Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47359AF425BE11F08171527BDAE4EC9C.roa
File: 47359AF425BE11F08171527BDAE4EC9C.roa (raw, json)
Hash identifier: 202XVwsyXtCuYLCJtezRDKo3obfaMiBiuMEwEqXNX0A=
Subject key identifier: 9D:57:C7:45:E4:24:74:40:A6:C6:21:3A:AE:2E:BF:2A:A4:51:1C:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47359AF425BE11F08171527BDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 12:26:02 +0000
ROA not before: Wed 30 Apr 2025 12:25:58 +0000
ROA not after: Wed 26 Apr 2028 12:25:58 +0000
asID: 17561
IP address blocks: 154.214.19.0/24 maxlen: 24
154.214.20.0/24 maxlen: 24
154.214.21.0/24 maxlen: 24
154.214.22.0/24 maxlen: 24
154.214.23.0/24 maxlen: 24
154.214.24.0/24 maxlen: 24
154.214.25.0/24 maxlen: 24
154.214.26.0/24 maxlen: 24
154.214.27.0/24 maxlen: 24
154.214.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97638 (0x17d66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 12:25:58 2025 GMT
Not After : Apr 26 12:25:58 2028 GMT
Subject: CN=681216da-c795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:dd:2d:7d:14:90:35:59:1e:4a:be:67:66:
14:f2:ee:18:e2:7b:84:7c:46:87:47:b2:6e:04:4b:
4a:6b:52:36:da:da:eb:83:35:de:72:46:14:db:84:
7d:ae:f2:07:39:84:ab:c0:fa:63:78:52:ba:c6:65:
fb:16:5f:02:1b:81:06:86:93:4c:1d:33:dd:14:26:
fc:0f:c3:7f:17:4a:bf:f3:4e:06:0a:10:76:6f:77:
6d:b4:d9:b9:25:97:84:70:57:92:0f:e5:6b:3a:c2:
a6:ef:8a:bd:20:99:3c:ea:42:bd:94:93:9d:82:bf:
83:79:dc:4d:10:90:8f:1d:d2:a5:56:4d:23:84:ed:
c8:d5:c8:0f:b6:b7:61:6c:a9:a8:de:71:c3:76:54:
c3:46:13:67:1c:13:8b:a8:3e:19:9d:f8:c4:cb:3a:
9f:68:08:19:47:e3:14:9d:73:3d:5b:34:37:42:01:
dc:2c:16:9b:cb:be:d7:7d:ba:18:7d:76:8e:66:59:
5b:fd:21:f4:12:3b:a7:03:d9:f4:0b:a1:9e:55:24:
e6:aa:77:c2:33:bf:16:6b:bc:91:a1:68:7f:90:d5:
8b:4a:5f:14:fd:84:a8:10:e0:bf:8a:ac:9c:28:fa:
55:51:9a:d4:cf:e8:f6:56:c0:a4:41:40:7a:c1:d4:
7b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:57:C7:45:E4:24:74:40:A6:C6:21:3A:AE:2E:BF:2A:A4:51:1C:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47359AF425BE11F08171527BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.19.0-154.214.28.255
Signature Algorithm: sha256WithRSAEncryption
c3:5f:71:4a:a3:7a:d8:3b:69:87:b9:b4:bc:b7:6f:a6:38:5b:
3f:86:e5:fb:ad:30:af:fe:ee:f8:a8:d3:e7:8a:5f:6a:1e:e1:
9d:41:67:8b:3b:8e:01:44:50:15:87:32:f5:f2:39:51:2d:41:
c9:5d:e5:14:96:2e:38:6b:d2:cd:9a:ef:f6:2b:7d:e3:74:fc:
4b:8a:af:e5:55:14:35:34:11:a6:7e:45:89:38:45:c5:36:5b:
fd:3e:38:8d:9a:49:e7:fe:56:77:76:b7:db:ee:42:e7:9e:de:
f4:00:d0:db:00:cc:fb:3b:7c:11:a4:7c:44:12:e2:f4:89:53:
b4:fd:92:73:74:b9:fd:1a:84:19:e0:fa:fc:a7:2a:ae:38:bd:
1e:18:26:87:50:06:e5:05:5a:50:66:9b:eb:b7:e8:60:9f:48:
41:41:92:47:68:e1:9c:af:78:11:02:b0:82:63:26:5e:cd:37:
1e:c9:25:70:ac:b6:ed:6b:a7:cf:85:4d:d4:37:02:3f:2d:e2:
a4:83:74:0a:07:cd:f2:28:17:5e:f3:ee:d2:c1:ec:5b:71:e5:
fe:c1:e4:d0:5e:ef:48:2b:c1:6c:20:82:77:50:65:e0:f2:87:
6a:de:ad:f2:83:b7:d1:44:4b:0e:d5:e5:9b:35:c3:35:25:a1:
7f:0e:39:ad
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAX1mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDMwMTIyNTU4WhcNMjgwNDI2MTIyNTU4WjAYMRYw
FAYDVQQDEw02ODEyMTZkYS1jNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuQndLX0UkDVZHkq+Z2YU8u4Y4nuEfEaHR7JuBEtKa1I22trrgzXeckYU
24R9rvIHOYSrwPpjeFK6xmX7Fl8CG4EGhpNMHTPdFCb8D8N/F0q/804GChB2b3dt
tNm5JZeEcFeSD+VrOsKm74q9IJk86kK9lJOdgr+DedxNEJCPHdKlVk0jhO3I1cgP
trdhbKmo3nHDdlTDRhNnHBOLqD4ZnfjEyzqfaAgZR+MUnXM9WzQ3QgHcLBaby77X
fboYfXaOZllb/SH0EjunA9n0C6GeVSTmqnfCM78Wa7yRoWh/kNWLSl8U/YSoEOC/
iqycKPpVUZrUz+j2VsCkQUB6wdR7mQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJ1X
x0XkJHRApsYhOq4uvyqkURyeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NzM1OUFGNDI1QkUxMUYwODE3MTUyN0JEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACa1hMDBACa1hwwDQYJ
KoZIhvcNAQELBQADggEBAMNfcUqjetg7aYe5tLy3b6Y4Wz+G5futMK/+7vio0+eK
X2oe4Z1BZ4s7jgFEUBWHMvXyOVEtQcld5RSWLjhr0s2a7/YrfeN0/EuKr+VVFDU0
EaZ+RYk4RcU2W/0+OI2aSef+Vnd2t9vuQuee3vQA0NsAzPs7fBGkfEQS4vSJU7T9
knN0uf0ahBng+vynKq44vR4YJodQBuUFWlBmm+u36GCfSEFBkkdo4ZyveBECsIJj
Jl7NNx7JJXCstu1rp8+FTdQ3Aj8t4qSDdAoHzfIoF17z7tLB7Ftx5f7B5NBe70gr
wWwggndQZeDyh2rerfKDt9FESw7V5Zs1wzUloX8OOa0=
-----END CERTIFICATE-----
Generated at Sat May 10 10:20:14 2025 by rpki-client