Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB0B4B7EC0EB11EF8F320463762E951A.roa
File: AB0B4B7EC0EB11EF8F320463762E951A.roa (raw, json)
Hash identifier: e2psLsS2e1Xf58+j7vauMmOn0Ur5XBjHmKyeMCPIgoU=
Subject key identifier: CD:64:15:83:47:97:BD:CC:6D:EA:53:0A:6F:0A:C6:1B:05:EA:F4:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB0B4B7EC0EB11EF8F320463762E951A.roa
Signing time: Mon 23 Dec 2024 05:06:29 +0000
ROA not before: Mon 23 Dec 2024 05:06:25 +0000
ROA not after: Wed 10 Dec 2025 05:06:25 +0000
asID: 984
IP address blocks: 154.90.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73508 (0x11f24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:06:25 2024 GMT
Not After : Dec 10 05:06:25 2025 GMT
Subject: CN=6768efd5-df0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:37:ea:7e:76:3a:00:af:c5:01:d1:ac:0c:
66:d7:bb:34:0c:f9:52:62:f7:ae:3a:c6:f1:6e:82:
bb:e9:e4:65:7e:b3:5b:c0:61:71:b6:d0:e6:50:d3:
66:f0:ec:13:f7:8f:57:84:7e:bb:df:c6:a6:b8:d4:
d2:cb:e8:6c:19:8d:33:9a:02:de:6a:c9:40:6e:fe:
c9:8e:b9:4e:99:35:99:a5:a2:f1:4a:54:9d:86:82:
ff:26:9f:8f:c6:56:3f:99:df:8a:f9:62:d9:3d:69:
c2:d3:ac:c0:c9:01:08:b4:9d:fa:31:1c:14:ce:f5:
d3:52:37:e8:cc:38:1c:fa:1f:4f:cb:1e:e6:2f:57:
22:af:2f:16:be:cf:95:af:8a:42:22:4d:b5:82:05:
b2:a9:ba:78:a5:6c:1d:3b:27:30:55:ab:13:46:64:
39:b2:a0:06:81:68:5c:44:91:0b:27:3d:59:36:50:
b6:61:5e:56:43:29:1d:85:d5:e0:14:62:83:d0:5a:
20:c8:cb:b2:31:92:4e:0b:d0:3a:c8:9a:d4:ed:5e:
d6:f5:52:13:ea:c8:45:a8:0b:47:02:0a:79:4a:13:
8d:e1:df:4c:00:bf:91:2b:b7:6d:84:94:12:92:9a:
fc:68:5c:1c:f6:37:52:e9:d5:75:a9:3b:78:f8:31:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:64:15:83:47:97:BD:CC:6D:EA:53:0A:6F:0A:C6:1B:05:EA:F4:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB0B4B7EC0EB11EF8F320463762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.72.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:cc:68:ef:ab:65:2e:d4:dd:f4:74:b7:5e:cd:80:d6:79:0a:
74:10:98:bf:a7:c4:44:62:00:a1:25:fc:fd:17:e4:c4:3b:2f:
82:c7:38:04:25:ab:fd:74:7f:52:9c:4f:1f:de:f0:16:8d:f7:
e4:ff:a8:19:68:d1:46:bb:70:91:13:95:73:11:0e:ff:87:52:
dc:50:7b:4f:ed:44:e1:fb:d9:5d:0f:b8:de:e7:b5:51:fd:5c:
dc:4a:c8:f8:e0:33:8a:a1:4c:a9:5a:77:2b:e2:6b:be:fd:bf:
c8:b8:a0:43:20:a0:b4:d4:69:58:c9:5d:38:7e:94:3f:d1:43:
21:76:48:29:13:84:af:7a:93:f6:92:06:98:d6:0a:54:54:e1:
d3:4b:fb:17:06:a2:bb:26:c1:dd:68:6c:ce:1a:0f:a7:25:cb:
62:ad:88:80:06:8e:33:f4:ed:3b:92:34:81:4f:fc:b8:90:e5:
d9:b2:32:94:8d:2b:60:3f:67:f5:c3:5c:81:84:68:2c:9f:76:
c9:37:4a:82:cd:a6:f3:47:81:49:d3:e6:60:fa:e8:0b:48:44:
44:6f:77:a3:6f:ca:99:dc:6a:f6:06:ed:e7:49:08:0b:ea:c4:
33:b9:fa:0d:75:43:8c:87:73:dd:86:e6:9b:24:18:8f:ab:6f:
c5:a9:01:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR8kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDUwNjI1WhcNMjUxMjEwMDUwNjI1WjAYMRYw
FAYDVQQDEw02NzY4ZWZkNS1kZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw8o36n52OgCvxQHRrAxm17s0DPlSYveuOsbxboK76eRlfrNbwGFxttDm
UNNm8OwT949XhH6738amuNTSy+hsGY0zmgLeaslAbv7JjrlOmTWZpaLxSlSdhoL/
Jp+PxlY/md+K+WLZPWnC06zAyQEItJ36MRwUzvXTUjfozDgc+h9Pyx7mL1ciry8W
vs+Vr4pCIk21ggWyqbp4pWwdOycwVasTRmQ5sqAGgWhcRJELJz1ZNlC2YV5WQykd
hdXgFGKD0FogyMuyMZJOC9A6yJrU7V7W9VIT6shFqAtHAgp5ShON4d9MAL+RK7dt
hJQSkpr8aFwc9jdS6dV1qTt4+DF5cwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM1k
FYNHl73MbepTCm8KxhsF6vSsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQjBCNEI3RUMwRUIxMUVGOEYzMjA0NjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlpIMA0GCSqGSIb3DQEB
CwUAA4IBAQDAzGjvq2Uu1N30dLdezYDWeQp0EJi/p8REYgChJfz9F+TEOy+CxzgE
Jav9dH9SnE8f3vAWjffk/6gZaNFGu3CRE5VzEQ7/h1LcUHtP7UTh+9ldD7je57VR
/VzcSsj44DOKoUypWncr4mu+/b/IuKBDIKC01GlYyV04fpQ/0UMhdkgpE4SvepP2
kgaY1gpUVOHTS/sXBqK7JsHdaGzOGg+nJctirYiABo4z9O07kjSBT/y4kOXZsjKU
jStgP2f1w1yBhGgsn3bJN0qCzabzR4FJ0+Zg+ugLSEREb3ejb8qZ3Gr2Bu3nSQgL
6sQzufoNdUOMh3PdhuabJBiPq2/FqQE1
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:50:48 2025 by rpki-client