Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D895E42214ED11F09A4BA92A6EB8BCC6.roa
File: D895E42214ED11F09A4BA92A6EB8BCC6.roa (raw, json)
Hash identifier: 4hvgxJB5xhs3w8jv+V5W9iXRf+ibt8aBBIf3K3P3VAE=
Subject key identifier: C5:9A:05:BA:AB:E4:CE:0E:29:D7:52:BF:70:7A:83:CE:B9:26:24:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017862
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D895E42214ED11F09A4BA92A6EB8BCC6.roa
Signing time: Wed 09 Apr 2025 02:53:42 +0000
ROA not before: Wed 09 Apr 2025 02:53:38 +0000
ROA not after: Tue 29 Apr 2025 02:53:38 +0000
asID: 20473
IP address blocks: 154.197.54.0/24 maxlen: 24
154.197.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96354 (0x17862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 02:53:38 2025 GMT
Not After : Apr 29 02:53:38 2025 GMT
Subject: CN=67f5e136-e4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:1a:d8:e6:8c:ea:03:b8:26:86:c9:ec:d0:
d7:eb:04:bd:17:07:b6:bb:b9:d6:49:e8:63:99:f5:
01:4c:08:6a:9c:7c:87:64:ca:38:ff:e0:25:2a:0e:
bc:7b:60:74:4f:3e:e4:38:24:2d:9f:9a:b9:17:b8:
99:ad:8a:e2:ff:91:2c:96:a4:d7:63:84:94:2b:1a:
c2:17:09:37:7b:60:1f:ce:60:49:ba:42:d0:23:5e:
60:30:7b:a3:69:6f:d2:e0:27:e0:bb:ab:cd:e4:9c:
77:c2:84:db:0c:11:97:2b:73:12:9f:41:ed:ca:be:
34:9b:f6:32:9b:08:96:3b:8f:81:21:95:3e:1e:42:
3c:34:c1:25:01:c7:cd:b8:61:21:90:a1:b8:c7:cf:
b8:48:1a:ed:c3:e7:51:2f:25:56:6b:65:9f:4a:62:
6e:73:1c:0a:cc:ab:7a:53:8f:f5:b5:70:82:f2:4e:
5a:ca:f2:86:28:4b:8a:53:fa:92:2d:72:5d:6b:bd:
08:53:24:a1:c0:86:c0:91:80:27:cc:5b:3d:07:74:
73:58:e5:90:25:96:77:3b:f7:82:30:dc:af:e0:e6:
27:1a:45:9b:be:0c:dc:e3:72:65:8b:14:05:c1:77:
b5:87:d4:10:a9:6d:70:b2:1d:cc:c7:c5:17:98:e7:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9A:05:BA:AB:E4:CE:0E:29:D7:52:BF:70:7A:83:CE:B9:26:24:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D895E42214ED11F09A4BA92A6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.54.0/24
154.197.88.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:e0:51:11:64:12:ca:8d:7e:25:6d:e9:76:f4:9b:12:14:4d:
15:72:8d:47:dc:da:2d:90:25:eb:ba:cd:c9:98:6b:8c:e2:a2:
5c:a6:4f:4a:c4:9b:82:23:d2:85:df:f4:00:d9:e9:f9:2f:63:
8c:d8:12:ea:b9:cb:15:70:c9:a4:45:52:1f:05:6c:6a:ea:6e:
55:53:15:15:ce:46:b5:86:ab:8a:e8:0d:68:1f:6d:14:a5:62:
7d:75:fb:7d:ec:7d:4e:b4:1d:0e:14:1b:42:f0:21:16:a9:8a:
8b:12:15:8d:09:7b:e0:56:a8:35:6b:a4:e8:88:03:6a:8b:d4:
fa:a2:88:a2:60:3b:b1:2d:ef:12:63:a2:9f:58:45:2f:24:85:
32:09:7d:5b:7e:ee:22:8e:da:5d:98:c6:50:88:b8:52:79:24:
96:81:11:4b:35:13:e6:88:62:bd:cb:d3:08:4c:11:80:a5:1c:
de:67:ce:64:12:93:e4:82:52:91:ab:e0:ff:98:07:d1:d7:05:
88:cf:de:8e:2b:d8:08:86:7a:a8:f6:fb:9f:69:09:54:5c:22:
ff:31:cc:e6:ce:6f:cf:bb:30:30:77:5f:88:b0:13:1e:f2:e5:
03:47:8c:87:73:89:e2:f5:0b:82:37:fa:70:44:b7:70:17:09:
c7:e6:b8:48
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAXhiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA5MDI1MzM4WhcNMjUwNDI5MDI1MzM4WjAYMRYw
FAYDVQQDEw02N2Y1ZTEzNi1lNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyr4a2OaM6gO4JobJ7NDX6wS9Fwe2u7nWSehjmfUBTAhqnHyHZMo4/+Al
Kg68e2B0Tz7kOCQtn5q5F7iZrYri/5EslqTXY4SUKxrCFwk3e2AfzmBJukLQI15g
MHujaW/S4Cfgu6vN5Jx3woTbDBGXK3MSn0Htyr40m/YymwiWO4+BIZU+HkI8NMEl
AcfNuGEhkKG4x8+4SBrtw+dRLyVWa2WfSmJucxwKzKt6U4/1tXCC8k5ayvKGKEuK
U/qSLXJda70IUyShwIbAkYAnzFs9B3RzWOWQJZZ3O/eCMNyv4OYnGkWbvgzc43Jl
ixQFwXe1h9QQqW1wsh3Mx8UXmOc33QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFMWa
Bbqr5M4OKddSv3B6g865JiSgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EODk1RTQyMjE0RUQxMUYwOUE0QkE5MkE2RUI4QkNDNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsU2AwQBmsVYMA0GCSqG
SIb3DQEBCwUAA4IBAQBq4FERZBLKjX4lbel29JsSFE0Vco1H3NotkCXrus3JmGuM
4qJcpk9KxJuCI9KF3/QA2en5L2OM2BLqucsVcMmkRVIfBWxq6m5VUxUVzka1hquK
6A1oH20UpWJ9dft97H1OtB0OFBtC8CEWqYqLEhWNCXvgVqg1a6ToiANqi9T6ooii
YDuxLe8SY6KfWEUvJIUyCX1bfu4ijtpdmMZQiLhSeSSWgRFLNRPmiGK9y9MITBGA
pRzeZ85kEpPkglKRq+D/mAfR1wWIz96OK9gIhnqo9vufaQlUXCL/Mczmzm/PuzAw
d1+IsBMe8uUDR4yHc4ni9QuCN/pwRLdwFwnH5rhI
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:38 2025 by rpki-client on console.sobornost.net