Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3932B0CC19511EFA2C28C82762E951A.roa
File: D3932B0CC19511EFA2C28C82762E951A.roa (raw, json)
Hash identifier: 1egUSEmhz0TUXLF1tFSTBlIqTzvoA4MValXO3IDtptU=
Subject key identifier: 1A:33:21:80:D0:A4:83:CF:5E:FD:35:CB:16:6C:CC:20:A4:01:53:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012029
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3932B0CC19511EFA2C28C82762E951A.roa
Signing time: Tue 24 Dec 2024 01:24:32 +0000
ROA not before: Tue 24 Dec 2024 01:24:28 +0000
ROA not after: Wed 10 Dec 2025 01:24:28 +0000
asID: 984
IP address blocks: 154.90.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73769 (0x12029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:24:28 2024 GMT
Not After : Dec 10 01:24:28 2025 GMT
Subject: CN=676a0d4f-7774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:68:2b:3d:db:c7:1f:3f:f7:e7:f0:62:18:
86:a7:d0:9a:1f:fb:9a:9a:9a:da:0a:35:79:8c:e1:
d5:4d:54:a2:e9:c7:a6:7b:20:56:a1:05:a4:9b:53:
aa:69:36:d3:02:b8:0c:3e:72:6d:36:71:89:54:70:
10:98:86:d9:90:f7:74:c1:2f:d2:f0:11:a2:ad:40:
56:c7:ed:af:0a:8a:5f:8b:52:95:08:67:68:e3:f4:
2a:3d:25:78:79:72:dd:f8:26:80:0c:00:e5:66:36:
87:fe:35:cc:95:0e:a9:2c:7e:de:88:eb:5c:51:5f:
75:4a:c6:37:ef:8a:d5:44:2c:8f:d7:90:f8:b0:e9:
55:31:a6:44:2a:de:b1:86:34:ae:cb:79:ac:03:40:
e7:5c:0f:f8:8d:83:1f:f4:28:49:69:76:97:7c:17:
bf:d5:34:0d:1d:e3:e2:ba:85:a7:18:eb:d5:3c:15:
12:20:0c:28:48:37:24:63:8f:fe:38:1e:47:3a:f5:
62:db:0c:87:ba:c7:c8:4a:9e:11:81:6c:09:84:bd:
9d:28:64:a0:89:c1:e6:f9:7f:6b:7d:90:c3:0b:56:
fc:23:3e:ac:c0:fd:3a:a2:ea:f0:00:34:6c:f1:2b:
cc:8b:68:ae:63:3f:27:ee:dc:ad:7d:f1:bf:bc:fc:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:21:80:D0:A4:83:CF:5E:FD:35:CB:16:6C:CC:20:A4:01:53:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3932B0CC19511EFA2C28C82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.172.0/24
Signature Algorithm: sha256WithRSAEncryption
09:01:65:8c:16:5c:ec:07:3d:f8:a9:43:36:a7:6a:7b:3f:ca:
e3:c1:54:0c:c5:46:63:4c:49:a1:1c:88:a5:dd:78:c7:5a:b6:
a7:d2:8c:a5:a5:46:2e:b4:39:e8:16:a6:08:a6:35:cf:81:7a:
31:a6:be:ef:61:d8:25:f1:ed:16:41:3b:08:25:43:dc:3b:9f:
b9:e9:92:37:38:d4:dc:e8:e0:5e:bc:01:f0:ca:f3:5d:28:55:
2e:03:d6:c9:60:89:26:d8:58:0e:91:0f:91:2f:78:dc:5b:89:
5c:bc:f3:4b:3f:e5:4a:d9:b9:c0:77:8d:49:e7:28:86:e6:cb:
33:8e:41:52:7d:a0:bd:83:fb:cc:cc:0c:ce:d1:1e:f3:a2:a8:
27:2f:0f:32:dd:57:fe:09:d9:14:3c:ba:7b:8c:b1:cc:81:7d:
53:07:01:b0:cd:7c:6a:15:2e:4c:d1:d2:d6:3a:06:d6:6a:d8:
8a:f7:1a:d9:08:f9:c5:45:8e:3f:43:e2:42:31:6d:a0:bd:43:
5a:8e:3a:93:ea:04:d1:94:45:92:6a:9e:a4:3d:92:5e:48:08:
73:d8:f9:55:1e:71:a3:d8:40:0e:d0:05:4f:06:ba:91:5e:33:
3d:1d:0a:cc:5c:fc:50:6a:cb:13:6d:3d:68:5e:ca:38:da:3b:
31:49:ab:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASApMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDEyNDI4WhcNMjUxMjEwMDEyNDI4WjAYMRYw
FAYDVQQDEw02NzZhMGQ0Zi03Nzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArtBoKz3bxx8/9+fwYhiGp9CaH/uampraCjV5jOHVTVSi6cemeyBWoQWk
m1OqaTbTArgMPnJtNnGJVHAQmIbZkPd0wS/S8BGirUBWx+2vCopfi1KVCGdo4/Qq
PSV4eXLd+CaADADlZjaH/jXMlQ6pLH7eiOtcUV91SsY374rVRCyP15D4sOlVMaZE
Kt6xhjSuy3msA0DnXA/4jYMf9ChJaXaXfBe/1TQNHePiuoWnGOvVPBUSIAwoSDck
Y4/+OB5HOvVi2wyHusfISp4RgWwJhL2dKGSgicHm+X9rfZDDC1b8Iz6swP06ourw
ADRs8SvMi2iuYz8n7tytffG/vPxXfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBoz
IYDQpIPPXv01yxZszCCkAVNGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMzkzMkIwQ0MxOTUxMUVGQTJDMjhDODI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlqsMA0GCSqGSIb3DQEB
CwUAA4IBAQAJAWWMFlzsBz34qUM2p2p7P8rjwVQMxUZjTEmhHIil3XjHWran0oyl
pUYutDnoFqYIpjXPgXoxpr7vYdgl8e0WQTsIJUPcO5+56ZI3ONTc6OBevAHwyvNd
KFUuA9bJYIkm2FgOkQ+RL3jcW4lcvPNLP+VK2bnAd41J5yiG5sszjkFSfaC9g/vM
zAzO0R7zoqgnLw8y3Vf+CdkUPLp7jLHMgX1TBwGwzXxqFS5M0dLWOgbWatiK9xrZ
CPnFRY4/Q+JCMW2gvUNajjqT6gTRlEWSap6kPZJeSAhz2PlVHnGj2EAO0AVPBrqR
XjM9HQrMXPxQassTbT1oXso42jsxSat/
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:48 2025 by rpki-client