Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37B13ACAC0DD11EF9CEE2786762E951A.roa
File: 37B13ACAC0DD11EF9CEE2786762E951A.roa (raw, json)
Hash identifier: wPPFfK/NVJNHRkWTvpLpewQAACLR8XC5iuudOnQfaf0=
Subject key identifier: E4:B1:A5:C1:0B:0C:64:8D:D8:00:0B:18:2F:B5:67:05:FF:6F:5B:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37B13ACAC0DD11EF9CEE2786762E951A.roa
Signing time: Mon 23 Dec 2024 03:23:03 +0000
ROA not before: Mon 23 Dec 2024 03:22:59 +0000
ROA not after: Wed 10 Dec 2025 03:22:59 +0000
asID: 984
IP address blocks: 154.89.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73402 (0x11eba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:22:59 2024 GMT
Not After : Dec 10 03:22:59 2025 GMT
Subject: CN=6768d797-7d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:8c:a1:28:70:df:1e:c6:6e:82:ed:d7:e4:
8f:73:61:ea:87:f5:04:22:bd:35:a2:d2:d7:9c:19:
2e:48:c3:25:c6:25:bc:39:06:06:6a:3d:eb:bc:50:
9f:5b:d2:e0:1d:41:b7:d3:29:4a:ac:d8:20:9e:ad:
5e:61:98:e6:28:81:3f:54:54:48:77:14:e6:c8:fe:
ce:48:55:c7:e6:95:ad:e5:7e:bf:71:62:75:5f:c0:
55:9d:e5:27:6c:ec:ba:d5:c5:5d:8f:d6:91:e8:a5:
49:ac:36:98:54:8b:0d:95:73:24:da:fb:ca:08:14:
90:4e:53:92:9a:15:5b:66:f7:f0:5d:44:6b:b3:8e:
60:92:fc:6f:bd:9c:d7:f9:66:be:27:a0:2b:c1:20:
e5:96:04:9d:e6:d3:29:e7:a8:10:ec:aa:a9:1f:55:
8a:27:67:f1:11:c3:8f:73:4d:06:4b:0f:63:57:8c:
0e:9c:b4:db:36:bf:ac:2a:c9:39:4e:77:5e:d3:39:
60:b2:5f:28:be:c3:86:e7:bd:0c:57:1a:4f:d1:04:
fe:5e:7b:69:52:a8:6f:de:63:b7:ac:65:fe:60:45:
1a:f0:ef:4a:e0:46:c1:59:e4:3b:35:0d:24:f0:a4:
06:56:86:01:d2:98:a0:28:0c:64:be:34:f9:b2:0c:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B1:A5:C1:0B:0C:64:8D:D8:00:0B:18:2F:B5:67:05:FF:6F:5B:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37B13ACAC0DD11EF9CEE2786762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.187.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a2:8d:9a:15:34:8b:e4:32:7d:7e:4b:d4:68:bb:3e:31:9d:
02:a8:1b:42:be:98:71:d5:38:ee:9f:4b:6a:c7:bc:52:b4:13:
f0:0d:df:cf:14:01:2c:d3:f6:4b:0c:13:af:2b:52:0d:d4:67:
59:84:c7:82:f3:36:4d:b5:5b:80:13:aa:ff:c8:12:00:f6:32:
27:94:d7:e9:8c:9f:bb:1c:0b:02:b1:4d:48:20:87:da:92:31:
f2:c9:e5:65:86:04:e5:09:a6:74:c1:be:ac:35:ff:b7:05:31:
04:6b:54:ca:d9:ae:3a:f2:24:2f:1d:f4:2d:d1:e1:48:2d:4c:
43:63:d9:1a:d4:f3:dd:34:3c:34:ac:bf:c4:1a:82:44:c5:76:
bb:e0:ca:97:cd:30:62:be:40:4c:f1:05:77:bf:9b:18:42:cd:
e9:5a:68:80:09:a0:a4:1c:7d:75:fb:60:e9:26:ef:d9:4e:72:
ca:f6:66:c3:99:e6:37:c5:f4:1c:7a:c0:fc:85:cd:18:39:96:
d4:53:66:76:0e:34:ac:c8:8c:a6:3d:1b:00:30:26:de:de:0f:
23:97:59:50:9e:b4:59:d5:2a:da:81:a6:36:a2:ff:ce:ad:6b:
5d:22:0c:05:9b:f1:e6:83:b2:8d:7d:1c:f2:0e:08:4a:dc:6c:
61:1b:0a:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR66MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDMyMjU5WhcNMjUxMjEwMDMyMjU5WjAYMRYw
FAYDVQQDEw02NzY4ZDc5Ny03ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxNaMoShw3x7GboLt1+SPc2Hqh/UEIr01otLXnBkuSMMlxiW8OQYGaj3r
vFCfW9LgHUG30ylKrNggnq1eYZjmKIE/VFRIdxTmyP7OSFXH5pWt5X6/cWJ1X8BV
neUnbOy61cVdj9aR6KVJrDaYVIsNlXMk2vvKCBSQTlOSmhVbZvfwXURrs45gkvxv
vZzX+Wa+J6ArwSDllgSd5tMp56gQ7KqpH1WKJ2fxEcOPc00GSw9jV4wOnLTbNr+s
Ksk5Tnde0zlgsl8ovsOG570MVxpP0QT+XntpUqhv3mO3rGX+YEUa8O9K4EbBWeQ7
NQ0k8KQGVoYB0pigKAxkvjT5sgwsYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOSx
pcELDGSN2AALGC+1ZwX/b1saMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zN0IxM0FDQUMwREQxMUVGOUNFRTI3ODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlm7MA0GCSqGSIb3DQEB
CwUAA4IBAQCQoo2aFTSL5DJ9fkvUaLs+MZ0CqBtCvphx1Tjun0tqx7xStBPwDd/P
FAEs0/ZLDBOvK1IN1GdZhMeC8zZNtVuAE6r/yBIA9jInlNfpjJ+7HAsCsU1IIIfa
kjHyyeVlhgTlCaZ0wb6sNf+3BTEEa1TK2a468iQvHfQt0eFILUxDY9ka1PPdNDw0
rL/EGoJExXa74MqXzTBivkBM8QV3v5sYQs3pWmiACaCkHH11+2DpJu/ZTnLK9mbD
meY3xfQcesD8hc0YOZbUU2Z2DjSsyIymPRsAMCbe3g8jl1lQnrRZ1SragaY2ov/O
rWtdIgwFm/Hmg7KNfRzyDghK3GxhGwrq
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:40 2025 by rpki-client