Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088A73C4C36211EF9488998B762E951A.roa
File: 088A73C4C36211EF9488998B762E951A.roa (raw, json)
Hash identifier: 0UIzyxmjhee4J7z3ZC7jwWkeIwXgYGc7O1MadbIvuNk=
Subject key identifier: BB:57:65:0F:A9:0F:0B:A0:90:19:6D:06:9B:80:14:CB:EC:87:5D:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012668
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088A73C4C36211EF9488998B762E951A.roa
Signing time: Thu 26 Dec 2024 08:18:49 +0000
ROA not before: Thu 26 Dec 2024 08:18:45 +0000
ROA not after: Sun 12 Dec 2027 08:18:45 +0000
asID: 17561
IP address blocks: 154.92.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75368 (0x12668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:18:45 2024 GMT
Not After : Dec 12 08:18:45 2027 GMT
Subject: CN=676d1169-96ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:94:79:a9:4b:79:df:fa:dd:4f:c8:d7:10:
97:f4:f4:db:7e:09:1b:9f:da:6d:35:50:8c:53:2a:
a9:96:b2:a9:34:4d:13:dc:6b:66:93:7d:84:0e:ab:
5f:76:b8:cc:79:1e:cb:e3:c1:73:77:6e:a1:5f:0c:
b9:a6:fc:ed:14:53:3d:26:25:a8:02:d5:17:18:31:
aa:b9:d4:a2:88:cb:31:e4:fd:fe:43:28:63:9e:81:
6a:59:32:05:4e:db:2c:33:bf:8e:52:07:d2:cc:e8:
c3:17:e6:fc:d6:27:d6:8b:b8:b0:a2:66:11:f0:2d:
e2:61:f4:5e:4f:61:00:ba:9b:b7:4c:aa:b4:d4:48:
90:58:87:e3:f7:4a:64:eb:45:06:1d:95:46:96:19:
a6:bb:c5:22:d9:17:e4:79:d8:cd:b3:db:1d:00:65:
07:8c:69:0b:58:fd:6f:fc:af:55:45:16:56:47:0d:
1e:9a:06:39:c9:e6:00:e0:ad:7e:75:8b:49:fd:93:
c0:67:bc:36:2e:95:60:80:1f:a1:8c:b3:de:9b:20:
05:71:f7:eb:94:d7:ef:dd:73:de:11:f3:2f:50:d8:
a0:14:e5:79:76:81:04:d4:de:79:de:ff:56:d8:c3:
68:14:a1:ab:78:4a:02:35:4e:30:c1:84:f4:a7:0b:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:65:0F:A9:0F:0B:A0:90:19:6D:06:9B:80:14:CB:EC:87:5D:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088A73C4C36211EF9488998B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/24
Signature Algorithm: sha256WithRSAEncryption
86:1c:92:19:c9:d1:64:8b:63:d1:4e:08:47:60:3b:8b:14:83:
c8:58:75:02:87:63:be:f5:f6:4d:a4:c2:58:eb:bd:ff:43:1c:
0b:c7:08:e7:79:18:e7:e2:af:16:27:67:13:a0:a6:9a:48:cb:
87:d7:f2:7f:32:a5:4c:02:7a:0a:6d:8f:00:a6:df:b0:7b:ff:
b2:55:18:44:28:d4:0f:c1:20:15:ca:05:d5:4c:16:91:40:d9:
8a:41:a9:87:61:b0:2c:dd:90:78:8a:e6:0f:98:ca:e2:0c:d4:
35:ac:d8:3a:5e:29:24:46:c7:86:a4:ee:e7:8e:ac:64:40:3e:
2f:1f:df:87:f2:5a:d6:ee:9b:a1:96:bd:50:e8:b7:ff:09:f1:
08:9d:c9:17:22:48:4d:ea:8f:c4:8e:cd:96:fa:fe:ec:ad:8d:
36:25:71:e8:76:1d:2f:e1:51:f3:39:0c:8a:8e:40:16:1f:d6:
da:e4:33:6b:3d:b9:47:2e:ec:57:c6:57:ce:b7:59:6c:a0:68:
23:f5:5d:d0:c4:f0:d9:2d:94:fe:8a:98:03:da:db:77:9a:32:
ee:ff:8c:1f:a6:d2:ae:a2:6e:e8:fd:74:74:d7:31:22:30:dc:
0b:05:cb:68:ba:15:42:b9:6f:07:1f:d3:a9:3d:17:05:7d:44:
28:4a:6b:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASZoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDgxODQ1WhcNMjcxMjEyMDgxODQ1WjAYMRYw
FAYDVQQDEw02NzZkMTE2OS05NmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwPmUealLed/63U/I1xCX9PTbfgkbn9ptNVCMUyqplrKpNE0T3Gtmk32E
DqtfdrjMeR7L48Fzd26hXwy5pvztFFM9JiWoAtUXGDGqudSiiMsx5P3+QyhjnoFq
WTIFTtssM7+OUgfSzOjDF+b81ifWi7iwomYR8C3iYfReT2EAupu3TKq01EiQWIfj
90pk60UGHZVGlhmmu8Ui2RfkedjNs9sdAGUHjGkLWP1v/K9VRRZWRw0emgY5yeYA
4K1+dYtJ/ZPAZ7w2LpVggB+hjLPemyAFcffrlNfv3XPeEfMvUNigFOV5doEE1N55
3v9W2MNoFKGreEoCNU4wwYT0pwt+nQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLtX
ZQ+pDwugkBltBpuAFMvsh108MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wODhBNzNDNEMzNjIxMUVGOTQ4ODk5OEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlwKMA0GCSqGSIb3DQEB
CwUAA4IBAQCGHJIZydFki2PRTghHYDuLFIPIWHUCh2O+9fZNpMJY673/QxwLxwjn
eRjn4q8WJ2cToKaaSMuH1/J/MqVMAnoKbY8Apt+we/+yVRhEKNQPwSAVygXVTBaR
QNmKQamHYbAs3ZB4iuYPmMriDNQ1rNg6XikkRseGpO7njqxkQD4vH9+H8lrW7puh
lr1Q6Lf/CfEInckXIkhN6o/Ejs2W+v7srY02JXHodh0v4VHzOQyKjkAWH9ba5DNr
PblHLuxXxlfOt1lsoGgj9V3QxPDZLZT+ipgD2tt3mjLu/4wfptKuom7o/XR01zEi
MNwLBctouhVCuW8HH9OpPRcFfUQoSms7
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:55:00 2025 by rpki-client