Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05890414DE4311EFAC16657B762E951A.roa
File: 05890414DE4311EFAC16657B762E951A.roa (raw, json)
Hash identifier: 7kjg7UwbfyAg9cgDuSfGSRi7KiDZllSCUv8tjO9uoR0=
Subject key identifier: F8:2A:90:CA:7F:AB:33:05:FA:11:F5:AD:2B:5E:40:D2:3E:1F:02:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05890414DE4311EFAC16657B762E951A.roa
Signing time: Wed 29 Jan 2025 13:14:51 +0000
ROA not before: Wed 29 Jan 2025 13:14:47 +0000
ROA not after: Thu 31 Dec 2026 13:14:47 +0000
asID: 35916
IP address blocks: 154.87.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85400 (0x14d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 29 13:14:47 2025 GMT
Not After : Dec 31 13:14:47 2026 GMT
Subject: CN=679a29cb-e08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:81:73:67:b6:0e:34:12:ca:ef:d8:2c:dd:
73:9c:db:d4:eb:6f:99:aa:8b:25:18:8e:97:84:c1:
e8:30:4f:f8:4a:f7:98:2d:77:36:40:50:72:59:be:
83:81:d2:98:be:a1:d3:7d:7a:fd:3d:a1:c4:8b:4f:
eb:a4:62:ea:08:69:e1:d1:2d:92:0c:09:16:34:35:
d5:45:63:a8:6c:7e:37:7f:ba:7c:02:31:5b:04:20:
10:2c:4f:f8:8a:63:d1:d5:8e:ea:79:22:cc:7e:91:
7b:2d:97:56:81:22:1a:be:a7:6c:66:57:94:67:8f:
c4:30:74:25:e9:a3:b6:4f:a0:97:6e:42:a8:4d:7e:
66:3d:c2:34:11:45:42:2a:e3:d2:6e:4d:ef:57:39:
cc:af:46:4a:b3:d4:65:c8:bb:25:50:5f:3c:f6:11:
7e:6b:13:5d:25:db:7c:53:8f:35:64:ed:eb:3b:d5:
92:0e:d5:79:d1:de:c0:d6:be:c1:8e:c4:68:ce:f6:
a7:c8:a5:df:8a:64:34:c4:04:51:06:9b:4f:c7:78:
75:80:59:77:bf:59:28:ef:58:27:bc:b0:3b:1d:d5:
9f:05:a9:fa:25:e0:6e:cb:f6:0e:cd:fa:7c:a9:27:
56:d2:27:07:e2:a4:53:4f:a5:d5:be:e3:df:48:27:
fa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2A:90:CA:7F:AB:33:05:FA:11:F5:AD:2B:5E:40:D2:3E:1F:02:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05890414DE4311EFAC16657B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.87.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:92:c3:e1:82:31:be:e1:d6:ba:d3:c9:ab:2b:64:4c:49:cc:
2f:47:a3:d6:91:8e:f9:1c:0e:1c:04:06:6f:13:e1:5d:04:28:
91:eb:5b:e8:c4:80:80:5c:29:59:fc:cc:fc:2f:14:a8:e8:8c:
07:1f:37:40:84:4b:9f:24:12:02:45:39:04:3e:dd:5d:a8:6d:
60:68:a9:30:84:9f:b4:c6:db:09:3d:39:5a:12:37:f3:50:57:
38:70:ee:fb:25:4d:8a:66:cb:3d:c3:1c:6c:1b:22:4b:31:0f:
5a:30:d7:b1:8c:cd:31:b6:11:6d:cb:29:24:c0:e6:6d:dd:bf:
62:c1:15:d3:f2:fa:86:92:08:70:9c:f0:fd:5c:b3:dd:b5:ac:
21:ec:5f:18:b1:40:b6:96:68:8b:89:d5:e9:09:21:bd:c0:aa:
9e:43:16:5f:74:cf:f9:59:76:75:2d:6c:27:07:4e:e7:88:38:
5c:4d:40:eb:78:86:cc:c7:c9:08:20:21:85:e4:e3:24:67:00:
ca:58:4a:d2:34:fa:55:a1:b9:33:a6:6a:56:18:3d:1b:29:f3:
6d:7e:e9:3a:4b:b6:32:45:34:8e:e2:4c:ee:cb:91:7c:4d:94:
ef:4b:a2:2c:15:4f:0d:d6:63:72:95:e5:66:b6:a3:7f:6c:f6:
8e:ff:8d:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU2YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI5MTMxNDQ3WhcNMjYxMjMxMTMxNDQ3WjAYMRYw
FAYDVQQDEw02NzlhMjljYi1lMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzVqBc2e2DjQSyu/YLN1znNvU62+ZqoslGI6XhMHoME/4SveYLXc2QFBy
Wb6DgdKYvqHTfXr9PaHEi0/rpGLqCGnh0S2SDAkWNDXVRWOobH43f7p8AjFbBCAQ
LE/4imPR1Y7qeSLMfpF7LZdWgSIavqdsZleUZ4/EMHQl6aO2T6CXbkKoTX5mPcI0
EUVCKuPSbk3vVznMr0ZKs9RlyLslUF889hF+axNdJdt8U481ZO3rO9WSDtV50d7A
1r7BjsRozvanyKXfimQ0xARRBptPx3h1gFl3v1ko71gnvLA7HdWfBan6JeBuy/YO
zfp8qSdW0icH4qRTT6XVvuPfSCf6wwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPgq
kMp/qzMF+hH1rSteQNI+HwIrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNTg5MDQxNERFNDMxMUVGQUMxNjY1N0I3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlcAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKksPhgjG+4da608mrK2RMScwvR6PWkY75HA4cBAZvE+FdBCiR61vo
xICAXClZ/Mz8LxSo6IwHHzdAhEufJBICRTkEPt1dqG1gaKkwhJ+0xtsJPTlaEjfz
UFc4cO77JU2KZss9wxxsGyJLMQ9aMNexjM0xthFtyykkwOZt3b9iwRXT8vqGkghw
nPD9XLPdtawh7F8YsUC2lmiLidXpCSG9wKqeQxZfdM/5WXZ1LWwnB07niDhcTUDr
eIbMx8kIICGF5OMkZwDKWErSNPpVobkzpmpWGD0bKfNtfuk6S7YyRTSO4kzuy5F8
TZTvS6IsFU8N1mNyleVmtqN/bPaO/42/
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:35:20 2025 by rpki-client