Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/854FDBF01DF411F0B2F5E5D7DAE4EC9C.roa
File: 854FDBF01DF411F0B2F5E5D7DAE4EC9C.roa (raw, json)
Hash identifier: ZCRgXjjndIQtqw7FCnQ8ClhG2Uh9n3fXX4pTDSDnBcw=
Subject key identifier: 84:7C:4B:30:64:DF:F6:1D:DD:10:B1:5E:35:9E:57:50:26:5F:55:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/854FDBF01DF411F0B2F5E5D7DAE4EC9C.roa
Signing time: Sun 20 Apr 2025 14:34:10 +0000
ROA not before: Sun 20 Apr 2025 14:34:05 +0000
ROA not after: Sun 27 Apr 2025 14:34:05 +0000
asID: 7018
IP address blocks: 154.206.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96819 (0x17a33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 14:34:05 2025 GMT
Not After : Apr 27 14:34:05 2025 GMT
Subject: CN=680505e2-b834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:9a:fa:44:9e:61:16:21:9e:89:a0:79:3a:
13:cc:99:4b:60:44:b7:dd:47:c0:d0:03:22:09:0b:
86:47:db:18:71:fb:7a:23:83:ed:f7:54:b2:fe:a5:
0c:63:bb:13:60:03:aa:f1:66:41:cb:43:70:77:39:
7e:7f:92:86:b4:76:07:06:66:1f:77:8f:a3:12:78:
f2:25:e4:67:4a:66:de:25:a2:36:28:1a:ab:e2:25:
57:39:47:f5:52:d8:a9:22:c8:a0:71:25:c1:1d:22:
37:75:57:ec:b4:0d:c5:c4:99:a2:92:96:6c:9b:27:
a6:9f:cb:c2:bf:82:78:1f:a4:d7:31:4b:3a:85:3d:
c2:d1:40:6d:c3:0b:43:25:21:64:08:e2:ff:df:33:
25:ae:c8:6d:c0:35:1a:cd:a3:5b:c8:15:08:a2:28:
50:09:13:a8:6b:be:bc:dd:b5:93:2f:06:6c:c7:ca:
5a:af:6c:b3:6d:cd:47:c5:4f:19:45:4e:2e:32:b8:
97:35:99:f7:86:80:fb:82:5b:42:15:40:d6:8c:62:
23:f9:30:a8:a6:5a:49:0d:54:6e:31:86:0c:da:24:
b8:9f:9a:e3:a8:3e:4b:78:d3:c4:fc:71:c4:1b:a4:
bd:ad:53:d4:fd:70:ec:f5:3d:5c:e9:e7:65:c7:b4:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:4B:30:64:DF:F6:1D:DD:10:B1:5E:35:9E:57:50:26:5F:55:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/854FDBF01DF411F0B2F5E5D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.48.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:31:eb:4c:82:05:78:9a:21:cc:4e:f6:10:ab:b9:1c:90:0c:
3d:04:28:de:9e:af:a7:89:d0:d8:ae:cf:f8:08:ed:d7:26:86:
fa:79:55:3c:87:a6:5b:e4:a6:86:04:6e:c0:55:0b:88:83:9a:
c7:61:92:42:f7:d0:5f:17:45:a9:06:8e:66:43:e8:a8:31:a5:
25:55:64:cc:67:e5:a6:39:30:e5:c8:c9:ca:a8:e8:b4:7b:ab:
29:96:a3:5e:c3:64:9d:f0:3d:cc:c4:da:23:a8:5b:fd:cd:81:
4b:63:15:64:c6:19:5b:e5:8c:86:d4:37:71:52:6e:96:a8:da:
2a:d6:62:6f:e0:4b:36:e1:90:a5:87:5f:3a:ba:5f:96:3b:fd:
61:c5:13:aa:a7:c7:9d:50:29:55:1c:33:92:06:32:66:20:10:
e0:a9:23:26:41:60:48:88:dd:cb:a9:74:77:2e:cf:1a:fd:51:
49:dc:a8:06:32:bc:69:33:cd:c8:c5:66:4e:3f:c1:ec:6e:55:
68:02:3f:47:2a:29:6b:49:60:a4:93:75:27:e1:6d:d2:27:01:
4d:2e:77:cc:7c:aa:67:4d:b7:a8:82:b6:a3:d7:11:57:94:c9:
95:eb:4f:d4:cf:8b:1d:b1:79:d1:0b:69:ee:35:61:84:df:92:
86:c0:35:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXozMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDIwMTQzNDA1WhcNMjUwNDI3MTQzNDA1WjAYMRYw
FAYDVQQDEw02ODA1MDVlMi1iODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqkaa+kSeYRYhnomgeToTzJlLYES33UfA0AMiCQuGR9sYcft6I4Pt91Sy
/qUMY7sTYAOq8WZBy0Nwdzl+f5KGtHYHBmYfd4+jEnjyJeRnSmbeJaI2KBqr4iVX
OUf1UtipIsigcSXBHSI3dVfstA3FxJmikpZsmyemn8vCv4J4H6TXMUs6hT3C0UBt
wwtDJSFkCOL/3zMlrshtwDUazaNbyBUIoihQCROoa7683bWTLwZsx8par2yzbc1H
xU8ZRU4uMriXNZn3hoD7gltCFUDWjGIj+TCoplpJDVRuMYYM2iS4n5rjqD5LeNPE
/HHEG6S9rVPU/XDs9T1c6edlx7TmFQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIR8
SzBk3/Yd3RCxXjWeV1AmX1XbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NTRGREJGMDFERjQxMUYwQjJGNUU1RDdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms4wMA0GCSqGSIb3DQEB
CwUAA4IBAQDJMetMggV4miHMTvYQq7kckAw9BCjenq+nidDYrs/4CO3XJob6eVU8
h6Zb5KaGBG7AVQuIg5rHYZJC99BfF0WpBo5mQ+ioMaUlVWTMZ+WmOTDlyMnKqOi0
e6splqNew2Sd8D3MxNojqFv9zYFLYxVkxhlb5YyG1DdxUm6WqNoq1mJv4Es24ZCl
h186ul+WO/1hxROqp8edUClVHDOSBjJmIBDgqSMmQWBIiN3LqXR3Ls8a/VFJ3KgG
MrxpM83IxWZOP8HsblVoAj9HKilrSWCkk3Un4W3SJwFNLnfMfKpnTbeograj1xFX
lMmV60/Uz4sdsXnRC2nuNWGE35KGwDWb
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:05 2025 by rpki-client on console.sobornost.net