Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6AD34AEFF2D11EF967BAFA8762E951A.roa
File: A6AD34AEFF2D11EF967BAFA8762E951A.roa (raw, json)
Hash identifier: 7JqQAxuVWSGoNshGFoXGO1AJGRZHhhZtxuHbh0EsRds=
Subject key identifier: 01:00:80:D3:A3:F6:8C:64:FF:DE:0E:19:76:88:70:27:2A:B4:EE:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6AD34AEFF2D11EF967BAFA8762E951A.roa
Signing time: Wed 12 Mar 2025 10:35:01 +0000
ROA not before: Wed 12 Mar 2025 10:34:57 +0000
ROA not after: Thu 24 Apr 2025 10:34:57 +0000
asID: 55933
IP address blocks: 154.89.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95210 (0x173ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 10:34:57 2025 GMT
Not After : Apr 24 10:34:57 2025 GMT
Subject: CN=67d16355-15dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:61:77:aa:8f:b8:f1:9d:51:e9:18:2e:06:
06:34:fb:d8:96:86:4b:05:b2:10:ad:14:f4:b9:7b:
72:43:6e:cc:bf:a8:46:c2:24:09:ea:ea:65:89:ac:
f0:2c:e8:5b:ab:da:78:28:25:97:fd:05:01:db:96:
88:fb:98:dd:2c:cc:28:c2:fa:47:93:ba:fd:ea:24:
82:ec:a6:bd:f0:32:9d:05:02:b1:af:73:d9:0c:2f:
6e:d6:92:1d:15:6c:f0:92:c0:23:56:ad:05:59:98:
3b:91:53:e1:c1:e8:2d:93:cf:eb:e2:07:36:72:d0:
56:f3:c2:74:30:c1:05:66:6e:e2:d9:ea:dc:96:45:
03:06:d4:08:f5:9b:f5:d7:78:ec:fa:08:eb:ac:0e:
cb:eb:1b:be:28:8c:95:6e:27:c3:8d:72:4d:27:64:
4a:e9:b1:c1:87:8b:28:32:51:3e:0f:ce:62:44:bb:
7a:4f:64:6a:e4:a9:80:4b:f2:fa:82:8b:ca:d3:ba:
ac:02:9d:9e:95:63:19:f3:2c:1e:aa:c8:34:8a:da:
2f:b6:c6:89:12:b1:f4:b7:da:9b:e0:f0:0f:dc:01:
80:05:2f:17:9d:9d:54:3d:31:07:45:96:65:ce:9a:
0e:89:dd:e7:a8:88:46:cc:19:03:47:cf:46:c3:f1:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:00:80:D3:A3:F6:8C:64:FF:DE:0E:19:76:88:70:27:2A:B4:EE:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6AD34AEFF2D11EF967BAFA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
64:5a:2b:eb:3b:ff:22:06:33:7d:7f:ac:0a:2d:c9:fe:5b:7f:
83:12:34:dc:d4:51:bb:c1:6c:e6:71:b5:d8:96:25:60:7d:37:
91:19:2f:5a:31:4a:37:5c:61:4b:94:db:1e:3e:9b:77:86:ec:
47:ba:e5:9b:99:6c:91:5b:02:8a:e8:64:56:43:a8:ca:24:4e:
bb:cd:36:f1:2d:22:ed:0f:3c:33:53:cb:e1:5c:b3:5f:9f:82:
10:cf:57:1d:c3:dc:6b:a2:56:14:10:0e:1a:f1:17:33:91:17:
b3:66:d3:05:72:75:bd:bd:7a:e3:20:2c:f9:1c:be:ba:f6:52:
e6:90:f5:e5:c1:23:86:dc:27:74:58:b4:03:1c:ac:db:4b:25:
3b:bc:c8:82:cc:89:54:0f:d4:96:a8:21:15:07:9f:a6:41:e6:
5e:1a:a1:bb:7b:25:d4:98:07:dc:86:58:1c:60:49:14:38:28:
2a:ee:65:48:70:fb:59:d3:58:fa:b7:bd:e0:a7:eb:c6:aa:b1:
ab:45:85:e7:92:d4:c8:35:31:fb:f6:fd:83:ad:fd:06:bc:3d:
14:38:9a:b2:b0:56:2f:10:b3:24:ed:f8:33:8e:56:2d:fd:7c:
3e:a4:6e:f0:bb:2b:1c:28:85:6d:47:49:24:48:c1:08:d2:69:
1d:8f:94:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXPqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzEyMTAzNDU3WhcNMjUwNDI0MTAzNDU3WjAYMRYw
FAYDVQQDEw02N2QxNjM1NS0xNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1Ihhd6qPuPGdUekYLgYGNPvYloZLBbIQrRT0uXtyQ27Mv6hGwiQJ6upl
iazwLOhbq9p4KCWX/QUB25aI+5jdLMwowvpHk7r96iSC7Ka98DKdBQKxr3PZDC9u
1pIdFWzwksAjVq0FWZg7kVPhwegtk8/r4gc2ctBW88J0MMEFZm7i2erclkUDBtQI
9Zv113js+gjrrA7L6xu+KIyVbifDjXJNJ2RK6bHBh4soMlE+D85iRLt6T2Rq5KmA
S/L6govK07qsAp2elWMZ8yweqsg0itovtsaJErH0t9qb4PAP3AGABS8XnZ1UPTEH
RZZlzpoOid3nqIhGzBkDR89Gw/EtmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAEA
gNOj9oxk/94OGXaIcCcqtO7HMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNkFEMzRBRUZGMkQxMUVGOTY3QkFGQTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlmQMA0GCSqGSIb3DQEB
CwUAA4IBAQBkWivrO/8iBjN9f6wKLcn+W3+DEjTc1FG7wWzmcbXYliVgfTeRGS9a
MUo3XGFLlNsePpt3huxHuuWbmWyRWwKK6GRWQ6jKJE67zTbxLSLtDzwzU8vhXLNf
n4IQz1cdw9xrolYUEA4a8RczkRezZtMFcnW9vXrjICz5HL669lLmkPXlwSOG3Cd0
WLQDHKzbSyU7vMiCzIlUD9SWqCEVB5+mQeZeGqG7eyXUmAfchlgcYEkUOCgq7mVI
cPtZ01j6t73gp+vGqrGrRYXnktTINTH79v2Drf0GvD0UOJqysFYvELMk7fgzjlYt
/Xw+pG7wuyscKIVtR0kkSMEI0mkdj5S1
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:36:09 2025 by rpki-client