Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/144243B6C19811EFAA61CF93762E951A.roa
File: 144243B6C19811EFAA61CF93762E951A.roa (raw, json)
Hash identifier: KAo9dW7Y/iUYrasTBTbK4UmLLScDpoStSTDHE6fDK08=
Subject key identifier: 26:78:1B:A2:96:CA:6C:77:B5:7C:86:B3:EF:08:B8:8E:9A:DB:88:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012045
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/144243B6C19811EFAA61CF93762E951A.roa
Signing time: Tue 24 Dec 2024 01:40:39 +0000
ROA not before: Tue 24 Dec 2024 01:40:35 +0000
ROA not after: Wed 10 Dec 2025 01:40:35 +0000
asID: 984
IP address blocks: 154.90.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73797 (0x12045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:40:35 2024 GMT
Not After : Dec 10 01:40:35 2025 GMT
Subject: CN=676a1117-9d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:6c:7f:9e:e2:51:7b:2b:1e:83:31:44:4a:
a9:46:87:24:a9:10:be:65:1e:7a:e4:f2:c2:d4:f3:
f5:4d:9b:d7:41:74:0e:21:28:f4:6e:b8:16:c1:a3:
ba:60:c8:47:fa:2b:13:80:93:42:62:42:10:8a:82:
18:d5:3b:85:49:a2:1f:f0:57:db:d6:83:e3:59:1f:
da:15:e5:cb:09:57:3b:37:44:3f:77:b6:69:a7:ca:
8e:4b:56:a6:5e:45:97:26:62:17:5d:18:c0:14:20:
7c:3c:15:66:65:eb:6e:2c:85:3a:95:c8:56:3c:3c:
74:16:3a:11:b8:f5:bc:17:7d:11:59:d8:93:0a:e6:
e6:95:b0:36:fa:2e:01:b4:c2:71:c4:08:f2:e4:7e:
00:93:24:5d:30:f5:3b:28:f8:51:99:64:19:82:85:
0d:f5:bf:d1:dd:a7:1d:95:f6:55:78:b8:35:fd:8f:
3e:03:2e:31:8c:47:13:73:2e:aa:9f:6a:88:38:30:
98:18:16:54:86:97:38:fa:92:c1:98:fc:02:51:3a:
c7:b6:70:55:c4:f9:f6:5c:30:d5:06:1d:a9:db:3c:
f0:82:ab:4f:db:99:7e:b0:c4:51:98:0a:e1:8b:a7:
51:af:a8:95:e0:93:a9:f9:60:bb:ac:bd:98:d2:83:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:78:1B:A2:96:CA:6C:77:B5:7C:86:B3:EF:08:B8:8E:9A:DB:88:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/144243B6C19811EFAA61CF93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ce:3e:ad:ee:84:4b:e9:4b:f4:3d:8a:9b:f8:a5:70:d6:cb:
12:6c:f4:44:58:da:5e:cb:21:af:32:0b:1e:58:4f:03:c0:33:
06:5c:06:31:08:21:40:22:4b:65:40:60:77:b4:14:95:7a:3b:
3f:cd:76:e1:92:28:fe:31:3b:ea:42:da:b5:33:16:3e:f8:ec:
79:01:ed:55:ea:24:40:9d:37:ca:dd:c6:73:06:78:2b:f0:8b:
0a:53:ac:5a:5d:0c:b9:75:b2:37:ff:47:77:a6:33:8c:b4:07:
46:c7:89:9b:27:d8:42:44:1a:72:50:4a:cf:16:01:84:d0:ce:
9a:7f:db:51:5e:0b:22:03:1b:37:bc:cf:b7:67:da:f2:e0:11:
00:9e:3d:e4:e5:a7:d8:aa:bc:cc:62:4b:ef:00:56:eb:6d:50:
51:e7:80:d3:fb:7d:69:35:c2:9d:00:3a:b0:57:97:00:64:78:
d5:32:fe:1c:e6:29:30:81:02:f0:f8:2b:b5:04:df:ab:11:1d:
39:0a:7b:f4:96:dc:89:69:d8:13:b2:6a:58:be:7e:a9:91:a0:
3a:31:71:b0:b0:69:62:cd:57:f2:36:46:d0:60:04:60:02:89:
e7:ef:a2:80:e3:31:fd:40:34:c7:a2:40:11:99:67:9c:e6:9c:
16:2f:ea:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASBFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDE0MDM1WhcNMjUxMjEwMDE0MDM1WjAYMRYw
FAYDVQQDEw02NzZhMTExNy05ZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr0Fsf57iUXsrHoMxREqpRockqRC+ZR565PLC1PP1TZvXQXQOISj0brgW
waO6YMhH+isTgJNCYkIQioIY1TuFSaIf8Ffb1oPjWR/aFeXLCVc7N0Q/d7Zpp8qO
S1amXkWXJmIXXRjAFCB8PBVmZetuLIU6lchWPDx0FjoRuPW8F30RWdiTCubmlbA2
+i4BtMJxxAjy5H4AkyRdMPU7KPhRmWQZgoUN9b/R3acdlfZVeLg1/Y8+Ay4xjEcT
cy6qn2qIODCYGBZUhpc4+pLBmPwCUTrHtnBVxPn2XDDVBh2p2zzwgqtP25l+sMRR
mArhi6dRr6iV4JOp+WC7rL2Y0oOAtQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCZ4
G6KWymx3tXyGs+8IuI6a24gpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNDQyNDNCNkMxOTgxMUVGQUE2MUNGOTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlq6MA0GCSqGSIb3DQEB
CwUAA4IBAQB+zj6t7oRL6Uv0PYqb+KVw1ssSbPREWNpeyyGvMgseWE8DwDMGXAYx
CCFAIktlQGB3tBSVejs/zXbhkij+MTvqQtq1MxY++Ox5Ae1V6iRAnTfK3cZzBngr
8IsKU6xaXQy5dbI3/0d3pjOMtAdGx4mbJ9hCRBpyUErPFgGE0M6af9tRXgsiAxs3
vM+3Z9ry4BEAnj3k5afYqrzMYkvvAFbrbVBR54DT+31pNcKdADqwV5cAZHjVMv4c
5ikwgQLw+Cu1BN+rER05Cnv0ltyJadgTsmpYvn6pkaA6MXGwsGlizVfyNkbQYARg
Aonn76KA4zH9QDTHokARmWec5pwWL+oe
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:43 2025 by rpki-client