Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/381DAC0EC1A111EFBEB6BA58762E951A.roa
File: 381DAC0EC1A111EFBEB6BA58762E951A.roa (raw, json)
Hash identifier: xefx26mclfv/4D5tYuoQcndx24YIi7hZQeuYoezEJB4=
Subject key identifier: 61:B4:F6:BD:A6:B7:1C:67:75:7C:75:D9:B3:5B:01:F7:E7:A6:AB:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/381DAC0EC1A111EFBEB6BA58762E951A.roa
Signing time: Tue 24 Dec 2024 02:46:05 +0000
ROA not before: Tue 24 Dec 2024 02:46:01 +0000
ROA not after: Wed 10 Dec 2025 02:46:01 +0000
asID: 984
IP address blocks: 154.90.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73909 (0x120b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:46:01 2024 GMT
Not After : Dec 10 02:46:01 2025 GMT
Subject: CN=676a206d-6cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:d5:88:da:13:91:b5:8c:4e:c6:5b:57:38:
14:d7:f1:b1:0f:c7:17:16:33:b4:55:db:f5:9b:e2:
ac:c1:e9:c1:2c:76:e0:aa:85:f5:fc:5e:2a:b1:6e:
2f:ac:38:c7:28:25:0b:66:25:3d:d3:cc:29:e1:3c:
77:40:63:57:dd:cf:46:14:f2:9e:93:f0:0c:7c:38:
c8:9b:5c:e9:9e:bb:42:61:07:97:ea:8b:4e:63:f6:
e7:02:cd:9a:da:75:5e:7e:59:8d:53:d2:4f:dc:a9:
31:4e:ec:85:df:60:93:cd:81:19:37:51:94:48:e4:
f1:29:8f:1f:20:15:53:77:fa:1b:06:46:f9:59:c2:
81:0f:1b:27:f7:7e:83:05:b8:3c:8e:f5:d0:f7:eb:
f4:ec:e3:95:b0:39:0d:0c:bb:11:b5:50:a6:a1:f5:
13:2d:4a:b9:f2:5b:1e:6e:a1:7f:3c:71:bb:9d:71:
67:24:dd:87:08:6e:1a:31:ed:2f:43:94:84:9d:07:
5e:41:e9:6a:c3:07:c5:25:46:da:cc:b1:4c:1a:ff:
f4:59:d8:42:b3:81:31:f1:98:46:0a:67:e0:ea:3b:
8b:64:e2:31:6b:89:0f:48:2d:98:66:6b:57:5a:ed:
bd:43:e4:58:a0:bf:e3:4e:f0:b1:f8:61:7b:79:73:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B4:F6:BD:A6:B7:1C:67:75:7C:75:D9:B3:5B:01:F7:E7:A6:AB:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/381DAC0EC1A111EFBEB6BA58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.246.0/24
Signature Algorithm: sha256WithRSAEncryption
94:82:87:ac:f3:8e:00:fa:19:11:77:3a:62:a6:b9:fa:8b:3d:
84:22:c5:0f:3e:72:54:11:b4:ed:b6:32:21:51:a8:d3:a7:1c:
26:5c:0e:3f:09:9a:30:cf:5a:10:b4:19:a8:24:21:3f:0f:dd:
55:d0:6f:70:42:cf:7a:73:bb:47:ac:a1:4c:d0:c0:f0:e8:63:
91:9c:a0:bf:ed:a5:7b:bc:4a:f5:7b:ae:c6:39:8e:ea:ec:04:
c6:95:ba:35:40:28:c2:a1:ae:8f:27:8d:9e:ec:2d:45:8b:3b:
f6:22:e5:16:2b:a0:44:46:da:8f:9e:83:82:7c:44:1e:31:10:
6c:bc:d7:8b:54:69:a9:06:1f:25:66:21:c4:31:3b:cd:d9:38:
18:a6:d6:eb:c9:ca:d2:07:dd:5c:7d:7c:36:2f:25:bb:83:0a:
2c:b5:f6:26:f2:9e:c4:b3:1f:cd:77:9e:cd:44:ea:72:21:ed:
3b:a9:3f:ee:f5:e9:74:29:24:4a:58:78:77:ae:de:fb:ed:60:
a4:ef:63:1a:8c:ed:8f:06:d7:a4:d5:1b:bd:9b:77:93:65:cf:
21:9b:12:ef:52:e8:59:16:64:cf:c6:56:01:e8:c3:0b:cf:b7:
63:1e:1b:03:33:17:7c:9b:39:49:83:72:52:b6:b5:f4:8d:95:
86:34:12:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASC1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDI0NjAxWhcNMjUxMjEwMDI0NjAxWjAYMRYw
FAYDVQQDEw02NzZhMjA2ZC02Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx1bViNoTkbWMTsZbVzgU1/GxD8cXFjO0Vdv1m+KswenBLHbgqoX1/F4q
sW4vrDjHKCULZiU908wp4Tx3QGNX3c9GFPKek/AMfDjIm1zpnrtCYQeX6otOY/bn
As2a2nVeflmNU9JP3KkxTuyF32CTzYEZN1GUSOTxKY8fIBVTd/obBkb5WcKBDxsn
936DBbg8jvXQ9+v07OOVsDkNDLsRtVCmofUTLUq58lsebqF/PHG7nXFnJN2HCG4a
Me0vQ5SEnQdeQelqwwfFJUbazLFMGv/0WdhCs4Ex8ZhGCmfg6juLZOIxa4kPSC2Y
ZmtXWu29Q+RYoL/jTvCx+GF7eXM8WQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGG0
9r2mtxxndXx12bNbAffnpqtLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zODFEQUMwRUMxQTExMUVGQkVCNkJBNTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlr2MA0GCSqGSIb3DQEB
CwUAA4IBAQCUgoes844A+hkRdzpiprn6iz2EIsUPPnJUEbTttjIhUajTpxwmXA4/
CZowz1oQtBmoJCE/D91V0G9wQs96c7tHrKFM0MDw6GORnKC/7aV7vEr1e67GOY7q
7ATGlbo1QCjCoa6PJ42e7C1Fizv2IuUWK6BERtqPnoOCfEQeMRBsvNeLVGmpBh8l
ZiHEMTvN2TgYptbrycrSB91cfXw2LyW7gwostfYm8p7Esx/Nd57NROpyIe07qT/u
9el0KSRKWHh3rt777WCk72MajO2PBtek1Ru9m3eTZc8hmxLvUuhZFmTPxlYB6MML
z7djHhsDMxd8mzlJg3JStrX0jZWGNBIK
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:56:47 2025 by rpki-client