Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1DF8E0A095A11F0A9DB4661762E951A.roa
File: E1DF8E0A095A11F0A9DB4661762E951A.roa (raw, json)
Hash identifier: SGWZZLlbgqqpt3roFiWGgHyeMrxfHTv6NREB9ysiJA4=
Subject key identifier: C1:DB:1A:60:CE:A6:A0:D0:44:6E:51:EC:A5:82:A4:FE:BA:D3:07:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01760E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1DF8E0A095A11F0A9DB4661762E951A.roa
Signing time: Tue 25 Mar 2025 09:23:59 +0000
ROA not before: Tue 25 Mar 2025 09:23:55 +0000
ROA not after: Thu 15 May 2025 09:23:55 +0000
asID: 138915
IP address blocks: 154.203.133.0/24 maxlen: 24
154.203.134.0/24 maxlen: 24
154.203.135.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95758 (0x1760e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 09:23:55 2025 GMT
Not After : May 15 09:23:55 2025 GMT
Subject: CN=67e2762f-fbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:9a:89:6e:a6:d3:11:74:81:67:fe:0f:9e:
a8:e3:75:ef:a4:9f:8b:9a:1b:a7:f9:e9:06:dd:4c:
e1:b0:82:fb:a6:d1:4f:e8:d7:a3:11:df:f1:1f:2b:
fc:ca:3f:cd:1c:90:3c:00:32:74:a5:16:2c:73:4e:
ef:44:43:92:71:eb:28:d6:4c:63:48:85:3c:41:fd:
a7:58:ae:f7:a8:77:92:8a:64:ac:f6:4d:20:59:33:
7d:63:0f:67:45:67:37:2a:9b:3f:75:61:98:4e:14:
ab:c0:80:f1:67:a1:9b:53:65:38:f7:85:61:fd:83:
d3:97:68:bc:93:c7:e1:d8:ec:7a:ac:3a:5c:00:63:
2c:ff:70:89:08:f7:28:0b:ff:ca:b7:d9:f1:c8:ab:
64:51:e1:08:3e:d1:a1:c8:e6:25:67:87:54:9d:70:
7a:84:71:58:44:28:10:d7:93:bd:36:48:09:58:b3:
47:d8:43:ed:db:e1:11:1f:00:cf:13:07:6a:f0:48:
96:98:b4:40:8d:e2:d2:30:56:66:8d:5c:c4:48:16:
99:90:24:d4:c3:c5:f8:5f:fa:23:09:83:ec:34:4d:
b2:00:d8:d3:35:04:97:c5:7f:0f:4a:77:64:b3:49:
f3:3e:21:b7:97:28:22:24:98:61:9a:a5:0a:ef:76:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DB:1A:60:CE:A6:A0:D0:44:6E:51:EC:A5:82:A4:FE:BA:D3:07:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1DF8E0A095A11F0A9DB4661762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.133.0-154.203.135.255
154.203.138.0-154.203.141.255
154.203.146.0/23
154.203.152.0/24
Signature Algorithm: sha256WithRSAEncryption
24:43:2e:b4:bd:85:11:05:03:00:37:09:19:b6:d4:bc:49:2d:
ec:85:b4:55:b8:8b:11:60:15:7b:bd:bb:ef:bd:92:99:39:44:
af:a3:b9:4b:99:0d:55:92:3d:cc:65:30:13:d3:03:e5:2e:a6:
87:33:67:db:e5:e0:b1:80:64:16:9d:c9:7c:b6:f1:d8:ee:ce:
14:51:c3:67:8a:e4:eb:f9:08:9e:b1:f1:33:0c:db:46:85:8e:
2e:a1:42:6c:2b:32:92:02:7c:68:8b:8a:2e:43:79:c4:7d:ee:
d5:ff:11:5c:16:fa:c0:25:e2:b8:b1:83:e7:b2:97:d0:fa:21:
ba:1c:4a:42:45:f9:b0:e5:66:f1:f5:7e:09:a7:12:b8:59:d1:
a0:97:d5:ed:94:81:19:7d:3b:e1:33:37:ed:3d:d4:aa:63:65:
44:04:e9:1f:9f:c6:79:c7:a6:fd:4e:50:8c:73:bf:ca:ae:69:
e2:47:59:ad:2f:43:60:c5:ae:7a:3c:52:9a:ec:f7:83:3b:1a:
9a:82:7a:9d:4c:ef:63:f9:aa:68:85:13:26:a0:eb:43:6d:79:
a6:f2:64:3a:da:a6:32:1a:03:2d:11:1f:82:b5:d3:6f:b1:f6:
49:22:7a:01:c4:5c:08:a6:4e:f7:1c:4a:6a:98:8b:68:2b:f2:
fb:ae:58:a9
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAXYOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI1MDkyMzU1WhcNMjUwNTE1MDkyMzU1WjAYMRYw
FAYDVQQDEw02N2UyNzYyZi1mYmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsxSaiW6m0xF0gWf+D56o43XvpJ+Lmhun+ekG3UzhsIL7ptFP6NejEd/x
Hyv8yj/NHJA8ADJ0pRYsc07vREOSceso1kxjSIU8Qf2nWK73qHeSimSs9k0gWTN9
Yw9nRWc3Kps/dWGYThSrwIDxZ6GbU2U494Vh/YPTl2i8k8fh2Ox6rDpcAGMs/3CJ
CPcoC//Kt9nxyKtkUeEIPtGhyOYlZ4dUnXB6hHFYRCgQ15O9NkgJWLNH2EPt2+ER
HwDPEwdq8EiWmLRAjeLSMFZmjVzESBaZkCTUw8X4X/ojCYPsNE2yANjTNQSXxX8P
Sndks0nzPiG3lygiJJhhmqUK73Yt2wIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFMHb
GmDOpqDQRG5R7KWCpP660wdxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMURGOEUwQTA5NUExMUYwQTlEQjQ2NjE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACay4UDBAOay4AwDAME
AZrLigMEAZrLjAMEAZrLkgMEAJrLmDANBgkqhkiG9w0BAQsFAAOCAQEAJEMutL2F
EQUDADcJGbbUvEkt7IW0VbiLEWAVe727772SmTlEr6O5S5kNVZI9zGUwE9MD5S6m
hzNn2+XgsYBkFp3JfLbx2O7OFFHDZ4rk6/kInrHxMwzbRoWOLqFCbCsykgJ8aIuK
LkN5xH3u1f8RXBb6wCXiuLGD57KX0PohuhxKQkX5sOVm8fV+CacSuFnRoJfV7ZSB
GX074TM37T3UqmNlRATpH5/Gecem/U5QjHO/yq5p4kdZrS9DYMWuejxSmuz3gzsa
moJ6nUzvY/mqaIUTJqDrQ215pvJkOtqmMhoDLREfgrXTb7H2SSJ6AcRcCKZO9xxK
apiLaCvy+65YqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:07 2025 by rpki-client