Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/842810822FFE11F08F878C8FDAE4EC9C.roa
File: 842810822FFE11F08F878C8FDAE4EC9C.roa (raw, json)
Hash identifier: KN7TGhzvnq6AfHN7wXh0ncZ+2dMNxDGB6QHUS9ogCXE=
Subject key identifier: 5B:65:FB:9F:4D:CC:B4:2C:67:87:90:34:AC:B6:AB:FC:FC:6E:A6:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018072
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/842810822FFE11F08F878C8FDAE4EC9C.roa
Signing time: Tue 13 May 2025 13:31:04 +0000
ROA not before: Tue 13 May 2025 13:30:59 +0000
ROA not after: Fri 20 Jun 2025 13:30:59 +0000
asID: 18779
IP address blocks: 154.205.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98418 (0x18072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 13:30:59 2025 GMT
Not After : Jun 20 13:30:59 2025 GMT
Subject: CN=68234998-1431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:16:7e:29:c5:a3:7c:95:12:69:b4:2f:d4:
e3:9b:46:8f:a4:23:b9:bc:3d:1f:68:88:02:2d:6f:
22:0e:8c:d3:47:e9:29:f8:ce:41:9d:81:2a:fa:9d:
84:c7:15:7b:84:37:d2:a2:fa:a8:56:fd:a1:b5:19:
b6:0a:66:b9:d9:7a:03:8d:21:0c:81:e9:9a:27:fb:
b9:04:7a:2d:79:91:4d:96:46:04:43:55:18:1c:a3:
3b:37:45:12:b7:7c:eb:63:86:16:51:5b:8e:5f:a2:
0c:59:68:7d:69:f8:ef:e0:21:16:08:0c:17:a6:5e:
62:f5:d5:3b:4c:70:8b:2a:f4:13:ed:5c:92:c9:ec:
1b:2a:14:70:2d:d4:d0:b8:04:39:8d:ef:12:f5:a2:
e9:c0:ed:e6:cd:36:66:16:df:91:ae:70:06:f4:75:
2c:bc:53:17:ff:c6:9e:f0:f6:f4:39:56:4a:11:57:
5f:30:31:fb:76:82:1b:70:e2:41:77:31:c3:27:e3:
0e:d4:61:24:4c:02:78:57:74:16:b6:ea:73:06:87:
d4:ea:c0:6b:05:13:4d:3e:51:a9:8d:3b:11:1e:2b:
2b:06:5b:27:89:5c:d9:ef:77:33:e4:ad:83:73:16:
a3:cf:66:be:87:e0:68:b1:3a:f4:6b:d1:cd:57:6b:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:FB:9F:4D:CC:B4:2C:67:87:90:34:AC:B6:AB:FC:FC:6E:A6:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/842810822FFE11F08F878C8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.30.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:97:78:16:03:d3:07:46:8e:a8:f8:bd:52:38:8e:18:53:d2:
60:f7:ba:0a:ff:58:79:12:b5:75:1d:2f:62:4b:17:66:bb:ac:
a5:a6:f7:6e:41:41:06:58:82:c1:cd:8a:be:ff:29:7d:2e:2e:
e2:18:bb:a5:6a:b8:48:d5:e4:08:b0:bb:db:3a:23:8c:da:20:
88:f7:c7:81:26:c3:1d:a9:8f:ca:25:ab:0b:a7:42:4a:11:0f:
39:53:67:c8:99:6d:30:db:9b:d4:11:6f:17:4d:f1:5a:6a:0a:
a2:19:04:33:ca:a8:9e:f4:ff:f4:f4:bd:e5:7f:f2:fc:92:d1:
16:68:6a:79:85:ac:7a:f3:1e:47:dd:86:04:be:a6:20:e2:7b:
f3:7e:82:ae:b6:ff:81:85:2b:21:47:4a:c0:1d:69:4d:f2:0f:
0e:21:c4:03:bc:aa:53:98:be:18:1a:93:fd:8b:5b:af:3a:06:
72:8c:54:06:bf:41:aa:30:2c:89:bb:a1:ac:ac:f1:55:e6:81:
65:c0:ba:95:ca:11:b4:46:0d:85:7d:bd:b6:ae:50:44:3d:dd:
d9:74:69:98:b9:77:6d:b8:ba:da:28:64:f2:3b:f9:28:fb:32:
6c:18:24:36:a0:79:e0:30:10:62:66:8e:6f:60:91:7f:c8:47:
4c:ba:7e:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYByMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTEzMTMzMDU5WhcNMjUwNjIwMTMzMDU5WjAYMRYw
FAYDVQQDEw02ODIzNDk5OC0xNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1XsWfinFo3yVEmm0L9Tjm0aPpCO5vD0faIgCLW8iDozTR+kp+M5BnYEq
+p2ExxV7hDfSovqoVv2htRm2Cma52XoDjSEMgemaJ/u5BHoteZFNlkYEQ1UYHKM7
N0USt3zrY4YWUVuOX6IMWWh9afjv4CEWCAwXpl5i9dU7THCLKvQT7VySyewbKhRw
LdTQuAQ5je8S9aLpwO3mzTZmFt+RrnAG9HUsvFMX/8ae8Pb0OVZKEVdfMDH7doIb
cOJBdzHDJ+MO1GEkTAJ4V3QWtupzBofU6sBrBRNNPlGpjTsRHisrBlsniVzZ73cz
5K2Dcxajz2a+h+BosTr0a9HNV2soSQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFtl
+59NzLQsZ4eQNKy2q/z8bqZqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NDI4MTA4MjJGRkUxMUYwOEY4NzhDOEZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms0eMA0GCSqGSIb3DQEB
CwUAA4IBAQAPl3gWA9MHRo6o+L1SOI4YU9Jg97oK/1h5ErV1HS9iSxdmu6ylpvdu
QUEGWILBzYq+/yl9Li7iGLularhI1eQIsLvbOiOM2iCI98eBJsMdqY/KJasLp0JK
EQ85U2fImW0w25vUEW8XTfFaagqiGQQzyqie9P/09L3lf/L8ktEWaGp5hax68x5H
3YYEvqYg4nvzfoKutv+BhSshR0rAHWlN8g8OIcQDvKpTmL4YGpP9i1uvOgZyjFQG
v0GqMCyJu6GsrPFV5oFlwLqVyhG0Rg2Ffb22rlBEPd3ZdGmYuXdtuLraKGTyO/ko
+zJsGCQ2oHngMBBiZo5vYJF/yEdMun4M
-----END CERTIFICATE-----
Generated at Thu May 15 23:47:07 2025 by rpki-client