Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/537E8FA830B511F092956FD8DAE4EC9C.roa
File: 537E8FA830B511F092956FD8DAE4EC9C.roa (raw, json)
Hash identifier: 1ZmRsiMVpl7CnucgjSqEQ/Uu8d2UR+CrtuH/dr4zdiQ=
Subject key identifier: F7:9B:62:2E:32:83:AB:18:B1:02:E4:83:B6:83:9C:1B:A5:57:38:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01809F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/537E8FA830B511F092956FD8DAE4EC9C.roa
Signing time: Wed 14 May 2025 11:19:40 +0000
ROA not before: Wed 14 May 2025 11:19:35 +0000
ROA not after: Sat 24 May 2025 11:19:35 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98463 (0x1809f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 11:19:35 2025 GMT
Not After : May 24 11:19:35 2025 GMT
Subject: CN=68247c4c-8870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:bd:54:a7:c8:be:c7:59:21:02:5e:1e:b3:
6a:4c:94:f1:63:88:4f:23:5d:2b:1e:8d:aa:d6:52:
e3:d5:5d:55:3e:40:f2:0d:71:fc:26:05:11:97:e1:
a0:11:72:fb:ed:c6:a9:2b:38:af:9a:2e:90:ad:58:
1d:09:cd:f0:b3:64:6f:6e:a0:99:cb:6a:35:32:d5:
5b:e5:35:01:eb:8e:0c:ff:7a:27:eb:f5:5b:f0:6d:
e1:5d:26:f1:41:08:a2:d9:2e:07:6c:aa:32:36:ba:
cf:d7:dd:b1:43:43:4e:a5:f6:c9:ee:19:9d:6c:b9:
ab:59:f1:9a:a2:13:6e:45:77:96:fc:1f:e5:ea:05:
b4:b7:a5:fc:60:33:da:ea:a4:72:4a:3d:23:5b:3d:
fa:56:28:de:d0:4b:64:29:1f:06:bc:6d:dc:6e:60:
55:31:e1:e0:70:8b:8f:38:27:0e:a4:e4:9e:21:d4:
d7:f0:ac:77:18:d8:15:f4:0b:c7:2e:a4:63:52:11:
a8:07:e2:b8:90:42:d1:14:b8:05:20:d8:9c:cf:c4:
3f:f4:23:af:d9:47:57:9d:00:f4:59:d5:c1:a5:7a:
24:21:1f:80:fc:fb:96:3a:ba:95:49:d1:92:76:14:
14:fb:5c:3b:67:1d:14:e9:11:e4:45:13:3b:f2:d7:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9B:62:2E:32:83:AB:18:B1:02:E4:83:B6:83:9C:1B:A5:57:38:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/537E8FA830B511F092956FD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:8b:9a:20:6b:af:e3:f9:ce:a0:7e:60:16:12:dc:d5:08:dd:
69:7c:18:dd:39:fd:13:f4:89:4e:e1:ed:69:88:9f:84:30:40:
15:64:8b:57:e8:a7:a7:9a:19:90:0b:f5:02:dc:0e:8f:6f:7a:
6c:c2:59:ba:c5:08:5f:d7:98:36:6e:bc:b2:41:2a:23:e5:e2:
e5:54:d5:46:da:f7:18:cc:c2:69:1b:97:22:27:af:96:ec:dc:
34:af:e6:02:96:c5:b9:5c:33:99:5f:3d:ab:83:81:0f:ab:af:
f4:b6:3a:fb:78:cd:83:1c:dd:5b:37:98:73:da:2b:5a:4a:c8:
b2:a3:3f:48:c8:e7:01:a6:ec:29:89:de:75:e0:ea:f0:75:de:
00:4a:c8:f4:cc:1b:b1:61:79:bb:02:c7:c7:45:e0:74:52:5f:
09:6f:d5:6f:75:3a:c1:3e:da:4b:2e:79:71:5d:bd:bb:2e:c6:
e6:f3:09:ba:ca:ba:17:09:84:b5:e6:23:5e:8e:47:d5:89:d7:
42:a1:d3:28:51:16:11:7f:95:c7:17:7c:1e:d2:84:1c:94:eb:
32:70:3f:68:e4:c6:ff:f7:44:26:55:26:5d:33:0a:2c:e1:13:
d6:df:f9:b2:33:b2:87:90:e8:48:cd:1e:73:f3:6a:0f:cc:18:
95:b6:e8:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYCfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE0MTExOTM1WhcNMjUwNTI0MTExOTM1WjAYMRYw
FAYDVQQDEw02ODI0N2M0Yy04ODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw6m9VKfIvsdZIQJeHrNqTJTxY4hPI10rHo2q1lLj1V1VPkDyDXH8JgUR
l+GgEXL77capKzivmi6QrVgdCc3ws2RvbqCZy2o1MtVb5TUB644M/3on6/Vb8G3h
XSbxQQii2S4HbKoyNrrP192xQ0NOpfbJ7hmdbLmrWfGaohNuRXeW/B/l6gW0t6X8
YDPa6qRySj0jWz36Vije0EtkKR8GvG3cbmBVMeHgcIuPOCcOpOSeIdTX8Kx3GNgV
9AvHLqRjUhGoB+K4kELRFLgFINicz8Q/9COv2UdXnQD0WdXBpXokIR+A/PuWOrqV
SdGSdhQU+1w7Zx0U6RHkRRM78tdcvQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPeb
Yi4yg6sYsQLkg7aDnBulVzitMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MzdFOEZBODMwQjUxMUYwOTI5NTZGRDhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlIgMA0GCSqGSIb3DQEB
CwUAA4IBAQBbi5oga6/j+c6gfmAWEtzVCN1pfBjdOf0T9IlO4e1piJ+EMEAVZItX
6KenmhmQC/UC3A6Pb3pswlm6xQhf15g2bryyQSoj5eLlVNVG2vcYzMJpG5ciJ6+W
7Nw0r+YClsW5XDOZXz2rg4EPq6/0tjr7eM2DHN1bN5hz2itaSsiyoz9IyOcBpuwp
id514Orwdd4ASsj0zBuxYXm7AsfHReB0Ul8Jb9VvdTrBPtpLLnlxXb27Lsbm8wm6
yroXCYS15iNejkfViddCodMoURYRf5XHF3we0oQclOsycD9o5Mb/90QmVSZdMwos
4RPW3/myM7KHkOhIzR5z82oPzBiVtugb
-----END CERTIFICATE-----
Generated at Thu May 15 23:44:02 2025 by rpki-client