Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCD5DA0C19C11EF9545F6B5762E951A.roa
File: CBCD5DA0C19C11EF9545F6B5762E951A.roa (raw, json)
Hash identifier: X84WvsRl5O4Ev4fp9FcmbhWSVLeNjqGw2xwZ8PQv+Xs=
Subject key identifier: B0:F9:3E:FE:6C:65:FE:0A:B8:F7:99:17:18:F8:7A:E6:99:C1:19:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01207F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCD5DA0C19C11EF9545F6B5762E951A.roa
Signing time: Tue 24 Dec 2024 02:14:25 +0000
ROA not before: Tue 24 Dec 2024 02:14:21 +0000
ROA not after: Wed 10 Dec 2025 02:14:21 +0000
asID: 984
IP address blocks: 154.90.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73855 (0x1207f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:14:21 2024 GMT
Not After : Dec 10 02:14:21 2025 GMT
Subject: CN=676a1901-9e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:e6:a4:d6:14:21:9a:72:4c:ae:6d:88:36:
35:1f:67:2a:58:e1:25:65:12:72:15:c5:e5:7a:e5:
85:12:96:cc:af:fd:ed:57:ec:0b:dd:1d:ef:41:1d:
82:7b:fb:38:4c:d5:4d:08:14:3a:db:2c:df:d9:90:
01:84:fb:1d:0e:6e:84:2f:82:c4:e4:80:d4:f2:5d:
18:aa:f6:0e:2f:a5:97:fc:12:b4:1b:02:35:50:7d:
2a:0d:ef:43:e1:83:12:52:f8:48:ce:77:25:78:0c:
d1:a4:01:38:8d:21:f0:fc:65:9f:48:7d:d8:e1:24:
9d:04:35:f1:da:f7:7c:5f:f7:fe:5c:5b:d5:0c:70:
fc:b5:ff:ea:a8:52:33:39:b7:0b:a2:df:e5:7c:b4:
17:9c:73:40:7b:38:f4:1e:6b:b9:c9:b9:eb:9b:62:
38:10:f9:47:da:8f:01:e9:b1:94:fc:66:f1:f3:3a:
d9:cc:36:a2:60:7e:e8:91:16:f5:70:44:41:f1:4c:
de:11:a3:43:e0:14:94:bc:92:94:c4:9a:e4:9c:23:
2c:3c:ed:1a:ea:c8:16:c0:21:d8:73:1e:68:15:92:
11:3c:18:f1:98:47:6b:bf:07:7d:7f:38:56:40:48:
3c:be:ba:a0:c7:63:5e:bf:2f:71:2d:3b:e4:47:17:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F9:3E:FE:6C:65:FE:0A:B8:F7:99:17:18:F8:7A:E6:99:C1:19:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCD5DA0C19C11EF9545F6B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.219.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:12:e4:24:74:1e:2d:ea:aa:03:88:04:84:a4:b7:6c:f8:3f:
e0:45:0c:07:38:0a:34:f3:7c:5c:96:59:fc:ff:9f:78:9e:76:
7f:67:88:49:07:d1:24:49:3f:b7:8c:86:42:95:60:e6:06:a7:
df:3a:33:8c:b0:3d:32:d0:42:c9:87:f7:7a:51:7a:a7:2a:37:
7e:71:b1:28:92:52:67:68:58:e5:15:62:b9:06:81:d1:cc:9a:
6b:3f:9f:2a:17:56:00:5d:04:3b:90:1a:4c:b0:a6:17:a5:0d:
35:94:4c:1a:8d:7a:45:59:d0:b1:70:8b:5f:8d:79:d9:08:a2:
0f:f3:f7:75:b4:a4:a8:cc:e1:34:af:60:66:73:f8:a7:42:df:
b9:23:32:24:a8:8a:49:6d:59:f7:dd:f8:a7:ca:86:dc:11:0d:
57:c3:35:f3:b2:d3:40:00:e7:81:fa:96:6b:ee:d3:45:39:c1:
77:73:40:c6:bd:5f:4a:ff:6a:70:69:1f:2c:6b:3c:45:3e:a4:
d3:a4:8b:38:85:3f:62:a0:c6:d5:68:21:8a:0a:33:ea:bb:9d:
82:71:2c:e7:0e:7e:d2:21:19:52:0f:e7:b4:7c:48:ea:e6:54:
12:39:7a:b5:54:79:22:6c:34:a2:8a:b2:e1:2f:c5:69:c3:a6:
96:65:f2:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASB/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDIxNDIxWhcNMjUxMjEwMDIxNDIxWjAYMRYw
FAYDVQQDEw02NzZhMTkwMS05ZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqO/mpNYUIZpyTK5tiDY1H2cqWOElZRJyFcXleuWFEpbMr/3tV+wL3R3v
QR2Ce/s4TNVNCBQ62yzf2ZABhPsdDm6EL4LE5IDU8l0YqvYOL6WX/BK0GwI1UH0q
De9D4YMSUvhIzncleAzRpAE4jSHw/GWfSH3Y4SSdBDXx2vd8X/f+XFvVDHD8tf/q
qFIzObcLot/lfLQXnHNAezj0Hmu5ybnrm2I4EPlH2o8B6bGU/Gbx8zrZzDaiYH7o
kRb1cERB8UzeEaND4BSUvJKUxJrknCMsPO0a6sgWwCHYcx5oFZIRPBjxmEdrvwd9
fzhWQEg8vrqgx2Nevy9xLTvkRxcTuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLD5
Pv5sZf4KuPeZFxj4euaZwRneMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQkNENURBMEMxOUMxMUVGOTU0NUY2QjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlrbMA0GCSqGSIb3DQEB
CwUAA4IBAQDGEuQkdB4t6qoDiASEpLds+D/gRQwHOAo083xclln8/594nnZ/Z4hJ
B9EkST+3jIZClWDmBqffOjOMsD0y0ELJh/d6UXqnKjd+cbEoklJnaFjlFWK5BoHR
zJprP58qF1YAXQQ7kBpMsKYXpQ01lEwajXpFWdCxcItfjXnZCKIP8/d1tKSozOE0
r2Bmc/inQt+5IzIkqIpJbVn33finyobcEQ1XwzXzstNAAOeB+pZr7tNFOcF3c0DG
vV9K/2pwaR8sazxFPqTTpIs4hT9ioMbVaCGKCjPqu52CcSznDn7SIRlSD+e0fEjq
5lQSOXq1VHkibDSiirLhL8Vpw6aWZfIs
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:47 2025 by rpki-client