Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A3912AC26511EF87587D46762E951A.roa
File: E6A3912AC26511EF87587D46762E951A.roa (raw, json)
Hash identifier: fY5CEfG2bL4bMRtpYSNMvyAN3yhW5hwipz0gFJX3JZ4=
Subject key identifier: E8:2C:FA:81:04:88:5B:F9:73:66:F1:E8:5D:03:56:09:5F:0F:58:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A3912AC26511EF87587D46762E951A.roa
Signing time: Wed 25 Dec 2024 02:13:59 +0000
ROA not before: Wed 25 Dec 2024 02:13:55 +0000
ROA not after: Wed 10 Dec 2025 02:13:55 +0000
asID: 984
IP address blocks: 154.199.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74728 (0x123e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:13:55 2024 GMT
Not After : Dec 10 02:13:55 2025 GMT
Subject: CN=676b6a67-dc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:6b:89:33:75:9a:eb:60:db:e8:42:e3:8b:
d3:38:d7:4c:b6:6f:6e:c8:0f:7c:5d:75:bd:3e:b6:
66:02:88:09:b4:c1:b0:a1:56:db:ba:c2:68:ea:83:
32:74:b2:fa:5c:de:6b:0f:ad:ff:1d:95:ca:a8:59:
e3:fe:0a:3a:b3:0d:a3:5c:98:3b:4b:65:7d:87:17:
3a:90:c8:95:37:82:47:53:0e:c1:63:bd:57:7c:9f:
bc:f8:1c:59:40:ee:c0:14:b1:bd:90:98:77:27:42:
4d:8a:72:7a:6a:78:41:dd:3d:ed:be:19:e5:fe:89:
6d:cf:d7:a0:6c:e9:1f:69:49:3b:49:33:df:28:65:
6b:e6:e1:56:92:0d:d0:31:99:05:61:d0:ac:71:bc:
74:41:d2:aa:76:d6:1b:40:ad:38:5c:b1:08:54:1c:
19:bc:3a:61:08:74:95:44:0d:a5:5c:45:60:5d:08:
76:4d:64:bd:f3:5a:d7:1b:f4:eb:08:21:8c:fb:05:
e2:11:cd:4c:4c:e2:13:ef:26:5b:ce:3e:57:30:56:
a6:19:3a:47:22:33:0d:bf:f0:39:51:c1:f5:13:ba:
90:b4:e9:49:21:03:00:4f:f3:e9:54:1e:42:27:72:
2b:18:2f:4b:fa:0e:09:82:d1:dd:34:c7:d6:df:2f:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:FA:81:04:88:5B:F9:73:66:F1:E8:5D:03:56:09:5F:0F:58:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A3912AC26511EF87587D46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.197.0/24
Signature Algorithm: sha256WithRSAEncryption
61:84:40:c7:40:cd:64:99:a8:14:d5:77:45:00:52:88:7f:5b:
a6:5e:ba:03:70:5b:d3:4d:5e:71:5f:dc:41:c4:fd:99:43:d4:
ae:0d:ac:44:b9:ff:f8:33:74:88:8a:8c:d2:45:3d:0e:dc:42:
65:34:80:be:12:bb:2f:97:95:61:a9:71:e9:5b:f8:0a:b5:14:
b8:19:6a:db:64:d9:44:6d:4d:64:4f:d5:37:06:42:e6:12:ff:
c5:16:0e:4d:32:79:ff:31:e5:5f:ac:e9:2c:9f:6e:00:d2:ee:
f1:1e:ce:98:85:91:bb:d1:38:60:99:bd:6b:e5:78:f5:ab:da:
35:d0:87:e7:db:57:5e:17:b8:fb:7c:0d:ed:ea:21:50:4e:d0:
c3:5b:08:a1:e1:d8:13:ca:8e:94:27:c3:a9:47:9e:db:63:0b:
a6:6c:40:d0:a2:47:42:a3:1a:2d:26:b4:b0:34:36:33:5a:b1:
c9:b4:5a:7f:1d:c5:f4:8f:04:3b:c1:77:ce:76:0d:76:99:9b:
c4:ae:dd:20:c8:a8:29:86:86:f4:4a:6e:85:33:ce:3e:8b:3b:
01:b5:da:9e:92:d8:87:b8:01:a8:1b:ce:31:11:10:54:be:ac:
6a:9b:90:3d:82:b2:d4:5a:e2:c9:eb:6a:46:3a:00:71:74:a6:
5b:3e:ac:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASPoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDIxMzU1WhcNMjUxMjEwMDIxMzU1WjAYMRYw
FAYDVQQDEw02NzZiNmE2Ny1kYzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuw5riTN1mutg2+hC44vTONdMtm9uyA98XXW9PrZmAogJtMGwoVbbusJo
6oMydLL6XN5rD63/HZXKqFnj/go6sw2jXJg7S2V9hxc6kMiVN4JHUw7BY71XfJ+8
+BxZQO7AFLG9kJh3J0JNinJ6anhB3T3tvhnl/oltz9egbOkfaUk7STPfKGVr5uFW
kg3QMZkFYdCscbx0QdKqdtYbQK04XLEIVBwZvDphCHSVRA2lXEVgXQh2TWS981rX
G/TrCCGM+wXiEc1MTOIT7yZbzj5XMFamGTpHIjMNv/A5UcH1E7qQtOlJIQMAT/Pp
VB5CJ3IrGC9L+g4JgtHdNMfW3y+tWQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOgs
+oEEiFv5c2bx6F0DVglfD1hBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNkEzOTEyQUMyNjUxMUVGODc1ODdENDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsfFMA0GCSqGSIb3DQEB
CwUAA4IBAQBhhEDHQM1kmagU1XdFAFKIf1umXroDcFvTTV5xX9xBxP2ZQ9SuDaxE
uf/4M3SIiozSRT0O3EJlNIC+Ersvl5VhqXHpW/gKtRS4GWrbZNlEbU1kT9U3BkLm
Ev/FFg5NMnn/MeVfrOksn24A0u7xHs6YhZG70Thgmb1r5Xj1q9o10Ifn21deF7j7
fA3t6iFQTtDDWwih4dgTyo6UJ8OpR57bYwumbEDQokdCoxotJrSwNDYzWrHJtFp/
HcX0jwQ7wXfOdg12mZvErt0gyKgphob0Sm6FM84+izsBtdqektiHuAGoG84xERBU
vqxqm5A9grLUWuLJ62pGOgBxdKZbPqzn
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:33:46 2025 by rpki-client