Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F310EAEEC3C711EF81769E8B762E951A.roa
File: F310EAEEC3C711EF81769E8B762E951A.roa (raw, json)
Hash identifier: 8R7q03FZLqbBshwHX/UkSAie3Z/fRV135WP7fQFRt/I=
Subject key identifier: 35:EC:E6:55:4D:48:4C:07:5D:96:B1:28:2E:8D:96:54:BF:BD:69:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F310EAEEC3C711EF81769E8B762E951A.roa
Signing time: Thu 26 Dec 2024 20:28:21 +0000
ROA not before: Thu 26 Dec 2024 20:28:18 +0000
ROA not after: Fri 12 Dec 2025 20:28:18 +0000
asID: 984
IP address blocks: 154.83.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75748 (0x127e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:28:18 2024 GMT
Not After : Dec 12 20:28:18 2025 GMT
Subject: CN=676dbc65-c4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:1a:cf:b5:2c:60:bb:03:18:2f:f4:16:1e:
e6:07:b3:05:69:d9:3e:39:f3:05:8a:de:e7:a0:b1:
d7:7e:10:b8:4f:e7:72:4e:52:a4:1c:d7:fe:7d:63:
f1:41:e0:fd:f0:6f:ef:f5:9a:ee:f3:b4:4e:57:7a:
23:d5:1c:1d:56:44:50:6c:52:73:84:21:f0:14:35:
7b:c7:7b:a7:e5:7b:3b:33:f1:63:41:3c:79:da:7b:
43:02:a9:8c:58:9d:25:a1:6e:8b:b8:01:87:3d:0b:
2e:d1:e6:5c:3d:29:a2:fb:fb:0d:ff:ee:8d:43:18:
78:98:17:e5:6c:73:7b:a7:43:00:60:d3:a9:bb:91:
e7:b7:64:79:f3:af:23:90:b2:49:71:26:41:9b:b8:
f2:3b:68:43:7b:e7:08:ba:ee:43:73:98:02:f5:2f:
29:5f:2a:fd:eb:f7:7e:12:3f:61:79:5e:55:e0:80:
01:78:29:b8:77:9a:a1:6f:14:11:6d:06:6d:5d:be:
e3:07:31:f9:bb:4e:b9:17:c4:e3:4b:0f:98:66:3b:
da:88:ae:d3:ca:81:2a:3d:df:b0:a2:84:55:8f:0a:
30:7e:1f:b1:9c:8b:cd:33:02:6b:3e:79:55:0e:af:
cb:ac:f1:bc:26:a5:4c:91:9e:50:24:40:fe:ed:41:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EC:E6:55:4D:48:4C:07:5D:96:B1:28:2E:8D:96:54:BF:BD:69:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F310EAEEC3C711EF81769E8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.135.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b8:1f:43:6a:04:20:9d:89:80:db:11:8e:e8:23:82:b8:24:
26:03:df:d1:b9:75:fc:a2:40:9f:6b:b8:ca:8d:7b:ab:eb:06:
c9:75:57:3e:63:b3:1b:fa:18:a7:db:82:2c:b6:64:ab:ad:93:
d2:86:44:64:ea:bb:8a:5a:1d:b2:2a:b8:14:b9:68:d7:78:03:
c9:49:a8:6f:0c:ce:05:0d:6a:98:16:3b:81:d4:92:be:80:46:
03:32:5a:01:8c:1e:6f:28:c5:a7:d5:ae:70:69:38:96:f5:27:
d9:9a:77:7c:4f:61:07:a1:97:9c:88:d3:be:c5:ab:66:a1:95:
71:83:34:29:58:ef:69:c5:10:f1:be:a4:6e:e1:ae:5b:b2:15:
bc:3b:42:aa:c7:20:75:57:e6:d2:d2:22:6b:1c:f0:57:b0:4c:
41:58:5e:5d:cb:29:9f:bb:32:72:9f:17:11:d0:28:53:64:eb:
85:80:38:d9:3b:b8:4b:48:4b:00:2b:81:d0:3c:31:16:ab:f8:
ed:08:0b:18:01:23:57:73:b9:0f:8e:6e:50:fe:c1:30:80:4f:
70:52:ff:05:bd:a1:cd:cf:81:d7:2e:ad:0c:1c:19:ce:a6:a6:
dc:1e:ab:46:26:de:6b:f8:de:73:82:8f:5e:6d:d4:37:31:5c:
e5:b0:b8:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASfkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjAyODE4WhcNMjUxMjEyMjAyODE4WjAYMRYw
FAYDVQQDEw02NzZkYmM2NS1jNGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyVYaz7UsYLsDGC/0Fh7mB7MFadk+OfMFit7noLHXfhC4T+dyTlKkHNf+
fWPxQeD98G/v9Zru87ROV3oj1RwdVkRQbFJzhCHwFDV7x3un5Xs7M/FjQTx52ntD
AqmMWJ0loW6LuAGHPQsu0eZcPSmi+/sN/+6NQxh4mBflbHN7p0MAYNOpu5Hnt2R5
868jkLJJcSZBm7jyO2hDe+cIuu5Dc5gC9S8pXyr96/d+Ej9heV5V4IABeCm4d5qh
bxQRbQZtXb7jBzH5u065F8TjSw+YZjvaiK7TyoEqPd+wooRVjwowfh+xnIvNMwJr
PnlVDq/LrPG8JqVMkZ5QJED+7UGAKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDXs
5lVNSEwHXZaxKC6NllS/vWn3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMzEwRUFFRUMzQzcxMUVGODE3NjlFOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOHMA0GCSqGSIb3DQEB
CwUAA4IBAQAcuB9DagQgnYmA2xGO6COCuCQmA9/RuXX8okCfa7jKjXur6wbJdVc+
Y7Mb+hin24IstmSrrZPShkRk6ruKWh2yKrgUuWjXeAPJSahvDM4FDWqYFjuB1JK+
gEYDMloBjB5vKMWn1a5waTiW9SfZmnd8T2EHoZeciNO+xatmoZVxgzQpWO9pxRDx
vqRu4a5bshW8O0KqxyB1V+bS0iJrHPBXsExBWF5dyymfuzJynxcR0ChTZOuFgDjZ
O7hLSEsAK4HQPDEWq/jtCAsYASNXc7kPjm5Q/sEwgE9wUv8FvaHNz4HXLq0MHBnO
pqbcHqtGJt5r+N5zgo9ebdQ3MVzlsLhO
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:47 2025 by rpki-client