Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47E8398224D011F0B02CDAC6DAE4EC9C.roa
File: 47E8398224D011F0B02CDAC6DAE4EC9C.roa (raw, json)
Hash identifier: cZPINSKDhJ2qJauCUGtTbUb2PlA4j6akIGCOB/sufpU=
Subject key identifier: BC:33:6F:40:0F:2E:5E:2A:7E:93:77:6F:FE:6C:07:A7:61:15:0B:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47E8398224D011F0B02CDAC6DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 08:02:23 +0000
ROA not before: Tue 29 Apr 2025 08:02:18 +0000
ROA not after: Sun 18 May 2025 08:02:18 +0000
asID: 132839
IP address blocks: 154.195.192.0/19 maxlen: 24
154.195.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97473 (0x17cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 08:02:18 2025 GMT
Not After : May 18 08:02:18 2025 GMT
Subject: CN=6810878f-4fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:96:de:0d:49:ec:cf:a2:1d:bc:9b:50:2a:
5b:6d:aa:36:58:c4:a4:25:d8:23:22:e8:81:93:01:
f6:e5:48:da:64:66:5e:f4:db:79:26:59:bc:f4:e6:
f4:a2:b9:dc:ee:33:89:5c:fd:3c:0a:02:07:9a:59:
6a:db:2a:b2:c3:64:10:6d:c6:96:ca:83:7b:92:50:
7f:7a:43:05:c1:e6:2f:02:c5:1b:d4:65:40:60:48:
b6:80:62:a4:6a:c6:24:8f:ee:bd:95:4a:4b:e7:a7:
1a:7f:42:23:36:63:1a:b8:9d:f6:b8:64:8d:f1:8c:
87:e0:6e:5e:d5:b0:5a:1a:95:9b:b9:66:01:6a:ff:
65:29:77:a7:04:0f:75:f0:11:de:75:d0:ae:20:fa:
24:f7:65:da:0e:63:e6:5e:5e:f6:8e:84:83:63:21:
1c:3f:af:ab:bc:19:55:49:04:c2:e1:8e:89:13:d6:
c1:db:06:ca:69:7e:83:d0:92:f2:9e:6a:cc:1c:02:
74:ee:7b:de:0c:5c:02:65:bb:99:5c:03:88:45:0f:
56:65:fa:58:e8:dc:d5:2d:4a:13:2b:43:52:b7:ef:
bc:4b:98:b2:64:d4:c5:8e:27:ca:4d:a7:78:40:dd:
8b:e7:c2:7b:11:12:4e:56:c4:b8:25:df:b2:69:b0:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:6F:40:0F:2E:5E:2A:7E:93:77:6F:FE:6C:07:A7:61:15:0B:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47E8398224D011F0B02CDAC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.192.0/18
Signature Algorithm: sha256WithRSAEncryption
cc:de:5f:02:c7:bf:5b:68:2a:11:6b:8e:49:46:ed:10:8e:72:
21:2f:4a:49:53:c5:fe:63:37:b0:7d:c6:01:67:0c:09:55:03:
db:ce:00:8d:a6:ee:ef:c7:43:ff:87:73:32:9a:34:80:f0:dd:
25:79:d1:b2:01:9d:89:18:a3:0b:30:58:6d:4b:bf:6d:a7:56:
db:56:1f:60:eb:a1:fb:7d:b3:4b:ce:57:2b:51:fa:92:f3:a0:
b5:88:ce:a6:60:9f:ba:84:88:1a:f5:b9:a9:52:5a:e2:9e:6d:
fb:69:32:d6:49:db:e3:8d:32:99:42:82:19:b0:e3:f1:87:51:
fb:c9:0b:ab:f3:4b:08:83:4f:72:7f:5e:75:0b:7c:0b:0d:1b:
e6:a8:5c:1f:c7:51:84:50:c6:0c:e2:6b:eb:79:b6:cf:ce:f2:
4f:fc:9a:2f:07:16:c7:eb:15:41:af:e8:15:f0:88:fe:4a:57:
aa:15:3e:90:c9:c5:c2:80:f3:de:39:16:d5:fd:77:95:c3:ca:
70:43:b1:51:6d:1d:b1:f9:95:f9:36:0a:2e:20:e0:d8:b6:26:
e2:14:81:89:38:00:88:9e:86:8e:d9:04:97:93:ce:7f:f1:8b:
1e:8a:23:62:93:44:cb:07:55:61:95:99:91:33:fd:ce:3c:28:
3a:2a:d9:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXzBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI5MDgwMjE4WhcNMjUwNTE4MDgwMjE4WjAYMRYw
FAYDVQQDEw02ODEwODc4Zi00ZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA326W3g1J7M+iHbybUCpbbao2WMSkJdgjIuiBkwH25UjaZGZe9Nt5Jlm8
9Ob0ornc7jOJXP08CgIHmllq2yqyw2QQbcaWyoN7klB/ekMFweYvAsUb1GVAYEi2
gGKkasYkj+69lUpL56caf0IjNmMauJ32uGSN8YyH4G5e1bBaGpWbuWYBav9lKXen
BA918BHeddCuIPok92XaDmPmXl72joSDYyEcP6+rvBlVSQTC4Y6JE9bB2wbKaX6D
0JLynmrMHAJ07nveDFwCZbuZXAOIRQ9WZfpY6NzVLUoTK0NSt++8S5iyZNTFjifK
Tad4QN2L58J7ERJOVsS4Jd+yabDxqwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLwz
b0APLl4qfpN3b/5sB6dhFQvEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80N0U4Mzk4MjI0RDAxMUYwQjAyQ0RBQzZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsPAMA0GCSqGSIb3DQEB
CwUAA4IBAQDM3l8Cx79baCoRa45JRu0QjnIhL0pJU8X+YzewfcYBZwwJVQPbzgCN
pu7vx0P/h3MymjSA8N0ledGyAZ2JGKMLMFhtS79tp1bbVh9g66H7fbNLzlcrUfqS
86C1iM6mYJ+6hIga9bmpUlrinm37aTLWSdvjjTKZQoIZsOPxh1H7yQur80sIg09y
f151C3wLDRvmqFwfx1GEUMYM4mvrebbPzvJP/JovBxbH6xVBr+gV8Ij+SleqFT6Q
ycXCgPPeORbV/XeVw8pwQ7FRbR2x+ZX5NgouIODYtibiFIGJOACInoaO2QSXk85/
8YseiiNik0TLB1VhlZmRM/3OPCg6Ktm6
-----END CERTIFICATE-----
Generated at Sat May 10 22:18:42 2025 by rpki-client