Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/815E137816AA11F0A4681BCC6DB8BCC6.roa
File: 815E137816AA11F0A4681BCC6DB8BCC6.roa (raw, json)
Hash identifier: T3sRdKkZZfzptGmLDK/LZDJ0KsVzTTpg/EoRpOv6DNs=
Subject key identifier: 6F:86:E0:A3:AF:5D:DC:49:D0:B8:7F:E6:F2:D5:88:A4:20:81:EF:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/815E137816AA11F0A4681BCC6DB8BCC6.roa
Signing time: Fri 11 Apr 2025 07:56:42 +0000
ROA not before: Fri 11 Apr 2025 07:56:38 +0000
ROA not after: Sun 22 Jun 2025 07:56:38 +0000
asID: 47890
IP address blocks: 154.214.236.0/23 maxlen: 24
154.214.244.0/23 maxlen: 24
154.214.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96469 (0x178d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 07:56:38 2025 GMT
Not After : Jun 22 07:56:38 2025 GMT
Subject: CN=67f8cb3a-41c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:a2:82:4c:c0:5c:cb:30:f0:2d:d3:9c:74:
15:67:82:cb:2d:dd:f5:ba:32:c7:0d:b2:a4:14:98:
7a:08:45:a2:d6:80:a6:35:ee:d3:37:b9:55:af:8e:
fb:9d:ca:de:65:8b:d0:94:20:85:97:0d:1b:15:02:
22:81:53:72:23:1b:60:77:3d:31:a6:d4:00:0a:87:
f5:6a:bd:f8:79:bf:aa:d4:2f:da:a5:a2:00:aa:7c:
6f:d8:d4:22:6c:7d:ce:0e:a2:49:5b:09:8e:32:ce:
07:48:bd:8b:1b:65:ad:14:63:fb:ef:65:dc:9a:e8:
a7:53:b5:d1:b0:74:46:b8:e1:79:d1:5b:64:25:c0:
ec:d5:40:00:db:44:23:70:02:53:3f:9d:71:61:27:
a5:cd:fa:fa:b1:7f:3c:59:5e:8f:5a:4f:89:6d:70:
ef:26:98:67:08:77:0a:fb:8b:85:52:d9:17:3d:81:
96:e0:98:be:94:13:fc:be:2f:d6:df:42:78:59:95:
48:a9:68:af:1e:bb:1f:6d:41:6c:29:53:a7:c2:29:
b1:e5:6a:a8:13:70:7b:25:62:a4:b0:50:5a:7f:db:
a9:17:f9:ac:99:af:47:e5:2b:3e:ac:cc:51:55:ac:
b4:d6:66:12:56:b0:41:81:0e:9d:ee:69:50:c8:67:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:86:E0:A3:AF:5D:DC:49:D0:B8:7F:E6:F2:D5:88:A4:20:81:EF:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/815E137816AA11F0A4681BCC6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.236.0/23
154.214.244.0/23
154.214.250.0/23
Signature Algorithm: sha256WithRSAEncryption
70:3c:b1:0e:4d:4a:7f:e8:4e:35:8b:a6:c1:10:7a:d6:f1:a1:
63:f4:36:5f:5a:fe:b7:28:9f:86:07:b9:12:c4:3a:57:b9:0d:
75:62:d5:20:4d:02:77:04:27:50:c2:c2:d9:c4:5d:23:6b:11:
42:af:0f:0b:91:99:ba:96:68:43:55:32:22:56:04:67:8d:03:
56:a4:fb:6c:70:08:ce:11:95:2f:dc:61:89:83:ed:69:df:e1:
ef:46:a1:b9:e6:c0:95:5a:e3:95:fe:90:3b:04:97:ef:f3:da:
e5:d7:69:86:da:90:a1:6e:cc:f6:b1:30:6f:fd:4a:86:83:58:
3b:c8:f3:e7:56:e6:5b:2f:0e:a2:cf:ca:d1:c2:6a:b1:99:30:
74:df:69:14:86:bf:aa:71:4e:bc:6c:44:2b:10:b7:db:b0:15:
f3:49:e2:92:75:fa:c4:f9:55:52:75:4d:bc:57:0c:21:1c:c9:
0e:fd:5f:1d:c3:ea:23:49:47:d2:07:b9:ab:1d:92:d6:e2:21:
ea:d4:6b:42:88:28:58:c7:c1:12:39:83:76:db:70:07:bb:f2:
30:f0:46:8b:ca:00:fa:3c:51:2b:94:50:d8:61:e3:43:d7:86:
6a:16:8c:69:ea:34:34:8e:76:45:55:b6:49:cc:71:65:f2:e7:
33:88:5f:59
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAXjVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDExMDc1NjM4WhcNMjUwNjIyMDc1NjM4WjAYMRYw
FAYDVQQDEw02N2Y4Y2IzYS00MWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyKaigkzAXMsw8C3TnHQVZ4LLLd31ujLHDbKkFJh6CEWi1oCmNe7TN7lV
r477ncreZYvQlCCFlw0bFQIigVNyIxtgdz0xptQACof1ar34eb+q1C/apaIAqnxv
2NQibH3ODqJJWwmOMs4HSL2LG2WtFGP772XcmuinU7XRsHRGuOF50VtkJcDs1UAA
20QjcAJTP51xYSelzfr6sX88WV6PWk+JbXDvJphnCHcK+4uFUtkXPYGW4Ji+lBP8
vi/W30J4WZVIqWivHrsfbUFsKVOnwimx5WqoE3B7JWKksFBaf9upF/msma9H5Ss+
rMxRVay01mYSVrBBgQ6d7mlQyGcavwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFG+G
4KOvXdxJ0Lh/5vLViKQgge8LMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTVFMTM3ODE2QUExMUYwQTQ2ODFCQ0M2REI4QkNDNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmtbsAwQBmtb0AwQBmtb6
MA0GCSqGSIb3DQEBCwUAA4IBAQBwPLEOTUp/6E41i6bBEHrW8aFj9DZfWv63KJ+G
B7kSxDpXuQ11YtUgTQJ3BCdQwsLZxF0jaxFCrw8LkZm6lmhDVTIiVgRnjQNWpPts
cAjOEZUv3GGJg+1p3+HvRqG55sCVWuOV/pA7BJfv89rl12mG2pChbsz2sTBv/UqG
g1g7yPPnVuZbLw6iz8rRwmqxmTB032kUhr+qcU68bEQrELfbsBXzSeKSdfrE+VVS
dU28VwwhHMkO/V8dw+ojSUfSB7mrHZLW4iHq1GtCiChYx8ESOYN223AHu/Iw8EaL
ygD6PFErlFDYYeND14ZqFoxp6jQ0jnZFVbZJzHFl8ucziF9Z
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:46 2025 by rpki-client on console.sobornost.net