Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41EFB5B8C19E11EFBF108043762E951A.roa
File: 41EFB5B8C19E11EFBF108043762E951A.roa (raw, json)
Hash identifier: qAj9zxED6Ccv6VRB9BK1nYzOajiIEAuhlzk0PnBON1A=
Subject key identifier: BC:92:49:D5:E4:A8:CE:46:89:E0:E1:23:63:11:26:E6:1C:0B:7B:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012091
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41EFB5B8C19E11EFBF108043762E951A.roa
Signing time: Tue 24 Dec 2024 02:24:53 +0000
ROA not before: Tue 24 Dec 2024 02:24:49 +0000
ROA not after: Wed 10 Dec 2025 02:24:49 +0000
asID: 984
IP address blocks: 154.90.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73873 (0x12091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:24:49 2024 GMT
Not After : Dec 10 02:24:49 2025 GMT
Subject: CN=676a1b75-e446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:49:36:c0:5b:d3:35:81:5c:65:c2:38:05:
27:39:2b:d1:f5:19:08:47:57:ae:e7:ab:22:00:b4:
d3:9c:92:70:62:78:22:e9:80:6f:8a:ad:29:e7:bd:
6e:19:88:d4:f2:58:8a:81:0c:e4:7a:68:72:11:6c:
ee:db:c6:be:29:5f:64:c4:6b:e1:c2:6e:a2:6a:93:
17:bc:f4:31:6f:ff:3c:ef:b3:7e:04:ac:f6:ae:4d:
a1:f1:97:3d:d4:cd:08:b3:4a:1c:de:ea:43:48:38:
1e:1e:a2:5d:f3:98:c5:f1:b0:09:84:90:7b:c8:db:
f9:30:af:54:70:11:a4:60:b2:1c:37:47:fc:77:58:
4e:78:c5:e1:17:4c:08:3a:49:5f:be:60:7d:88:8c:
ed:58:ef:b8:32:58:09:cb:09:60:c2:d0:b4:7c:e5:
06:5e:91:9f:83:2a:8c:e4:fe:f0:28:20:a9:76:b6:
58:48:5f:77:13:45:82:f1:46:3d:b5:cf:92:15:85:
62:09:09:1b:fa:6d:9f:00:1f:6f:43:09:69:fe:8b:
1d:7a:d2:97:d2:1b:33:08:a7:d9:46:e8:cb:86:76:
66:ab:c1:b4:d0:77:86:27:35:e8:ac:25:d1:84:e6:
ad:ea:4c:18:03:6c:21:89:3e:d9:21:89:8b:06:76:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:92:49:D5:E4:A8:CE:46:89:E0:E1:23:63:11:26:E6:1C:0B:7B:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41EFB5B8C19E11EFBF108043762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.228.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7b:0d:3f:97:34:0b:96:a9:a9:56:84:d5:9d:52:92:41:46:
22:4c:a5:d6:fa:ce:d5:ec:b0:f6:f9:b9:3d:2e:38:57:01:8a:
bc:9b:04:5f:04:68:22:95:21:6c:a9:ce:76:02:b5:b0:22:04:
0a:90:be:a6:c7:05:c6:a4:b1:29:b5:57:dd:b0:8d:70:5a:48:
07:69:f9:36:35:8f:55:ef:04:a7:f7:88:d3:67:39:3f:08:64:
69:85:98:6f:17:4b:91:3b:0f:4e:4c:ba:39:93:11:4f:7a:e7:
ba:94:cd:6e:95:28:0c:8b:f5:61:cb:0e:c5:2f:c6:85:8c:e3:
71:77:2e:5b:3d:bf:b5:aa:cf:91:45:63:ed:20:a0:49:19:a1:
b5:50:28:7f:e1:2a:51:93:e9:67:95:fa:69:6b:ef:35:ee:85:
97:51:84:e0:d3:a2:47:6a:a5:57:01:a7:9e:f3:b5:7c:19:53:
d3:97:5e:7e:dd:0b:e0:64:fd:01:90:ed:6c:55:ed:5c:0f:38:
01:a3:b8:ba:87:d0:fe:8e:ee:8e:a5:82:30:45:5e:67:03:68:
26:e0:96:8b:6f:9a:31:70:e9:8c:67:9c:83:93:9b:10:a3:df:
1b:48:96:5b:79:23:11:ff:a1:02:c2:56:b5:7a:37:89:61:15:
0e:5d:63:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASCRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDIyNDQ5WhcNMjUxMjEwMDIyNDQ5WjAYMRYw
FAYDVQQDEw02NzZhMWI3NS1lNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2lZJNsBb0zWBXGXCOAUnOSvR9RkIR1eu56siALTTnJJwYngi6YBviq0p
571uGYjU8liKgQzkemhyEWzu28a+KV9kxGvhwm6iapMXvPQxb/8877N+BKz2rk2h
8Zc91M0Is0oc3upDSDgeHqJd85jF8bAJhJB7yNv5MK9UcBGkYLIcN0f8d1hOeMXh
F0wIOklfvmB9iIztWO+4MlgJywlgwtC0fOUGXpGfgyqM5P7wKCCpdrZYSF93E0WC
8UY9tc+SFYViCQkb+m2fAB9vQwlp/osdetKX0hszCKfZRujLhnZmq8G00HeGJzXo
rCXRhOat6kwYA2whiT7ZIYmLBnZsZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLyS
SdXkqM5GieDhI2MRJuYcC3usMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MUVGQjVCOEMxOUUxMUVGQkYxMDgwNDM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlrkMA0GCSqGSIb3DQEB
CwUAA4IBAQBBew0/lzQLlqmpVoTVnVKSQUYiTKXW+s7V7LD2+bk9LjhXAYq8mwRf
BGgilSFsqc52ArWwIgQKkL6mxwXGpLEptVfdsI1wWkgHafk2NY9V7wSn94jTZzk/
CGRphZhvF0uROw9OTLo5kxFPeue6lM1ulSgMi/Vhyw7FL8aFjONxdy5bPb+1qs+R
RWPtIKBJGaG1UCh/4SpRk+lnlfppa+817oWXUYTg06JHaqVXAaee87V8GVPTl15+
3QvgZP0BkO1sVe1cDzgBo7i6h9D+ju6OpYIwRV5nA2gm4JaLb5oxcOmMZ5yDk5sQ
o98bSJZbeSMR/6ECwla1ejeJYRUOXWN9
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:45 2025 by rpki-client