Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA73B638F61F11EFADE04FAA762E951A.roa
File: AA73B638F61F11EFADE04FAA762E951A.roa (raw, json)
Hash identifier: 3yS8JuNC/isXK+hS/jZOqoCvo0N/GPGq0BwnKgGR7p4=
Subject key identifier: 26:1B:DD:AD:3F:D5:C6:D8:1E:C9:BF:ED:9F:91:C1:BE:D5:5B:13:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA73B638F61F11EFADE04FAA762E951A.roa
Signing time: Fri 28 Feb 2025 22:02:14 +0000
ROA not before: Fri 28 Feb 2025 22:02:10 +0000
ROA not after: Sat 19 Apr 2025 22:02:10 +0000
asID: 138915
IP address blocks: 154.90.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93295 (0x16c6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 22:02:10 2025 GMT
Not After : Apr 19 22:02:10 2025 GMT
Subject: CN=67c23265-4300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:cc:ae:d2:74:be:5f:50:48:1f:73:9a:d6:
30:c6:b0:d4:e1:cf:3d:f3:ab:31:ab:1c:34:c5:3e:
9e:67:e9:3b:4d:54:b9:60:52:d7:e5:23:2e:e6:ad:
6a:5d:1f:b4:27:75:42:f4:bd:f3:56:61:c7:36:0c:
b0:39:f1:1e:d4:86:3f:3c:bb:85:80:88:bb:02:a5:
43:0b:95:46:9b:2f:dc:78:16:a7:40:20:4b:06:57:
d4:f9:b9:69:51:bd:28:d7:2c:d2:b7:74:8d:54:b2:
d0:f9:b0:f7:63:6f:6d:8c:46:e6:ed:dd:db:6d:c9:
c1:8d:cc:90:ef:cf:98:7a:92:05:73:3d:f0:90:d1:
51:5e:3e:fb:b2:17:c3:84:4c:84:49:7f:38:d3:5e:
d9:29:e8:dc:7a:51:87:15:4c:76:52:c2:4b:4a:ff:
1b:8f:34:6d:10:17:eb:4e:bb:3e:3a:4b:23:93:45:
57:ee:19:89:3a:59:a7:8a:d7:ff:94:66:83:62:a3:
ea:da:63:fd:14:7d:f2:27:03:48:fe:b2:b5:9e:7e:
c6:b4:6e:66:1f:b1:51:e0:23:b3:89:b0:4b:1c:14:
6f:3a:43:84:f2:23:91:7d:18:c3:20:d6:22:77:db:
77:7f:12:b7:62:86:2d:b3:17:88:0a:db:ca:ab:9f:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1B:DD:AD:3F:D5:C6:D8:1E:C9:BF:ED:9F:91:C1:BE:D5:5B:13:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA73B638F61F11EFADE04FAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.52.0/23
Signature Algorithm: sha256WithRSAEncryption
18:e4:57:8a:58:1a:b4:73:30:84:0a:f4:35:a6:bb:6c:55:cf:
04:f2:10:cd:03:e0:cb:f1:85:64:9d:bc:2d:77:0a:9c:1e:ac:
7b:a5:82:de:78:40:9d:1b:86:f0:3c:3b:2a:a3:48:5c:da:92:
25:25:df:9e:09:40:10:81:5f:f2:bc:87:56:16:b0:43:e7:e8:
62:dd:a8:34:f3:ac:36:73:dd:4b:aa:98:24:94:67:e0:40:b8:
5e:92:21:24:25:3d:61:27:a5:d6:8e:fd:16:b5:b2:1e:ce:16:
7e:f7:c1:fe:2a:68:d5:b6:b9:b5:e1:13:f5:ca:b7:f6:88:ed:
44:6c:34:01:bf:db:e8:8b:2a:34:4e:c2:f8:67:93:17:6f:be:
02:1c:5d:2b:56:27:99:67:90:12:24:2f:05:1b:4e:61:3c:30:
4c:49:06:48:01:b7:18:fe:1a:ba:a1:d6:e0:36:50:d3:2b:97:
7e:82:bf:e6:1c:cb:68:8f:51:44:19:42:91:23:3b:c6:31:84:
63:02:7a:2c:6e:aa:80:aa:1a:46:c6:4f:30:06:f8:46:11:8a:
16:64:61:91:cb:c4:bd:70:a2:d8:39:ab:d6:8c:c4:b9:db:00:
bd:08:ac:6f:33:c6:14:fc:a6:fb:59:6e:c6:83:3c:32:41:19:
d8:73:cf:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWxvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjIwMjEwWhcNMjUwNDE5MjIwMjEwWjAYMRYw
FAYDVQQDEw02N2MyMzI2NS00MzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAspHMrtJ0vl9QSB9zmtYwxrDU4c8986sxqxw0xT6eZ+k7TVS5YFLX5SMu
5q1qXR+0J3VC9L3zVmHHNgywOfEe1IY/PLuFgIi7AqVDC5VGmy/ceBanQCBLBlfU
+blpUb0o1yzSt3SNVLLQ+bD3Y29tjEbm7d3bbcnBjcyQ78+YepIFcz3wkNFRXj77
shfDhEyESX84017ZKejcelGHFUx2UsJLSv8bjzRtEBfrTrs+Oksjk0VX7hmJOlmn
itf/lGaDYqPq2mP9FH3yJwNI/rK1nn7GtG5mH7FR4COzibBLHBRvOkOE8iORfRjD
INYid9t3fxK3YoYtsxeICtvKq5/BJwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCYb
3a0/1cbYHsm/7Z+Rwb7VWxNCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQTczQjYzOEY2MUYxMUVGQURFMDRGQUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlo0MA0GCSqGSIb3DQEB
CwUAA4IBAQAY5FeKWBq0czCECvQ1prtsVc8E8hDNA+DL8YVknbwtdwqcHqx7pYLe
eECdG4bwPDsqo0hc2pIlJd+eCUAQgV/yvIdWFrBD5+hi3ag086w2c91LqpgklGfg
QLhekiEkJT1hJ6XWjv0WtbIezhZ+98H+KmjVtrm14RP1yrf2iO1EbDQBv9voiyo0
TsL4Z5MXb74CHF0rVieZZ5ASJC8FG05hPDBMSQZIAbcY/hq6odbgNlDTK5d+gr/m
HMtoj1FEGUKRIzvGMYRjAnosbqqAqhpGxk8wBvhGEYoWZGGRy8S9cKLYOavWjMS5
2wC9CKxvM8YU/Kb7WW7GgzwyQRnYc8+x
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:30:33 2025 by rpki-client