Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/009785E2C0F311EF82B4BA8F762E951A.roa
File: 009785E2C0F311EF82B4BA8F762E951A.roa (raw, json)
Hash identifier: pC2wZxuJKceCmJOMvFmUGsF21t3/hLNONYghwOh+000=
Subject key identifier: D4:C5:FD:4D:F3:72:09:BB:14:AC:BC:0A:C4:0E:E6:C8:AA:D5:D2:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/009785E2C0F311EF82B4BA8F762E951A.roa
Signing time: Mon 23 Dec 2024 05:58:59 +0000
ROA not before: Mon 23 Dec 2024 05:58:55 +0000
ROA not after: Wed 10 Dec 2025 05:58:55 +0000
asID: 984
IP address blocks: 154.90.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73582 (0x11f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:58:55 2024 GMT
Not After : Dec 10 05:58:55 2025 GMT
Subject: CN=6768fc23-3e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:0e:06:cd:6c:c5:22:fb:a6:16:cd:bb:8d:
ad:f1:b3:ce:bf:cf:de:5a:56:d2:fc:2d:7d:ae:e0:
20:34:cd:f4:53:09:cf:f5:4a:84:dd:d3:72:f2:40:
03:6c:5e:5e:d3:2a:92:8b:ab:c4:cf:6c:bf:13:82:
2f:60:a4:33:11:32:7c:5c:c7:65:e4:9a:c9:a3:25:
57:d7:a0:eb:ce:37:22:d7:1c:f7:eb:5d:0e:10:1e:
cb:37:5c:15:46:ca:06:89:60:82:87:28:88:6e:39:
1a:b5:8a:07:fc:25:70:90:5c:20:ca:0f:3c:48:5a:
0e:1f:3e:bc:7f:49:f9:13:1c:8a:2a:2a:ad:8b:9c:
b2:6a:32:b6:ed:18:4a:56:63:78:81:90:ff:59:82:
17:2d:b4:04:e2:b1:48:89:56:ae:54:81:57:30:87:
88:17:9a:4a:6e:14:2f:55:d1:f7:e5:25:ab:15:e0:
a7:e4:e6:2a:de:99:25:04:28:60:fe:ba:69:5e:16:
53:fc:00:d0:41:16:04:be:0c:9b:20:f1:7b:82:8b:
1c:d3:d3:b1:1d:ee:48:ff:91:a4:5e:50:4c:fe:4c:
a3:83:0c:e6:a3:e6:76:6e:a3:ce:3d:86:1d:15:d8:
c8:1c:e5:34:81:97:9c:9d:5f:76:2f:d4:26:e9:a4:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C5:FD:4D:F3:72:09:BB:14:AC:BC:0A:C4:0E:E6:C8:AA:D5:D2:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/009785E2C0F311EF82B4BA8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d8:1a:3d:42:56:39:f2:98:96:60:e4:c1:11:d4:00:33:c5:
7e:b8:7d:c8:55:bc:42:a1:a5:bc:51:5a:76:55:a1:0b:f3:0a:
9c:55:1d:fb:3b:54:17:ee:8a:ae:74:45:fe:2e:59:ed:21:72:
6b:a9:37:c9:8d:80:21:a6:23:37:0c:e5:57:99:33:6f:d9:5d:
a0:2c:3a:c5:ef:1f:51:00:20:a2:98:1d:4f:16:4b:f9:9a:3c:
cd:30:ce:64:b5:c3:49:fc:36:28:85:0c:00:70:e6:1b:fc:07:
62:1d:3e:64:c7:81:9a:d5:ba:cc:e0:e9:ef:c5:d8:eb:21:07:
4f:5f:ab:c8:fa:5c:4d:23:ea:1e:c3:3c:77:98:7e:eb:9a:c7:
d5:a1:20:4d:61:d7:4d:9c:28:49:6d:f4:27:80:09:dc:27:2b:
0b:27:d7:d4:74:94:7d:35:71:0f:a2:8d:ef:17:de:2f:13:50:
dc:9e:87:8a:96:be:8e:4b:c2:03:f8:32:d6:5f:dd:76:fd:59:
b5:a2:1b:a1:a6:63:4d:54:85:e9:e8:a6:7e:d4:e5:c7:65:02:
b2:a5:fb:b5:4a:f9:1f:ce:78:59:83:e3:22:02:7f:6b:c4:61:
d4:6f:e2:82:19:bb:cd:b7:33:47:ed:fa:30:6c:f1:1d:0f:7e:
24:d2:89:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR9uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDU1ODU1WhcNMjUxMjEwMDU1ODU1WjAYMRYw
FAYDVQQDEw02NzY4ZmMyMy0zZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwIUOBs1sxSL7phbNu42t8bPOv8/eWlbS/C19ruAgNM30UwnP9UqE3dNy
8kADbF5e0yqSi6vEz2y/E4IvYKQzETJ8XMdl5JrJoyVX16Drzjci1xz3610OEB7L
N1wVRsoGiWCChyiIbjkatYoH/CVwkFwgyg88SFoOHz68f0n5ExyKKiqti5yyajK2
7RhKVmN4gZD/WYIXLbQE4rFIiVauVIFXMIeIF5pKbhQvVdH35SWrFeCn5OYq3pkl
BChg/rppXhZT/ADQQRYEvgybIPF7gosc09OxHe5I/5GkXlBM/kyjgwzmo+Z2bqPO
PYYdFdjIHOU0gZecnV92L9Qm6aTWrQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNTF
/U3zcgm7FKy8CsQO5siq1dKKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMDk3ODVFMkMwRjMxMUVGODJCNEJBOEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlptMA0GCSqGSIb3DQEB
CwUAA4IBAQCo2Bo9QlY58piWYOTBEdQAM8V+uH3IVbxCoaW8UVp2VaEL8wqcVR37
O1QX7oqudEX+LlntIXJrqTfJjYAhpiM3DOVXmTNv2V2gLDrF7x9RACCimB1PFkv5
mjzNMM5ktcNJ/DYohQwAcOYb/AdiHT5kx4Ga1brM4OnvxdjrIQdPX6vI+lxNI+oe
wzx3mH7rmsfVoSBNYddNnChJbfQngAncJysLJ9fUdJR9NXEPoo3vF94vE1DcnoeK
lr6OS8ID+DLWX912/Vm1ohuhpmNNVIXp6KZ+1OXHZQKypfu1SvkfznhZg+MiAn9r
xGHUb+KCGbvNtzNH7fowbPEdD34k0olC
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:40 2025 by rpki-client