Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD6FAC56C0DD11EF8D027088762E951A.roa
File: AD6FAC56C0DD11EF8D027088762E951A.roa (raw, json)
Hash identifier: 3vBPwZn65xBmEX+W+xd48Vly3QU2znZyJdzfDc8e8j0=
Subject key identifier: 59:F1:E1:B0:83:0B:E1:3C:09:E1:1A:33:05:14:FC:40:16:21:3E:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD6FAC56C0DD11EF8D027088762E951A.roa
Signing time: Mon 23 Dec 2024 03:26:20 +0000
ROA not before: Mon 23 Dec 2024 03:26:17 +0000
ROA not after: Wed 10 Dec 2025 03:26:17 +0000
asID: 984
IP address blocks: 154.89.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73408 (0x11ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:26:17 2024 GMT
Not After : Dec 10 03:26:17 2025 GMT
Subject: CN=6768d85c-7293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:7f:e7:dd:e2:34:8f:1c:53:9d:55:f4:db:
3b:d4:5b:15:b5:8b:d1:8b:1a:9e:66:80:96:7f:3f:
bf:ae:95:78:b4:86:67:2f:b9:84:c1:39:cd:01:6c:
61:09:c5:33:92:87:93:f8:49:94:b8:b0:ac:c7:96:
70:23:9b:06:d6:56:f4:ae:4b:bd:98:a6:52:d6:d9:
c1:c1:0d:f1:98:29:74:35:53:70:63:da:5f:79:2e:
c2:f9:ee:de:58:eb:f2:63:73:7e:83:ec:37:cc:ac:
a6:a4:e7:b2:f6:c3:04:e7:d5:78:2f:88:41:1f:2b:
09:db:e4:bb:28:53:6b:86:2b:f7:d4:43:3b:27:94:
56:2d:65:61:69:a3:2f:db:17:e7:aa:0d:16:48:74:
c0:72:28:64:e3:4d:ca:0b:0b:c1:62:a7:75:d0:fc:
8b:1a:ef:c4:ed:41:d7:79:4a:e0:9d:79:1e:f0:3d:
49:73:cd:a9:90:ce:7c:44:f5:f5:f7:2d:96:2a:78:
e5:eb:e0:f0:3c:f4:82:0c:f5:08:dc:84:56:fc:b4:
3e:0c:77:97:f0:ba:33:a2:92:62:ab:21:63:5e:b5:
1c:7a:7d:78:28:9f:ee:8c:7e:7e:32:af:cb:36:76:
a2:34:fd:bf:b8:ef:fd:12:9e:cb:12:89:d6:fa:24:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F1:E1:B0:83:0B:E1:3C:09:E1:1A:33:05:14:FC:40:16:21:3E:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD6FAC56C0DD11EF8D027088762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.190.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:21:e2:94:f9:fe:e0:2d:90:90:1e:38:d0:cb:7d:48:ae:c1:
61:0d:06:4e:f5:44:18:f7:ae:8b:4d:20:d1:41:66:65:d9:b1:
5a:a4:0a:7b:3a:5e:c9:ab:e0:64:22:7e:e5:07:8c:6b:69:aa:
f6:99:26:59:65:e0:48:fc:cd:d7:6e:30:a9:3f:ef:c7:6a:2b:
b9:19:e5:c4:1a:fc:fa:84:49:84:a9:7b:44:eb:9a:9c:5b:4f:
e0:93:b5:ce:65:9a:42:db:a5:02:b5:b9:25:de:b6:48:1f:ff:
56:c7:da:41:3c:32:3c:b9:c6:72:e3:6f:73:1a:6e:50:7f:aa:
7a:89:0c:9d:52:31:ff:db:97:20:6b:98:9c:79:85:0d:8f:35:
b0:ac:91:9a:09:58:26:10:13:4d:87:06:5c:24:65:b4:24:fd:
00:24:14:a6:7f:45:f9:c7:e5:94:1b:38:db:dc:fe:df:d2:29:
e7:f2:78:17:99:7e:6d:18:85:77:48:6c:e4:71:ce:00:4d:a2:
31:be:85:d8:f6:70:b7:0c:0d:f4:1f:99:ee:e5:1b:bd:39:61:
e1:3b:ff:ff:2f:e5:71:bb:54:dc:f7:15:89:75:f4:a5:6a:a6:
fb:b3:ce:8f:6d:be:6c:ef:be:33:90:60:c8:84:37:a6:ab:1a:
b1:e5:c2:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR7AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDMyNjE3WhcNMjUxMjEwMDMyNjE3WjAYMRYw
FAYDVQQDEw02NzY4ZDg1Yy03MjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAspF/593iNI8cU51V9Ns71FsVtYvRixqeZoCWfz+/rpV4tIZnL7mEwTnN
AWxhCcUzkoeT+EmUuLCsx5ZwI5sG1lb0rku9mKZS1tnBwQ3xmCl0NVNwY9pfeS7C
+e7eWOvyY3N+g+w3zKympOey9sME59V4L4hBHysJ2+S7KFNrhiv31EM7J5RWLWVh
aaMv2xfnqg0WSHTAcihk403KCwvBYqd10PyLGu/E7UHXeUrgnXke8D1Jc82pkM58
RPX19y2WKnjl6+DwPPSCDPUI3IRW/LQ+DHeX8LozopJiqyFjXrUcen14KJ/ujH5+
Mq/LNnaiNP2/uO/9Ep7LEonW+iRUQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFnx
4bCDC+E8CeEaMwUU/EAWIT5bMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRDZGQUM1NkMwREQxMUVGOEQwMjcwODg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlm+MA0GCSqGSIb3DQEB
CwUAA4IBAQDOIeKU+f7gLZCQHjjQy31IrsFhDQZO9UQY966LTSDRQWZl2bFapAp7
Ol7Jq+BkIn7lB4xraar2mSZZZeBI/M3XbjCpP+/Haiu5GeXEGvz6hEmEqXtE65qc
W0/gk7XOZZpC26UCtbkl3rZIH/9Wx9pBPDI8ucZy429zGm5Qf6p6iQydUjH/25cg
a5iceYUNjzWwrJGaCVgmEBNNhwZcJGW0JP0AJBSmf0X5x+WUGzjb3P7f0inn8ngX
mX5tGIV3SGzkcc4ATaIxvoXY9nC3DA30H5nu5Ru9OWHhO///L+Vxu1Tc9xWJdfSl
aqb7s86Pbb5s774zkGDIhDemqxqx5cKg
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:38:36 2025 by rpki-client