Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8605467AC0D911EF8BAE306D762E951A.roa
File: 8605467AC0D911EF8BAE306D762E951A.roa (raw, json)
Hash identifier: Q1YH2mhihDpyROl8J2o9B669oTX/qeKSXXy/gOQp2cE=
Subject key identifier: CF:EB:01:F4:64:43:D8:87:28:8F:79:95:DB:62:C1:15:19:70:3E:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8605467AC0D911EF8BAE306D762E951A.roa
Signing time: Mon 23 Dec 2024 02:56:36 +0000
ROA not before: Mon 23 Dec 2024 02:56:33 +0000
ROA not after: Wed 10 Dec 2025 02:56:33 +0000
asID: 984
IP address blocks: 154.89.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73354 (0x11e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:56:33 2024 GMT
Not After : Dec 10 02:56:33 2025 GMT
Subject: CN=6768d164-7cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:fd:c1:b3:be:7d:f0:7c:01:ba:64:e3:4d:
da:fb:45:10:f6:d3:19:7d:1b:35:fa:ef:f7:a8:15:
e5:20:b8:80:b8:58:6f:15:af:76:5b:5a:42:d1:55:
36:52:e6:6a:a9:89:ad:55:bd:46:99:6e:a2:7e:93:
ee:ad:3c:7f:1d:f8:01:0b:b0:84:80:fe:47:46:ab:
72:c3:37:4a:3d:bf:3a:3a:01:48:d0:35:22:fc:ca:
5b:61:ae:4f:f4:41:c8:e9:df:f1:7f:94:e6:56:75:
83:e0:11:cb:af:81:f5:48:9b:53:85:b3:80:6c:b1:
88:3b:47:7c:8d:71:0b:19:f6:7a:27:5a:d1:ae:79:
1c:9c:3a:90:d3:c2:6a:01:30:d7:16:2c:ca:dc:36:
f6:d5:a5:2a:2c:dd:10:f3:89:24:02:9a:6c:5b:a6:
71:2c:7d:00:ff:66:75:39:2d:2d:42:1f:64:6b:0d:
2d:eb:49:1e:91:67:07:a6:bd:fa:4e:b6:ad:30:85:
9c:02:55:48:b3:e1:34:c0:26:71:52:07:71:b4:8a:
13:8a:5b:95:c1:8b:1e:84:15:29:df:9f:d3:e9:fb:
26:4f:f8:35:c2:43:e7:4a:6a:f9:36:e7:65:0c:8f:
c7:52:79:f1:0f:7a:86:ff:08:c4:5b:b5:0e:f4:48:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EB:01:F4:64:43:D8:87:28:8F:79:95:DB:62:C1:15:19:70:3E:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8605467AC0D911EF8BAE306D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.163.0/24
Signature Algorithm: sha256WithRSAEncryption
99:51:23:36:e3:79:25:be:6f:ad:c8:c7:f4:de:7e:a2:bb:d3:
bd:50:77:fa:95:f0:e5:b8:17:a1:c3:37:34:c1:fd:3a:ee:dc:
40:24:27:b2:bb:a5:e4:77:2a:91:fe:9e:e1:78:34:7f:9d:a8:
ef:5d:ce:18:8d:f5:ed:36:d6:f7:9b:7e:2e:91:bf:97:07:42:
36:3f:63:79:de:f9:db:4c:59:ce:e9:d4:46:05:f2:7a:42:29:
94:0e:f0:08:b8:27:90:b6:55:8a:e4:30:23:a3:71:e7:da:24:
f3:2b:c4:64:7b:21:91:b0:8d:d4:28:c7:d7:f8:f2:6f:e3:66:
74:c9:2d:3d:9b:45:5e:d3:c8:40:33:98:8f:73:30:7f:c9:53:
05:49:45:9f:92:12:ae:33:2a:bf:43:67:0b:65:be:66:50:55:
77:4e:d6:fa:97:ee:08:1d:79:c6:ba:f1:3a:f2:75:78:c9:fa:
93:f7:45:e9:a5:d8:b7:6d:bc:2c:d4:9c:4c:f8:1d:34:eb:9e:
b8:2e:72:d4:9f:de:b4:8b:58:55:72:40:1a:0f:c0:3c:9d:e2:
46:5d:83:a4:57:16:be:62:7c:92:58:44:d0:16:4c:be:73:32:
ef:a0:b4:de:3c:a6:19:5d:cd:b2:1c:cc:09:f5:59:15:65:4f:
f7:98:f1:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR6KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDI1NjMzWhcNMjUxMjEwMDI1NjMzWjAYMRYw
FAYDVQQDEw02NzY4ZDE2NC03Y2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxa/9wbO+ffB8Abpk403a+0UQ9tMZfRs1+u/3qBXlILiAuFhvFa92W1pC
0VU2UuZqqYmtVb1GmW6ifpPurTx/HfgBC7CEgP5HRqtywzdKPb86OgFI0DUi/Mpb
Ya5P9EHI6d/xf5TmVnWD4BHLr4H1SJtThbOAbLGIO0d8jXELGfZ6J1rRrnkcnDqQ
08JqATDXFizK3Db21aUqLN0Q84kkAppsW6ZxLH0A/2Z1OS0tQh9kaw0t60kekWcH
pr36TratMIWcAlVIs+E0wCZxUgdxtIoTiluVwYsehBUp35/T6fsmT/g1wkPnSmr5
NudlDI/HUnnxD3qG/wjEW7UO9EjjGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM/r
AfRkQ9iHKI95ldtiwRUZcD4TMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NjA1NDY3QUMwRDkxMUVGOEJBRTMwNkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlmjMA0GCSqGSIb3DQEB
CwUAA4IBAQCZUSM243klvm+tyMf03n6iu9O9UHf6lfDluBehwzc0wf067txAJCey
u6XkdyqR/p7heDR/najvXc4YjfXtNtb3m34ukb+XB0I2P2N53vnbTFnO6dRGBfJ6
QimUDvAIuCeQtlWK5DAjo3Hn2iTzK8RkeyGRsI3UKMfX+PJv42Z0yS09m0Ve08hA
M5iPczB/yVMFSUWfkhKuMyq/Q2cLZb5mUFV3Ttb6l+4IHXnGuvE68nV4yfqT90Xp
pdi3bbws1JxM+B006564LnLUn960i1hVckAaD8A8neJGXYOkVxa+YnySWETQFky+
czLvoLTePKYZXc2yHMwJ9VkVZU/3mPGF
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:11 2025 by rpki-client