:
89:66:60:01:45:26:23:ad:f4:5d:c7:0a:36:b9:b6:
01:43:30:ca:c5:50:47:e9:bd:6a:74:22:43:00:cd:
9e:12:8b:3d:28:37:6c:e0:8b:63:61:13:75:4b:3c:
a7:aa:f3:aa:e5:9f:30:e8:69:01:e2:1b:31:84:08:
b9:69:4c:52:44:a0:db:9b:bf:da:27:41:39:82:d4:
47:ca:f2:49:16:4c:a4:88:3d:6f:0a:d7:3f:f4:70:
69:f6:f7:b8:cd:9a:f0:a8:e7:d0:82:b5:be:19:55:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:A7:27:4F:EB:97:03:59:4E:1B:23:05:57:6F:C1:38:2A:35:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D879C9FCF68611EF9C32A174762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.136.0/22
Signature Algorithm: sha256WithRSAEncryption
88:8f:da:25:79:63:fe:37:85:bf:45:84:46:d7:90:49:a7:02:
23:bd:b2:b6:53:3a:4c:fd:ba:a0:5f:bd:01:c4:77:df:42:13:
4a:70:be:ae:72:43:02:56:be:8a:53:4f:93:95:84:ae:45:32:
d3:45:7f:30:1c:d0:da:79:b8:57:4c:7d:ac:bc:0f:ed:e0:8f:
0b:3f:4b:04:30:9e:88:d9:e8:d0:64:ed:bb:15:a1:7a:48:90:
eb:37:dc:c7:54:aa:6b:cd:c8:2c:62:ea:a0:29:7c:a3:1e:da:
a8:97:e1:ef:09:95:15:fd:66:71:a9:32:eb:bc:c3:35:70:59:
79:6e:e6:64:26:c9:48:ff:3e:f1:a4:22:d3:5a:76:35:3e:b2:
70:fc:24:a2:04:77:bf:21:a8:ec:62:96:e2:25:f1:a0:d8:31:
8d:08:3c:3b:2e:b4:8f:89:41:f8:d3:01:2d:7a:7f:19:46:d1:
22:59:88:be:9a:97:12:93:84:9b:6b:83:07:18:42:29:f4:fe:
1a:9e:2f:1f:46:50:52:88:89:bd:01:76:5c:44:a2:f4:15:ba:
39:f5:22:29:5c:f3:d0:14:a1:1a:88:fa:ec:07:dc:98:3c:db:
3e:39:9c:2c:7e:67:af:dc:7a:cd:9d:d7:0e:3e:8c:ca:66:a5:
da:9f:95:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW3JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTAyMDQ1WhcNMjUwNDA1MTAyMDQ1WjAYMRYw
FAYDVQQDEw02N2MyZGY4MS0zZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArKPcEWMyemj8M8iyXJr7rgrcTTkRqyisLmc/DJlrfTXKcbM3RSIAueKE
+AM9O+0gAGq5RZnJ8QafVuwzxT8f1KdyMhUP3Q5AJrrUVeewCv2oAyNtfhy94Yo1
eU+scY6kQaBgZxbNQlX26xt39ei9nldUmY0BrYqiFX6UoNJHrLC8KsSdezTjMqlV
s2NoO+KBdv8PH/mJZmABRSYjrfRdxwo2ubYBQzDKxVBH6b1qdCJDAM2eEos9KDds
4ItjYRN1SzynqvOq5Z8w6GkB4hsxhAi5aUxSRKDbm7/aJ0E5gtRHyvJJFkykiD1v
Ctc/9HBp9ve4zZrwqOfQgrW+GVWUdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKn4
pydP65cDWU4bIwVXb8E4KjWKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EODc5QzlGQ0Y2ODYxMUVGOUMzMkExNzQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtCIMA0GCSqGSIb3DQEB
CwUAA4IBAQCIj9oleWP+N4W/RYRG15BJpwIjvbK2UzpM/bqgX70BxHffQhNKcL6u
ckMCVr6KU0+TlYSuRTLTRX8wHNDaebhXTH2svA/t4I8LP0sEMJ6I2ejQZO27FaF6
SJDrN9zHVKprzcgsYuqgKXyjHtqol+HvCZUV/WZxqTLrvMM1cFl5buZkJslI/z7x
pCLTWnY1PrJw/CSiBHe/IajsYpbiJfGg2DGNCDw7LrSPiUH40wEten8ZRtEiWYi+
mpcSk4Sba4MHGEIp9P4ani8fRlBSiIm9AXZcRKL0Fbo59SIpXPPQFKEaiPrsB9yY
PNs+OZwsfmev3HrNndcOPozKZqXan5Xw
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:28 2025 by rpki-client