Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4EEDED6242911F0AF5FC2E2DAE4EC9C.roa
File: E4EEDED6242911F0AF5FC2E2DAE4EC9C.roa (raw, json)
Hash identifier: xlifq+lhzHMYEAlEEL3dR7iki4U4tT/J8LwHRUmaP1o=
Subject key identifier: 8C:EA:95:3A:87:61:A3:70:FB:DB:92:2E:DF:24:4E:38:4B:DC:95:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4EEDED6242911F0AF5FC2E2DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:11:21 +0000
ROA not before: Mon 28 Apr 2025 12:11:16 +0000
ROA not after: Mon 20 Mar 2028 12:11:16 +0000
asID: 17561
IP address blocks: 154.193.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97178 (0x17b9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:11:16 2025 GMT
Not After : Mar 20 12:11:16 2028 GMT
Subject: CN=680f7068-4487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:ee:4c:57:ec:c4:b6:a3:82:bd:7a:52:14:
69:9f:b5:60:2c:a7:e4:96:a1:34:00:f0:d9:39:4b:
32:38:98:b0:7f:21:e7:ce:e5:85:88:6c:33:2d:28:
f6:ff:b8:fb:8e:57:f7:88:ea:8c:52:3d:63:29:f4:
74:a0:4b:81:fa:b4:55:3e:ec:80:f1:b9:72:01:42:
57:c2:16:df:ba:42:40:75:58:05:6d:0d:cf:ca:5f:
62:08:85:5a:d5:90:b9:bb:5f:f3:f9:86:95:cd:26:
1c:dd:a7:e4:00:da:f0:17:67:87:ab:9a:74:ba:97:
3f:26:1a:fd:e3:27:01:18:fb:a1:ed:aa:35:60:f8:
72:7f:3b:eb:41:28:be:d1:f2:4d:57:5b:02:43:f8:
5d:87:4d:c0:74:f6:fa:8e:f9:18:55:d0:bb:be:3e:
c8:25:6e:60:2a:42:a7:78:ee:58:f9:9e:2c:75:d4:
85:a9:ee:79:bf:31:ce:02:1f:fb:d6:d7:42:bd:59:
99:7c:21:1b:ad:7c:64:b0:32:57:1e:31:58:31:0f:
e2:f7:7d:52:71:d5:be:8e:77:ae:d6:e2:22:69:5f:
5b:54:78:90:44:c6:60:65:4a:a4:60:13:53:4e:18:
b2:e6:7f:89:e7:1a:c7:4b:c2:a5:89:83:df:45:f0:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EA:95:3A:87:61:A3:70:FB:DB:92:2E:DF:24:4E:38:4B:DC:95:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4EEDED6242911F0AF5FC2E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.39.0/24
Signature Algorithm: sha256WithRSAEncryption
23:dc:6a:8a:43:54:21:25:db:22:70:7c:7d:81:3e:d0:04:1c:
45:81:98:40:03:e4:99:5a:2d:8d:7d:fb:e0:76:19:52:14:d9:
68:e9:ec:ee:55:b5:28:cd:49:dd:53:a5:54:7c:7c:2e:fb:8c:
79:f1:92:6d:ac:6f:57:59:07:e3:36:9d:75:86:8f:b2:de:f6:
ab:44:b5:39:19:e6:ad:95:74:ca:e2:9c:ba:45:7c:37:46:18:
16:40:27:e6:53:06:39:c6:09:3d:96:3c:70:a9:23:07:62:e6:
df:1a:8c:94:c6:63:00:90:58:74:82:b7:5a:1e:0f:19:6c:23:
c6:df:46:b0:4b:fa:50:9c:ec:25:c5:ff:3a:9e:1e:dc:e6:83:
5b:67:f6:ea:c6:5c:df:26:73:c6:0e:99:5d:02:c2:78:b0:40:
e2:2d:e5:84:5f:eb:6b:4b:d8:55:57:53:da:47:fd:9e:9f:4f:
90:5b:28:b2:49:b5:a2:11:85:3b:b9:20:8c:5b:a2:0e:52:9e:
12:69:d0:16:7a:9b:5c:dc:06:e5:5b:b5:1c:38:40:4d:86:a1:
da:b5:c8:59:73:ab:e5:62:65:67:d1:6f:5c:f1:58:ff:3e:69:
7b:0e:60:5c:e0:0b:9e:b3:a2:a9:08:37:e7:24:32:c2:b5:a6:
cf:c2:73:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXuaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTIxMTE2WhcNMjgwMzIwMTIxMTE2WjAYMRYw
FAYDVQQDEw02ODBmNzA2OC00NDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3LXuTFfsxLajgr16UhRpn7VgLKfklqE0APDZOUsyOJiwfyHnzuWFiGwz
LSj2/7j7jlf3iOqMUj1jKfR0oEuB+rRVPuyA8blyAUJXwhbfukJAdVgFbQ3Pyl9i
CIVa1ZC5u1/z+YaVzSYc3afkANrwF2eHq5p0upc/Jhr94ycBGPuh7ao1YPhyfzvr
QSi+0fJNV1sCQ/hdh03AdPb6jvkYVdC7vj7IJW5gKkKneO5Y+Z4sddSFqe55vzHO
Ah/71tdCvVmZfCEbrXxksDJXHjFYMQ/i931ScdW+jneu1uIiaV9bVHiQRMZgZUqk
YBNTThiy5n+J5xrHS8KliYPfRfAqlwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIzq
lTqHYaNw+9uSLt8kTjhL3JUpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNEVFREVENjI0MjkxMUYwQUY1RkMyRTJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsEnMA0GCSqGSIb3DQEB
CwUAA4IBAQAj3GqKQ1QhJdsicHx9gT7QBBxFgZhAA+SZWi2NffvgdhlSFNlo6ezu
VbUozUndU6VUfHwu+4x58ZJtrG9XWQfjNp11ho+y3varRLU5GeatlXTK4py6RXw3
RhgWQCfmUwY5xgk9ljxwqSMHYubfGoyUxmMAkFh0grdaHg8ZbCPG30awS/pQnOwl
xf86nh7c5oNbZ/bqxlzfJnPGDpldAsJ4sEDiLeWEX+trS9hVV1PaR/2en0+QWyiy
SbWiEYU7uSCMW6IOUp4SadAWeptc3AblW7UcOEBNhqHatchZc6vlYmVn0W9c8Vj/
Pml7DmBc4Aues6KpCDfnJDLCtabPwnOQ
-----END CERTIFICATE-----
Generated at Wed May 7 08:46:00 2025 by rpki-client