Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/010DA434CDDC11EFB214E4A8762E951A.roa
File: 010DA434CDDC11EFB214E4A8762E951A.roa (raw, json)
Hash identifier: 5eOGktfVl0EfGXHt/AZNd5dmfgAdi6mo4SK74xjftEo=
Subject key identifier: 81:51:01:70:9B:09:5A:9F:01:9D:2F:F3:3B:98:2F:9F:91:49:E7:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013799
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/010DA434CDDC11EFB214E4A8762E951A.roa
Signing time: Wed 08 Jan 2025 16:17:07 +0000
ROA not before: Wed 08 Jan 2025 16:17:03 +0000
ROA not after: Sat 03 Jan 2026 16:17:03 +0000
asID: 984
IP address blocks: 154.89.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79769 (0x13799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:17:03 2025 GMT
Not After : Jan 3 16:17:03 2026 GMT
Subject: CN=677ea502-6f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:4b:a0:72:e1:ab:41:9d:9a:92:cd:87:6c:
f0:4e:09:2b:00:8b:f2:b6:e4:f2:9d:92:e5:ee:8f:
6e:96:6e:e5:06:f2:7b:d5:ad:0c:a7:b1:23:a1:1a:
e8:63:c3:52:9d:39:e4:f1:16:cb:f3:ac:1e:ec:be:
05:8c:c7:17:a1:e8:3a:31:a7:8a:23:07:02:29:b4:
47:b3:6f:4e:ab:27:98:b5:fc:6d:cf:28:6d:f6:10:
f7:b2:6b:5c:a6:b0:6d:5c:d0:bb:88:f6:2b:c9:ac:
3e:c7:d8:e9:8a:eb:6f:32:c9:ab:0a:41:e1:b4:44:
c2:34:a2:18:00:03:f6:cb:57:8f:0f:ae:83:c9:81:
77:f5:f9:7d:c9:76:62:59:54:46:80:6a:0c:23:cd:
d2:a9:31:bd:e5:9a:5d:81:19:a0:82:aa:df:0c:9b:
20:5b:b7:a5:5e:78:99:a0:9f:b2:c7:54:be:18:8d:
c9:c0:29:ad:af:93:db:e5:a3:d2:e0:e3:db:c2:37:
98:01:ef:2c:20:f5:3e:e4:29:ec:9a:b6:bc:4a:a7:
6f:7c:ec:3e:d9:5e:72:12:57:e8:a5:62:bb:8b:f9:
5a:25:f6:b7:9d:20:04:09:5e:7c:ff:84:53:5d:f0:
9e:a7:ec:ff:55:7e:db:2b:5f:54:88:b1:5f:72:d2:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:51:01:70:9B:09:5A:9F:01:9D:2F:F3:3B:98:2F:9F:91:49:E7:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/010DA434CDDC11EFB214E4A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f6:89:11:6f:31:d2:08:2d:bd:2e:e5:c8:4b:fe:92:97:e3:
ed:70:31:a9:a0:dc:30:67:19:81:c2:de:6e:34:9f:6a:e5:d3:
93:04:39:e9:98:93:e4:b5:fe:a0:e6:56:9c:bc:e5:80:ce:15:
6e:47:b3:83:e5:6b:85:74:41:fb:0c:2c:ee:54:f2:56:2d:0b:
e0:aa:4a:59:74:5f:69:eb:d3:a7:b2:6d:02:0d:41:d7:fc:81:
d6:1e:10:df:1e:a9:d7:dc:2a:e3:17:31:7b:e8:a8:8c:4d:8f:
b2:7d:ac:a0:28:e5:20:17:4b:b3:b6:66:1b:1f:83:36:95:8c:
d8:ae:87:79:31:74:d6:80:15:be:95:c3:ee:64:80:48:0c:52:
70:ff:ed:08:b8:0b:70:4d:79:42:ad:08:55:e6:40:d3:61:fa:
41:c2:d6:39:66:ff:da:1b:80:19:20:8f:bd:c9:82:6a:35:a6:
48:94:c1:6b:52:d5:ef:7e:19:9d:61:ea:91:31:29:d5:74:de:
91:0d:19:76:32:09:e5:80:c8:54:09:86:43:a2:84:e4:14:5d:
d1:33:c0:e3:17:8c:57:53:ea:aa:76:3e:b6:61:87:27:80:91:
78:d0:fd:b5:3e:92:3f:c7:ce:03:f4:e1:c2:06:ff:ea:33:d8:
f0:7d:55:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATeZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTYxNzAzWhcNMjYwMTAzMTYxNzAzWjAYMRYw
FAYDVQQDEw02NzdlYTUwMi02ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwGtLoHLhq0GdmpLNh2zwTgkrAIvytuTynZLl7o9ulm7lBvJ71a0Mp7Ej
oRroY8NSnTnk8RbL86we7L4FjMcXoeg6MaeKIwcCKbRHs29OqyeYtfxtzyht9hD3
smtcprBtXNC7iPYryaw+x9jpiutvMsmrCkHhtETCNKIYAAP2y1ePD66DyYF39fl9
yXZiWVRGgGoMI83SqTG95ZpdgRmggqrfDJsgW7elXniZoJ+yx1S+GI3JwCmtr5Pb
5aPS4OPbwjeYAe8sIPU+5Cnsmra8SqdvfOw+2V5yElfopWK7i/laJfa3nSAECV58
/4RTXfCep+z/VX7bK19UiLFfctJZ/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIFR
AXCbCVqfAZ0v8zuYL5+RSeeVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMTBEQTQzNENEREMxMUVGQjIxNEU0QTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlmbMA0GCSqGSIb3DQEB
CwUAA4IBAQCe9okRbzHSCC29LuXIS/6Sl+PtcDGpoNwwZxmBwt5uNJ9q5dOTBDnp
mJPktf6g5lacvOWAzhVuR7OD5WuFdEH7DCzuVPJWLQvgqkpZdF9p69Onsm0CDUHX
/IHWHhDfHqnX3CrjFzF76KiMTY+yfaygKOUgF0uztmYbH4M2lYzYrod5MXTWgBW+
lcPuZIBIDFJw/+0IuAtwTXlCrQhV5kDTYfpBwtY5Zv/aG4AZII+9yYJqNaZIlMFr
UtXvfhmdYeqRMSnVdN6RDRl2MgnlgMhUCYZDooTkFF3RM8DjF4xXU+qqdj62YYcn
gJF40P21PpI/x84D9OHCBv/qM9jwfVWr
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:51:36 2025 by rpki-client