Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2332D77CF5A111EFB9CA5150762E951A.roa
File: 2332D77CF5A111EFB9CA5150762E951A.roa (raw, json)
Hash identifier: 9pZuju1p3miYcl7x1ZGmJiwAAobqNvDvulXe71yKylU=
Subject key identifier: B9:0B:70:E9:92:83:92:05:51:16:AA:F2:6F:61:CE:23:EC:1C:B2:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2332D77CF5A111EFB9CA5150762E951A.roa
Signing time: Fri 28 Feb 2025 06:56:30 +0000
ROA not before: Fri 28 Feb 2025 06:56:26 +0000
ROA not after: Thu 19 Feb 2026 06:56:26 +0000
asID: 984
IP address blocks: 154.88.89.0/24 maxlen: 24
154.88.90.0/24 maxlen: 24
154.88.91.0/24 maxlen: 24
154.88.92.0/24 maxlen: 24
154.88.93.0/24 maxlen: 24
154.88.94.0/24 maxlen: 24
154.88.95.0/24 maxlen: 24
154.88.96.0/24 maxlen: 24
154.88.97.0/24 maxlen: 24
154.88.98.0/24 maxlen: 24
154.88.99.0/24 maxlen: 24
154.88.100.0/24 maxlen: 24
154.88.101.0/24 maxlen: 24
154.88.102.0/24 maxlen: 24
154.88.103.0/24 maxlen: 24
154.88.104.0/24 maxlen: 24
154.88.105.0/24 maxlen: 24
154.88.106.0/24 maxlen: 24
154.88.107.0/24 maxlen: 24
154.89.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92649 (0x169e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 06:56:26 2025 GMT
Not After : Feb 19 06:56:26 2026 GMT
Subject: CN=67c15e1e-797c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:0b:29:3e:9e:ed:0c:a7:a4:01:de:6b:bb:
c8:af:cd:90:d0:a2:99:86:0c:17:48:67:7c:4c:2e:
b1:e0:a8:3b:6f:23:73:95:9d:99:a9:52:77:92:f5:
bf:a4:fe:fd:60:10:d1:52:00:5f:49:0e:0e:ae:f1:
b4:d9:0a:8a:65:28:7d:60:4b:93:4d:d2:27:4f:99:
0f:a1:90:d8:08:61:7b:86:84:08:15:5b:79:5f:26:
1f:af:8b:6b:33:19:49:91:10:ef:dd:49:10:7b:c2:
ad:34:cc:88:6b:30:87:c2:da:40:20:27:b9:f9:9d:
1a:a5:fd:b0:f9:f8:96:7d:63:be:01:0f:20:c1:b9:
2a:2a:12:42:2d:b1:04:ef:35:b8:68:a8:51:07:1d:
36:4d:c9:80:76:5c:6d:1d:98:44:83:f4:f4:ee:63:
b1:7d:fa:6a:45:31:ef:ff:8c:2a:92:02:72:9b:2a:
d8:ff:47:c7:04:5e:8c:c3:1e:d6:cc:28:e5:cc:03:
7f:00:8a:36:00:e8:d5:c2:56:36:08:f2:47:c2:19:
79:da:6e:15:73:4b:c5:7e:28:63:1d:2d:dc:16:53:
6b:f2:32:f9:07:dc:9d:2a:35:5f:f9:27:f2:86:60:
af:64:21:97:c0:4f:5f:d6:60:c0:b1:65:9d:e3:d3:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:70:E9:92:83:92:05:51:16:AA:F2:6F:61:CE:23:EC:1C:B2:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2332D77CF5A111EFB9CA5150762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.89.0-154.88.107.255
154.89.21.0/24
Signature Algorithm: sha256WithRSAEncryption
83:7f:3e:6c:48:a4:d7:38:ab:fb:8f:8e:15:ac:66:e3:47:dc:
fe:af:f9:d0:68:4c:09:57:db:20:bc:80:96:00:f4:d6:be:8a:
ce:03:2a:8d:31:b7:4b:4b:3e:90:a4:8f:0b:2f:68:7e:3a:f6:
db:1f:2d:0e:c0:bd:5c:4a:c9:39:7c:1a:ee:d2:d7:03:87:65:
6a:ba:a1:fa:fd:d6:c5:c5:e1:78:6d:e8:ac:af:b8:01:20:6f:
f4:75:f1:92:f1:a5:58:7d:fa:d9:d6:55:1d:41:db:5b:0b:f2:
1e:80:8f:1e:39:42:83:b2:9b:22:7c:99:56:be:e3:28:85:6c:
be:fc:29:47:01:fa:e7:8e:03:d5:99:2d:9d:c3:da:c8:d8:9f:
f0:5a:e8:e0:e8:46:31:76:e0:2e:c8:8c:e1:1b:9a:4d:76:21:
78:04:f9:de:03:01:e5:1a:d6:97:4b:79:55:db:4e:29:05:97:
e7:ed:94:8c:14:c4:0a:d4:45:41:ad:58:1f:dc:f5:25:82:f4:
73:77:27:9e:04:44:64:d4:69:7a:20:3a:c9:de:96:9d:a8:2a:
79:b0:87:15:83:3d:7a:23:e8:6b:b7:a1:06:67:34:33:f5:88:
48:3c:84:ce:df:38:6e:fc:51:e8:3b:0c:5b:44:42:d6:5f:e5:
37:c7:e5:04
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAWnpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MDY1NjI2WhcNMjYwMjE5MDY1NjI2WjAYMRYw
FAYDVQQDEw02N2MxNWUxZS03OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuvILKT6e7QynpAHea7vIr82Q0KKZhgwXSGd8TC6x4Kg7byNzlZ2ZqVJ3
kvW/pP79YBDRUgBfSQ4OrvG02QqKZSh9YEuTTdInT5kPoZDYCGF7hoQIFVt5XyYf
r4trMxlJkRDv3UkQe8KtNMyIazCHwtpAICe5+Z0apf2w+fiWfWO+AQ8gwbkqKhJC
LbEE7zW4aKhRBx02TcmAdlxtHZhEg/T07mOxffpqRTHv/4wqkgJymyrY/0fHBF6M
wx7WzCjlzAN/AIo2AOjVwlY2CPJHwhl52m4Vc0vFfihjHS3cFlNr8jL5B9ydKjVf
+SfyhmCvZCGXwE9f1mDAsWWd49P0tQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFLkL
cOmSg5IFURaq8m9hziPsHLLbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMzMyRDc3Q0Y1QTExMUVGQjlDQTUxNTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACaWFkDBAKaWGgDBACa
WRUwDQYJKoZIhvcNAQELBQADggEBAIN/PmxIpNc4q/uPjhWsZuNH3P6v+dBoTAlX
2yC8gJYA9Na+is4DKo0xt0tLPpCkjwsvaH469tsfLQ7AvVxKyTl8Gu7S1wOHZWq6
ofr91sXF4Xht6KyvuAEgb/R18ZLxpVh9+tnWVR1B21sL8h6Ajx45QoOymyJ8mVa+
4yiFbL78KUcB+ueOA9WZLZ3D2sjYn/Ba6ODoRjF24C7IjOEbmk12IXgE+d4DAeUa
1pdLeVXbTikFl+ftlIwUxArURUGtWB/c9SWC9HN3J54ERGTUaXogOsnelp2oKnmw
hxWDPXoj6Gu3oQZnNDP1iEg8hM7fOG78Ueg7DFtEQtZf5TfH5QQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:56 2025 by rpki-client