Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/387315141C6D11F08A13059FDAE4EC9C.roa
File: 387315141C6D11F08A13059FDAE4EC9C.roa (raw, json)
Hash identifier: dAMWoSD2D5DLyw4z3XINPqKsSQxPlhV6UuILJOaqKVI=
Subject key identifier: B0:4D:8D:AE:17:83:11:42:66:F6:54:0B:7E:FF:86:C7:EB:BA:14:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/387315141C6D11F08A13059FDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 15:53:08 +0000
ROA not before: Fri 18 Apr 2025 15:53:03 +0000
ROA not after: Sun 25 May 2025 15:53:03 +0000
asID: 20326
IP address blocks: 154.193.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96708 (0x179c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 15:53:03 2025 GMT
Not After : May 25 15:53:03 2025 GMT
Subject: CN=68027563-bea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:95:b4:75:8e:2a:44:95:c1:67:23:d6:07:
03:6e:17:8e:d5:0c:c3:cc:c3:4c:0c:d7:2f:96:4d:
3f:0f:3c:a4:c4:b2:ad:3c:48:f7:6a:2f:f1:e7:dd:
7a:a1:b5:23:12:d0:7f:b0:ed:d5:78:d8:58:bb:a1:
da:fb:1c:33:b7:66:bc:32:4f:85:20:87:66:55:7d:
80:c8:83:47:6c:81:36:30:ca:07:78:38:6d:99:f6:
8a:c8:d2:bd:01:10:71:8f:7c:9e:11:9a:d9:f4:f8:
11:db:8f:de:f8:71:ef:f1:aa:cf:9c:b3:c1:27:41:
c8:8d:72:42:e3:c6:d8:89:61:05:f4:35:e7:b7:6e:
dc:de:69:35:3d:24:32:d4:46:b9:01:3f:9f:1d:3a:
c9:96:89:a9:86:35:8f:84:63:b2:03:f6:f7:33:ce:
1c:3e:f3:26:9a:68:b1:a6:be:84:74:cc:e3:08:95:
8c:2a:c4:69:f4:7d:c7:93:f2:a9:99:8a:0e:fc:95:
96:ca:30:ca:bb:ea:95:cb:07:70:fa:76:1d:22:1c:
63:bf:f8:01:25:7e:78:0d:22:df:d6:4d:33:1e:d9:
a1:9e:d9:bf:db:db:b8:32:0a:fa:0f:ce:5c:84:55:
1d:ed:41:9e:26:fa:21:b6:7c:67:16:62:d1:3f:87:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:8D:AE:17:83:11:42:66:F6:54:0B:7E:FF:86:C7:EB:BA:14:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/387315141C6D11F08A13059FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.132.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:00:e0:99:5a:42:b6:23:bf:4e:de:a1:9f:18:c9:6e:54:0a:
55:76:ed:66:0f:fe:d1:d4:5f:bd:85:59:64:14:62:53:84:9d:
07:f1:7a:bf:2f:ff:85:f3:56:ce:3f:40:02:a4:7e:e6:65:cf:
78:28:10:03:32:22:f8:34:91:64:4e:e6:bf:ff:a6:d5:3c:ff:
37:be:ae:c2:da:36:9a:8e:2b:31:68:68:15:e6:37:08:b3:37:
2e:67:b8:79:74:41:5a:dc:0b:8e:dd:29:7a:32:30:43:22:ae:
bb:4a:90:21:d3:f4:fe:52:90:82:84:df:48:22:1c:63:ed:20:
49:f8:fc:8d:cc:60:26:68:73:72:71:f5:c1:7d:f6:84:8c:75:
96:39:32:2b:1a:4c:bc:8d:7d:79:97:f0:a1:38:5f:8a:00:90:
01:67:97:3d:09:b5:2e:99:18:73:1a:67:ec:40:b8:90:65:ac:
6a:b8:da:9d:16:1d:ab:37:f9:7e:4b:5b:e2:80:4a:02:7a:d4:
1f:d6:8e:8f:c1:30:da:79:19:64:d9:ec:68:1b:2d:27:9d:85:
7e:13:6d:88:cb:cb:18:17:d7:54:5b:7f:4a:60:04:7d:00:48:
41:53:0b:e6:05:d9:18:68:87:5a:52:de:3b:e6:a8:40:b7:05:
78:2b:4c:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXnEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDE4MTU1MzAzWhcNMjUwNTI1MTU1MzAzWjAYMRYw
FAYDVQQDEw02ODAyNzU2My1iZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArrKVtHWOKkSVwWcj1gcDbheO1QzDzMNMDNcvlk0/DzykxLKtPEj3ai/x
5916obUjEtB/sO3VeNhYu6Ha+xwzt2a8Mk+FIIdmVX2AyINHbIE2MMoHeDhtmfaK
yNK9ARBxj3yeEZrZ9PgR24/e+HHv8arPnLPBJ0HIjXJC48bYiWEF9DXnt27c3mk1
PSQy1Ea5AT+fHTrJlomphjWPhGOyA/b3M84cPvMmmmixpr6EdMzjCJWMKsRp9H3H
k/KpmYoO/JWWyjDKu+qVywdw+nYdIhxjv/gBJX54DSLf1k0zHtmhntm/29u4Mgr6
D85chFUd7UGeJvohtnxnFmLRP4eiIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLBN
ja4XgxFCZvZUC37/hsfruhRCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zODczMTUxNDFDNkQxMUYwOEExMzA1OUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGEMA0GCSqGSIb3DQEB
CwUAA4IBAQBvAOCZWkK2I79O3qGfGMluVApVdu1mD/7R1F+9hVlkFGJThJ0H8Xq/
L/+F81bOP0ACpH7mZc94KBADMiL4NJFkTua//6bVPP83vq7C2jaajisxaGgV5jcI
szcuZ7h5dEFa3AuO3Sl6MjBDIq67SpAh0/T+UpCChN9IIhxj7SBJ+PyNzGAmaHNy
cfXBffaEjHWWOTIrGky8jX15l/ChOF+KAJABZ5c9CbUumRhzGmfsQLiQZaxquNqd
Fh2rN/l+S1vigEoCetQf1o6PwTDaeRlk2exoGy0nnYV+E22Iy8sYF9dUW39KYAR9
AEhBUwvmBdkYaIdaUt475qhAtwV4K0xQ
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:52:26 2025 by rpki-client on console.sobornost.net