Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D911628CC8A311EFAC3BDE67762E951A.roa
File: D911628CC8A311EFAC3BDE67762E951A.roa (raw, json)
Hash identifier: so/K9hf6zuNu140ZjBxNe0o9sKRNn8uto7GYtPQBPL8=
Subject key identifier: 66:59:43:79:24:F2:43:F9:6A:51:14:6B:AB:91:60:D0:73:5A:12:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013136
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D911628CC8A311EFAC3BDE67762E951A.roa
Signing time: Thu 02 Jan 2025 00:52:32 +0000
ROA not before: Thu 02 Jan 2025 00:00:28 +0000
ROA not after: Fri 12 Dec 2025 00:00:28 +0000
asID: 984
IP address blocks: 154.218.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78134 (0x13136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:28 2025 GMT
Not After : Dec 12 00:00:28 2025 GMT
Subject: CN=6775e350-76ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:24:8c:62:e7:a1:dd:ac:77:8c:18:6c:04:78:
fc:55:31:60:30:a7:a4:5c:5a:30:04:d3:d5:aa:b6:
bd:34:79:c8:ec:5c:5e:e7:ec:e9:ac:a6:c1:3d:71:
7b:bd:02:a6:bb:ba:0e:95:74:0e:4a:9b:9f:11:40:
4d:c1:98:4b:45:60:a0:ef:f7:10:61:18:af:d2:ae:
b2:3d:a7:67:48:6d:04:b3:e7:01:1a:0b:b6:cc:a4:
bc:be:2e:64:f8:b4:ed:83:dc:09:83:77:5c:55:a0:
db:c7:53:36:02:3b:88:57:be:c1:35:cf:67:38:ee:
a7:c7:24:51:fc:04:9b:50:34:0b:fd:f9:12:eb:8f:
e5:be:ce:f2:44:73:06:16:b6:c3:d9:fa:a7:fc:e6:
07:60:10:de:b5:54:52:82:8c:8f:f5:20:96:f3:41:
e7:6e:9c:aa:56:cf:95:70:61:c8:37:8f:b0:16:a3:
72:04:a4:b1:81:6d:98:b8:2d:6f:56:a9:26:1b:1f:
52:ce:1d:ea:be:ba:a0:c4:b8:63:b9:0e:7e:a4:d2:
dc:dd:76:a2:d9:c4:16:91:16:c2:40:d1:7c:bd:0a:
df:92:88:ca:8c:96:92:43:67:9b:5b:15:6e:c7:27:
22:cc:0e:21:2d:a3:bb:c6:cf:0f:54:1d:f5:8d:62:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:59:43:79:24:F2:43:F9:6A:51:14:6B:AB:91:60:D0:73:5A:12:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D911628CC8A311EFAC3BDE67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.55.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:83:77:7a:8d:e2:1a:af:84:db:65:f9:da:81:23:7c:7b:40:
ac:f2:67:39:89:c1:ef:de:9e:c9:2c:91:a2:28:ab:34:41:b1:
cb:eb:da:38:50:68:f1:3a:f7:36:10:93:ea:25:e0:48:d6:b7:
7c:7c:99:91:ed:3d:d5:a8:5d:09:d2:ce:50:b1:11:c2:2e:36:
36:81:f9:f3:ac:3f:13:f8:44:a1:4d:28:54:d4:4c:36:c7:ae:
dc:87:ca:72:e7:56:9e:6b:38:37:ba:a3:09:99:90:8b:7d:3b:
7a:88:d2:7a:45:33:35:be:47:ec:0d:0c:10:70:1e:d5:57:57:
5b:6a:6b:dc:40:fd:8e:8c:29:61:7d:ca:a3:80:d9:ba:88:9c:
49:9e:3a:58:88:8f:d9:12:1f:91:8a:ec:1d:93:b3:c5:39:78:
36:74:fa:0e:22:69:c6:84:3f:53:17:d2:90:2a:16:b4:2e:73:
80:80:50:1c:41:02:b7:6d:61:c4:50:52:c4:aa:7c:30:14:6a:
de:53:4d:1f:d8:e1:2d:44:c0:bf:39:c2:ea:30:67:ce:56:8f:
15:d2:39:83:50:87:a8:bd:0f:34:59:f1:39:f1:af:8c:fe:85:
e2:42:bc:d3:84:bb:8e:6e:48:48:e2:0f:88:65:44:5a:3a:c6:
e4:55:2b:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATE2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDAwMDI4WhcNMjUxMjEyMDAwMDI4WjAYMRYw
FAYDVQQDEw02Nzc1ZTM1MC03NmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmiSMYueh3ax3jBhsBHj8VTFgMKekXFowBNPVqra9NHnI7Fxe5+zprKbB
PXF7vQKmu7oOlXQOSpufEUBNwZhLRWCg7/cQYRiv0q6yPadnSG0Es+cBGgu2zKS8
vi5k+LTtg9wJg3dcVaDbx1M2AjuIV77BNc9nOO6nxyRR/ASbUDQL/fkS64/lvs7y
RHMGFrbD2fqn/OYHYBDetVRSgoyP9SCW80HnbpyqVs+VcGHIN4+wFqNyBKSxgW2Y
uC1vVqkmGx9Szh3qvrqgxLhjuQ5+pNLc3Xai2cQWkRbCQNF8vQrfkojKjJaSQ2eb
WxVuxycizA4hLaO7xs8PVB31jWJ1owIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGZZ
Q3kk8kP5alEUa6uRYNBzWhLDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EOTExNjI4Q0M4QTMxMUVGQUMzQkRFNjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmto3MA0GCSqGSIb3DQEB
CwUAA4IBAQC8g3d6jeIar4TbZfnagSN8e0Cs8mc5icHv3p7JLJGiKKs0QbHL69o4
UGjxOvc2EJPqJeBI1rd8fJmR7T3VqF0J0s5QsRHCLjY2gfnzrD8T+EShTShU1Ew2
x67ch8py51aeazg3uqMJmZCLfTt6iNJ6RTM1vkfsDQwQcB7VV1dbamvcQP2OjClh
fcqjgNm6iJxJnjpYiI/ZEh+Riuwdk7PFOXg2dPoOImnGhD9TF9KQKha0LnOAgFAc
QQK3bWHEUFLEqnwwFGreU00f2OEtRMC/OcLqMGfOVo8V0jmDUIeovQ80WfE58a+M
/oXiQrzThLuObkhI4g+IZURaOsbkVSs8
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:43 2025 by rpki-client