Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/506DB51E1C5B11F0AD883AA7DAE4EC9C.roa
File: 506DB51E1C5B11F0AD883AA7DAE4EC9C.roa (raw, json)
Hash identifier: n0n4c2twH6DhMYbXD2V4qAsdNzKH8YfqbWxHG/DzqcE=
Subject key identifier: B1:99:F3:2D:A2:04:B9:1A:FA:19:35:76:21:89:E7:CA:16:F8:6B:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017997
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/506DB51E1C5B11F0AD883AA7DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 13:44:57 +0000
ROA not before: Fri 18 Apr 2025 13:44:52 +0000
ROA not after: Sat 24 May 2025 13:44:52 +0000
asID: 18013
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96663 (0x17997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 13:44:52 2025 GMT
Not After : May 24 13:44:52 2025 GMT
Subject: CN=68025759-86af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:f0:5a:20:94:97:e9:7c:42:3a:47:04:81:
f4:3a:e0:88:34:97:fe:bd:a8:6d:c9:4b:13:d3:90:
69:9b:17:14:98:8b:6c:34:27:25:5e:37:d6:6f:31:
ac:76:2b:4a:2d:f3:19:05:cc:90:a2:d5:b8:64:74:
32:be:0f:da:d2:ea:aa:f4:78:83:c9:99:f3:88:04:
46:52:49:f5:bd:ed:5b:94:74:18:9b:1e:c1:43:eb:
98:26:a9:21:eb:80:ba:2a:6b:67:b5:51:43:53:d5:
08:08:b5:54:a1:3c:df:67:8e:13:d9:e0:ec:f9:a5:
92:74:5c:b7:c5:a0:2a:64:dc:25:e9:82:6e:60:38:
bb:a2:7e:3c:8f:0e:a7:04:4b:41:65:f7:57:cd:99:
40:2d:58:c2:f9:67:72:fe:76:0a:00:4a:86:ec:c4:
d0:c6:6c:b8:6a:70:51:43:91:27:27:e5:98:bb:2f:
75:95:0a:c2:ac:19:e4:a9:13:ff:85:ca:d4:d5:5a:
9b:df:1a:ad:69:b4:0d:bb:1f:53:8e:d2:55:47:08:
57:9f:fe:02:f6:50:3c:c3:bf:de:40:67:13:02:f7:
37:e6:c2:85:3e:46:ed:3f:1d:12:6b:97:99:cb:28:
04:c6:38:17:a4:65:c4:cd:5c:3e:33:b9:57:ac:a5:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:99:F3:2D:A2:04:B9:1A:FA:19:35:76:21:89:E7:CA:16:F8:6B:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/506DB51E1C5B11F0AD883AA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e3:c7:60:49:b0:dc:4d:62:94:a4:2b:ca:5b:c2:db:28:96:
51:94:75:34:3f:7e:23:4f:6b:84:8b:26:4a:14:b4:a2:a9:5b:
ff:ff:53:a4:e2:08:2d:3d:d5:c5:c0:c6:51:6f:8d:52:50:a2:
93:11:79:78:e6:66:e2:36:8d:e1:fd:2d:0b:02:32:c9:0e:00:
5a:10:f5:67:9e:e3:2c:ef:d6:09:9f:3c:cd:ce:24:5b:d0:55:
af:a6:a3:ca:05:96:85:fc:0a:f2:d1:4d:2b:a3:92:66:25:56:
0a:eb:13:d5:61:6d:32:65:c3:a7:8d:78:d4:09:a5:96:a4:92:
2c:a0:7b:bc:ad:42:26:72:e5:ec:e9:ad:a1:01:47:89:c8:62:
4c:ca:95:62:4a:1f:8a:c6:38:2f:4b:7d:bc:4a:51:b0:b4:06:
8a:2f:0d:9c:56:ac:4a:03:dc:33:7b:f7:26:be:f0:2e:00:19:
ce:f7:31:ca:dd:4f:9c:10:28:a0:02:d6:b8:2c:28:0f:9d:8e:
f3:ed:87:f4:68:02:72:c0:d6:cb:c9:02:b3:7e:a7:6f:0a:cd:
08:91:1e:5f:9b:fe:5f:25:a1:58:b0:77:6a:58:e6:3a:11:a0:
f5:f4:a9:ba:2c:cc:6e:7e:76:b3:e4:41:06:12:47:db:73:d4:
08:85:e5:f5
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAXmXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDE4MTM0NDUyWhcNMjUwNTI0MTM0NDUyWjAYMRYw
FAYDVQQDEw02ODAyNTc1OS04NmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6tHwWiCUl+l8QjpHBIH0OuCINJf+vahtyUsT05BpmxcUmItsNCclXjfW
bzGsditKLfMZBcyQotW4ZHQyvg/a0uqq9HiDyZnziARGUkn1ve1blHQYmx7BQ+uY
Jqkh64C6KmtntVFDU9UICLVUoTzfZ44T2eDs+aWSdFy3xaAqZNwl6YJuYDi7on48
jw6nBEtBZfdXzZlALVjC+Wdy/nYKAEqG7MTQxmy4anBRQ5EnJ+WYuy91lQrCrBnk
qRP/hcrU1Vqb3xqtabQNux9TjtJVRwhXn/4C9lA8w7/eQGcTAvc35sKFPkbtPx0S
a5eZyygExjgXpGXEzVw+M7lXrKXyhQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFLGZ
8y2iBLka+hk1diGJ58oW+GtWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MDZEQjUxRTFDNUIxMUYwQUQ4ODNBQTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASaWZADBASaWcADBACa
XxgwDQYJKoZIhvcNAQELBQADggEBAATjx2BJsNxNYpSkK8pbwtsollGUdTQ/fiNP
a4SLJkoUtKKpW///U6TiCC091cXAxlFvjVJQopMReXjmZuI2jeH9LQsCMskOAFoQ
9Wee4yzv1gmfPM3OJFvQVa+mo8oFloX8CvLRTSujkmYlVgrrE9VhbTJlw6eNeNQJ
pZakkiyge7ytQiZy5ezpraEBR4nIYkzKlWJKH4rGOC9LfbxKUbC0BoovDZxWrEoD
3DN79ya+8C4AGc73McrdT5wQKKAC1rgsKA+djvPth/RoAnLA1svJArN+p28KzQiR
Hl+b/l8loViwd2pY5joRoPX0qboszG5+drPkQQYSR9tz1AiF5fU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:20 2025 by rpki-client