Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13488522107811F083A99A43762E951A.roa
File: 13488522107811F083A99A43762E951A.roa (raw, json)
Hash identifier: 6JET7jCYTC0ez/0mJXlrFYI4DZlm9webFr+t8vG+3ao=
Subject key identifier: 14:E3:E0:F3:CC:04:BA:00:95:DB:C7:7D:16:9C:6B:9E:16:51:7B:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01776D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13488522107811F083A99A43762E951A.roa
Signing time: Thu 03 Apr 2025 10:40:35 +0000
ROA not before: Thu 03 Apr 2025 10:40:32 +0000
ROA not after: Tue 03 Jun 2025 10:40:32 +0000
asID: 138152
IP address blocks: 154.92.22.0/24 maxlen: 24
154.92.23.0/24 maxlen: 24
154.94.4.0/24 maxlen: 24
154.94.6.0/24 maxlen: 24
154.94.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96109 (0x1776d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 10:40:32 2025 GMT
Not After : Jun 3 10:40:32 2025 GMT
Subject: CN=67ee65a3-6669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:dc:b3:7e:d7:52:93:eb:3c:a1:e9:27:65:
69:11:95:33:34:7b:b8:d9:1d:1d:fa:e3:b0:7f:84:
22:ed:60:37:ec:bb:70:e5:a3:92:7c:c6:a9:1c:9e:
67:7e:90:19:e0:52:78:85:06:30:7b:bf:b1:98:4b:
9c:6e:16:eb:f0:07:5d:29:2b:ce:e6:97:56:af:39:
6a:1b:cc:d7:1d:58:72:34:6d:13:6f:e3:52:ab:8e:
0d:7f:a9:db:ce:a0:e6:c6:67:c4:b4:8c:e0:bd:25:
37:9e:f6:f7:a4:eb:62:da:5e:e2:5a:11:02:5c:2f:
88:88:d9:7b:d2:a2:76:35:fd:a1:f6:54:9d:78:1e:
8f:99:cd:69:cf:cd:53:3d:47:19:60:be:be:18:11:
85:f5:4e:1a:4b:c2:62:be:d7:ef:46:f2:73:ba:f6:
62:ae:e3:2b:49:5e:f7:4a:7d:77:d4:53:45:8c:c3:
0f:5f:f7:a4:ad:46:cb:6e:a1:28:71:81:76:45:60:
35:27:98:91:14:d4:02:99:67:8b:64:6d:ee:fc:b5:
27:00:0b:6a:5a:5d:7b:7e:da:db:f3:e1:81:55:e3:
0e:c7:28:4a:8e:32:a0:3b:a8:93:19:51:51:51:99:
c8:60:b2:5a:30:3e:12:ee:8a:c5:de:7a:65:39:71:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:E0:F3:CC:04:BA:00:95:DB:C7:7D:16:9C:6B:9E:16:51:7B:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13488522107811F083A99A43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/23
154.94.4.0/24
154.94.6.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:ef:0d:c8:1d:26:85:6c:c7:e1:3a:08:5e:01:67:30:08:f3:
a9:85:15:7c:ff:25:76:11:6b:45:9a:9a:6d:08:49:e9:e8:bb:
a1:37:b7:e9:75:bc:f0:81:c0:c4:8f:a2:92:0b:b7:62:65:7b:
25:64:0f:cf:fd:20:45:5c:31:7e:76:ee:d6:b5:f9:6c:75:08:
aa:3e:91:e1:ec:92:3b:ee:f2:89:80:7e:fa:74:48:cd:dc:1c:
f6:ea:92:27:00:7c:aa:b7:e6:e4:26:ee:19:6b:86:56:6a:f6:
f1:6b:2a:0b:14:76:bd:da:ef:81:1c:68:6d:a5:e4:e6:7b:80:
c2:ef:23:af:42:4c:a8:9a:cc:22:8d:e0:2e:7f:15:aa:ec:81:
fb:65:5e:dd:5e:b9:6e:2c:7d:ec:21:e2:94:2d:9e:8c:23:25:
dc:42:ae:86:5a:ea:d2:0e:f1:71:38:49:6a:43:76:26:ca:06:
a3:b1:ad:13:7e:6a:b9:ae:49:2b:91:04:15:1c:5c:57:d1:86:
d0:45:c8:9d:62:9b:af:f1:b2:2a:9e:33:78:49:b0:0a:b9:ab:
5d:1b:02:11:c3:fd:a6:10:18:5f:de:69:f0:54:02:37:87:f6:
36:9d:2b:56:c3:ff:39:6b:9f:5f:eb:39:62:d5:cb:d7:8f:3a:
75:64:bc:1e
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAXdtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDAzMTA0MDMyWhcNMjUwNjAzMTA0MDMyWjAYMRYw
FAYDVQQDEw02N2VlNjVhMy02NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwcHcs37XUpPrPKHpJ2VpEZUzNHu42R0d+uOwf4Qi7WA37Ltw5aOSfMap
HJ5nfpAZ4FJ4hQYwe7+xmEucbhbr8AddKSvO5pdWrzlqG8zXHVhyNG0Tb+NSq44N
f6nbzqDmxmfEtIzgvSU3nvb3pOti2l7iWhECXC+IiNl70qJ2Nf2h9lSdeB6Pmc1p
z81TPUcZYL6+GBGF9U4aS8JivtfvRvJzuvZiruMrSV73Sn131FNFjMMPX/ekrUbL
bqEocYF2RWA1J5iRFNQCmWeLZG3u/LUnAAtqWl17ftrb8+GBVeMOxyhKjjKgO6iT
GVFRUZnIYLJaMD4S7orF3nplOXHHSQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFBTj
4PPMBLoAldvHfRaca54WUXuGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMzQ4ODUyMjEwNzgxMUYwODNBOTlBNDM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmlwWAwQAml4EAwQBml4G
MA0GCSqGSIb3DQEBCwUAA4IBAQB67w3IHSaFbMfhOgheAWcwCPOphRV8/yV2EWtF
mpptCEnp6LuhN7fpdbzwgcDEj6KSC7diZXslZA/P/SBFXDF+du7WtflsdQiqPpHh
7JI77vKJgH76dEjN3Bz26pInAHyqt+bkJu4Za4ZWavbxayoLFHa92u+BHGhtpeTm
e4DC7yOvQkyomswijeAufxWq7IH7ZV7dXrluLH3sIeKULZ6MIyXcQq6GWurSDvFx
OElqQ3Ymygajsa0Tfmq5rkkrkQQVHFxX0YbQRcidYpuv8bIqnjN4SbAKuatdGwIR
w/2mEBhf3mnwVAI3h/Y2nStWw/85a59f6zli1cvXjzp1ZLwe
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:05:35 2025 by rpki-client