Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/089B0828F3F111EF9725A4A5762E951A.roa
File: 089B0828F3F111EF9725A4A5762E951A.roa (raw, json)
Hash identifier: wbD3Lg9IiEQfZnZVdtMsjUBrD8gkJwceA9gFwPC85PQ=
Subject key identifier: 56:92:E9:A7:17:F1:27:0D:63:67:3B:E7:83:40:49:49:00:2C:02:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/089B0828F3F111EF9725A4A5762E951A.roa
Signing time: Wed 26 Feb 2025 03:23:23 +0000
ROA not before: Wed 26 Feb 2025 03:23:19 +0000
ROA not after: Thu 19 Feb 2026 03:23:19 +0000
asID: 984
IP address blocks: 154.203.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90275 (0x160a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:23:19 2025 GMT
Not After : Feb 19 03:23:19 2026 GMT
Subject: CN=67be892b-3363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:3e:b2:4e:cb:6d:c8:15:f4:2e:63:f0:39:
31:e8:0c:73:99:3e:61:7e:4f:d9:a1:22:c9:38:65:
bf:b8:89:83:9a:b1:50:18:3f:08:d1:eb:2e:da:f4:
08:1d:31:bd:81:b5:82:c4:97:ef:e4:72:bc:e6:7b:
b9:d1:51:c9:4f:54:36:2f:73:b4:03:77:a7:22:c4:
bf:38:5a:18:d2:1a:c5:44:f8:83:2d:df:a1:fa:a7:
21:e3:43:14:ad:0d:27:14:02:df:dc:1b:74:d5:7d:
32:54:ac:32:25:b9:a2:87:0b:e0:03:00:7b:56:2c:
c6:cc:d3:b2:0f:e9:83:b9:10:7e:00:3a:8c:71:58:
32:11:30:93:88:9a:b9:47:b7:1c:6b:4b:0b:dd:96:
42:c1:b8:c8:35:d4:2a:6b:64:e1:e4:af:b2:ed:c9:
34:2a:48:f1:dd:47:b9:b3:97:75:a9:d8:71:30:78:
4f:c0:49:7e:0d:26:42:48:2c:af:1d:2d:41:8d:aa:
7c:7e:7d:b7:d6:e7:82:58:c6:5b:95:92:2e:73:bc:
9c:28:90:41:22:aa:78:d1:52:82:1b:14:18:86:90:
49:76:66:2f:1c:10:b4:b4:c3:57:67:d8:f2:f6:df:
aa:6f:0f:7c:38:d1:95:44:92:14:86:fa:e6:10:e1:
6d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:E9:A7:17:F1:27:0D:63:67:3B:E7:83:40:49:49:00:2C:02:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/089B0828F3F111EF9725A4A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b4:d9:62:e5:9a:e8:07:b4:78:88:43:83:5f:ce:26:91:3f:
88:c7:b4:af:57:f4:06:56:ea:d9:0b:d0:7c:8f:cd:e6:6e:6a:
71:9c:ab:60:fc:0f:dc:e6:12:84:c4:4b:0f:67:e7:f7:8b:1f:
62:88:8b:2c:3d:21:61:fc:e7:3f:83:09:8b:32:ec:33:b0:52:
12:84:75:7e:da:82:7b:cc:49:36:3b:10:24:29:ce:f6:1e:56:
fb:84:c8:3f:e1:2e:cc:ee:b8:50:2b:15:31:47:bb:34:4a:88:
9f:d9:0f:6c:34:07:2a:d3:9b:9b:34:f3:37:4c:ef:a6:bb:87:
f8:70:61:96:da:23:dc:ed:16:b5:76:82:94:48:59:da:88:51:
b5:67:18:da:ad:de:28:54:aa:5a:08:60:1c:a4:0c:e0:9f:ba:
79:6f:aa:81:1a:f9:37:e0:c8:d6:c5:e0:0c:46:66:6f:63:0d:
09:d0:8a:22:15:e2:0e:df:56:79:23:97:96:73:25:c8:2f:54:
b6:e1:d3:77:3d:d9:00:ab:14:cb:c5:2a:e2:a7:1d:29:28:26:
3e:52:68:ba:36:f4:5c:c5:06:44:8d:a7:c5:0e:b5:ba:98:58:
3e:2e:f0:0c:41:fa:db:d0:c3:ef:4e:e8:65:9a:ff:49:7f:8f:
4d:7d:0c:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWCjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDMyMzE5WhcNMjYwMjE5MDMyMzE5WjAYMRYw
FAYDVQQDEw02N2JlODkyYi0zMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA55g+sk7LbcgV9C5j8Dkx6AxzmT5hfk/ZoSLJOGW/uImDmrFQGD8I0esu
2vQIHTG9gbWCxJfv5HK85nu50VHJT1Q2L3O0A3enIsS/OFoY0hrFRPiDLd+h+qch
40MUrQ0nFALf3Bt01X0yVKwyJbmihwvgAwB7VizGzNOyD+mDuRB+ADqMcVgyETCT
iJq5R7cca0sL3ZZCwbjINdQqa2Th5K+y7ck0Kkjx3Ue5s5d1qdhxMHhPwEl+DSZC
SCyvHS1Bjap8fn231ueCWMZblZIuc7ycKJBBIqp40VKCGxQYhpBJdmYvHBC0tMNX
Z9jy9t+qbw98ONGVRJIUhvrmEOFt4wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFaS
6acX8ScNY2c754NASUkALAKLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wODlCMDgyOEYzRjExMUVGOTcyNUE0QTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmstpMA0GCSqGSIb3DQEB
CwUAA4IBAQCwtNli5ZroB7R4iEODX84mkT+Ix7SvV/QGVurZC9B8j83mbmpxnKtg
/A/c5hKExEsPZ+f3ix9iiIssPSFh/Oc/gwmLMuwzsFIShHV+2oJ7zEk2OxAkKc72
Hlb7hMg/4S7M7rhQKxUxR7s0Soif2Q9sNAcq05ubNPM3TO+mu4f4cGGW2iPc7Ra1
doKUSFnaiFG1Zxjard4oVKpaCGAcpAzgn7p5b6qBGvk34MjWxeAMRmZvYw0J0Ioi
FeIO31Z5I5eWcyXIL1S24dN3PdkAqxTLxSripx0pKCY+Umi6NvRcxQZEjafFDrW6
mFg+LvAMQfrb0MPvTuhlmv9Jf49NfQzj
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:45 2025 by rpki-client