Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9841EE8C3DF11EFBEEE03A2762E951A.roa
File: E9841EE8C3DF11EFBEEE03A2762E951A.roa (raw, json)
Hash identifier: zm6Xa56D+B8sMqqtuEsIT385OShzCj1882VR9ZoKnck=
Subject key identifier: F2:83:B2:64:9F:5C:05:BD:95:9E:F8:EF:6A:DC:B4:4E:26:2F:78:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9841EE8C3DF11EFBEEE03A2762E951A.roa
Signing time: Thu 26 Dec 2024 23:19:53 +0000
ROA not before: Thu 26 Dec 2024 23:19:50 +0000
ROA not after: Fri 12 Dec 2025 23:19:50 +0000
asID: 984
IP address blocks: 154.86.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75990 (0x128d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 23:19:50 2024 GMT
Not After : Dec 12 23:19:50 2025 GMT
Subject: CN=676de499-b0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:e9:1a:7a:04:03:93:19:19:42:d1:f9:ef:
7e:5f:c4:bb:55:19:2f:0d:54:c4:20:33:56:bb:96:
6a:2a:de:69:2c:a0:15:b1:3a:41:9b:cf:c5:b0:63:
2d:81:3a:11:42:56:4c:41:fa:02:45:dd:ad:a7:56:
fd:bb:23:77:17:4e:7f:ab:1e:1f:19:6a:d2:9e:4c:
92:a9:67:f0:2e:9b:02:d1:a7:05:38:c8:66:b2:31:
98:21:d3:cc:20:ed:5d:d3:ff:7f:d9:78:11:e9:60:
c6:c0:19:df:92:0e:af:00:a3:94:a2:78:c1:73:bb:
73:15:a6:af:d5:8d:06:59:dc:0f:8b:29:03:ef:ad:
dd:b0:2b:db:0d:02:c4:3b:39:a1:de:de:c9:3c:62:
58:d8:29:f2:0f:de:88:d5:de:7f:66:0a:fc:f3:77:
06:0e:7d:0c:a9:ea:3f:24:a2:e4:f6:c3:34:48:f1:
4d:d1:98:6e:dd:10:a6:5e:bb:f1:e9:ba:55:11:a0:
e4:f7:4e:c7:ca:29:48:f3:0a:9c:7c:47:3b:f7:ea:
ed:86:e2:34:03:bc:bc:21:6c:dc:20:85:72:d6:15:
37:8f:99:e6:5a:9c:03:ea:ed:b2:22:8b:ea:b2:46:
59:10:cf:50:11:ab:2b:1b:6f:f8:12:2b:25:71:d9:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:83:B2:64:9F:5C:05:BD:95:9E:F8:EF:6A:DC:B4:4E:26:2F:78:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9841EE8C3DF11EFBEEE03A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.125.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ad:a7:bb:b3:1a:17:bc:54:77:a8:86:c3:71:e2:16:5c:dd:
4a:d5:a2:ec:02:0f:38:19:40:fb:6f:b5:d4:a7:4c:5f:c7:1a:
9f:eb:f6:88:1e:98:f7:f8:70:92:77:c4:9d:3b:8d:4c:be:0d:
e5:c8:bf:94:1a:9c:3c:24:e1:f4:ab:56:cd:c0:ef:be:35:72:
af:cf:f6:da:18:89:88:fa:d6:b1:b8:75:23:52:34:c8:60:57:
3e:e9:7f:71:38:b2:6d:1b:91:e4:e7:fc:d5:78:06:80:16:78:
44:47:e3:51:1d:f4:8e:99:81:b9:92:66:22:7f:29:86:f7:2d:
3c:09:83:1a:f2:31:f9:a1:74:33:70:91:22:e6:80:f3:dd:5a:
26:d1:81:32:76:e4:46:9a:10:d5:b6:65:56:9a:1e:cf:28:8e:
4f:48:93:e4:93:b9:aa:23:47:c8:db:d0:4d:3e:79:96:b5:52:
04:5a:a0:0f:c0:ed:42:6a:a6:ee:47:0e:c6:96:19:7e:bc:7f:
7d:b2:52:a5:bc:ba:ee:f9:1c:72:c0:7e:e1:4b:4a:ef:9c:51:
12:79:88:f3:ac:87:63:83:af:0d:ed:7d:3b:91:54:36:13:aa:
24:e3:bc:2e:56:9a:89:f4:e7:22:83:0b:01:32:fa:0d:91:b6:
28:8c:b6:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASjWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjMxOTUwWhcNMjUxMjEyMjMxOTUwWjAYMRYw
FAYDVQQDEw02NzZkZTQ5OS1iMGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs/DpGnoEA5MZGULR+e9+X8S7VRkvDVTEIDNWu5ZqKt5pLKAVsTpBm8/F
sGMtgToRQlZMQfoCRd2tp1b9uyN3F05/qx4fGWrSnkySqWfwLpsC0acFOMhmsjGY
IdPMIO1d0/9/2XgR6WDGwBnfkg6vAKOUonjBc7tzFaav1Y0GWdwPiykD763dsCvb
DQLEOzmh3t7JPGJY2CnyD96I1d5/Zgr883cGDn0Mqeo/JKLk9sM0SPFN0Zhu3RCm
Xrvx6bpVEaDk907HyilI8wqcfEc79+rthuI0A7y8IWzcIIVy1hU3j5nmWpwD6u2y
IovqskZZEM9QEasrG2/4EislcdmhlwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPKD
smSfXAW9lZ7472rctE4mL3jXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOTg0MUVFOEMzREYxMUVGQkVFRTAzQTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlZ9MA0GCSqGSIb3DQEB
CwUAA4IBAQCqrae7sxoXvFR3qIbDceIWXN1K1aLsAg84GUD7b7XUp0xfxxqf6/aI
Hpj3+HCSd8SdO41Mvg3lyL+UGpw8JOH0q1bNwO++NXKvz/baGImI+taxuHUjUjTI
YFc+6X9xOLJtG5Hk5/zVeAaAFnhER+NRHfSOmYG5kmYifymG9y08CYMa8jH5oXQz
cJEi5oDz3Vom0YEyduRGmhDVtmVWmh7PKI5PSJPkk7mqI0fI29BNPnmWtVIEWqAP
wO1CaqbuRw7Glhl+vH99slKlvLru+RxywH7hS0rvnFESeYjzrIdjg68N7X07kVQ2
E6ok47wuVpqJ9OcigwsBMvoNkbYojLb0
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:16 2025 by rpki-client