Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E07320BEC19211EF9C38106E762E951A.roa
File: E07320BEC19211EF9C38106E762E951A.roa (raw, json)
Hash identifier: igTEvjlulmlqjuyJ8t41rTG7UmzFwu9ORwpFN+YotBo=
Subject key identifier: B7:C3:4A:EA:C9:62:E9:FD:9E:8D:60:3C:1D:B5:FD:1F:50:3F:A8:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012005
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E07320BEC19211EF9C38106E762E951A.roa
Signing time: Tue 24 Dec 2024 01:03:25 +0000
ROA not before: Tue 24 Dec 2024 01:03:21 +0000
ROA not after: Wed 10 Dec 2025 01:03:21 +0000
asID: 984
IP address blocks: 154.90.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73733 (0x12005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:03:21 2024 GMT
Not After : Dec 10 01:03:21 2025 GMT
Subject: CN=676a085d-121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:f9:95:77:1b:a0:72:0b:30:fc:6e:8c:80:
a7:0a:2c:bd:b8:08:97:6b:dc:f5:a1:58:9b:62:9d:
db:61:4e:11:a8:73:d5:91:61:3e:d9:43:e9:b7:23:
cc:ec:91:2c:a7:ae:e3:c4:f6:34:c4:e3:bd:8b:15:
8e:50:36:bf:85:b3:fc:54:99:24:65:cb:ae:21:6b:
62:1a:5b:97:23:cc:65:af:02:d0:ca:9e:1a:2a:06:
2f:d5:50:1b:9a:7f:c8:03:15:83:02:55:d0:17:d2:
c8:76:e0:3f:0c:39:43:0d:8a:56:c7:b8:a9:ea:82:
d0:64:15:89:0f:0d:ed:89:58:9a:9b:68:37:22:3f:
5e:14:19:de:83:ed:5a:02:6e:59:a9:77:22:63:11:
66:c8:9c:b1:3d:8c:c3:ec:f7:6c:d8:11:85:32:dc:
40:eb:93:41:9b:38:f7:99:cf:d9:ae:6a:8a:b6:cf:
f8:93:99:b8:e5:37:9b:fc:c6:75:76:7c:2b:6b:9d:
8a:a5:43:83:0f:c4:70:c4:5e:87:82:f6:51:cd:be:
e7:77:2c:84:8c:53:17:2b:ec:58:ae:ca:17:2d:7f:
56:ed:eb:89:f9:1d:22:ca:55:c4:8e:0e:c2:42:76:
6c:cf:06:89:96:a5:13:36:55:17:27:6b:2f:fb:cc:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C3:4A:EA:C9:62:E9:FD:9E:8D:60:3C:1D:B5:FD:1F:50:3F:A8:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E07320BEC19211EF9C38106E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.153.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e1:b8:2a:75:97:44:a4:74:66:67:b6:97:70:7c:d9:e3:16:
da:94:a2:15:c4:ce:47:0d:a7:28:09:8d:ee:24:7c:3d:7c:3e:
9b:b9:87:ac:bb:7c:ba:69:2c:80:51:18:13:d9:1c:78:91:f0:
f6:15:ab:e9:fa:34:f9:d0:95:33:19:63:ad:0b:af:2b:8a:1d:
4b:40:9b:96:ec:a2:c6:f4:b3:9d:c7:33:fa:c9:89:96:16:48:
99:c3:a2:6c:69:55:d7:f9:b4:d0:32:e1:32:c4:df:e6:3a:fd:
c6:39:6c:ac:42:df:01:ff:ee:27:5f:27:4e:13:31:46:c7:85:
af:c0:27:88:46:9f:af:04:fa:a8:55:9b:3e:93:2c:d1:9b:31:
d8:90:00:09:a1:3b:07:1f:17:56:28:0e:df:d5:36:ae:63:15:
4f:8a:59:bf:3c:e9:67:55:38:bd:dc:ca:11:ba:85:23:98:2a:
bd:c7:a1:05:20:a9:86:0c:82:2d:5b:ce:57:67:bc:cb:0f:ff:
7f:48:31:df:66:e5:fe:fb:3f:51:a8:16:31:53:29:ac:04:62:
84:79:c6:10:f7:c9:76:18:49:08:cf:b8:27:03:c5:c6:55:88:
e3:bc:ea:b8:f7:d1:2e:4f:f0:16:f6:7f:4a:a5:64:4a:36:a6:
8a:e1:66:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASAFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDEwMzIxWhcNMjUxMjEwMDEwMzIxWjAYMRYw
FAYDVQQDEw02NzZhMDg1ZC0xMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsNL5lXcboHILMPxujICnCiy9uAiXa9z1oVibYp3bYU4RqHPVkWE+2UPp
tyPM7JEsp67jxPY0xOO9ixWOUDa/hbP8VJkkZcuuIWtiGluXI8xlrwLQyp4aKgYv
1VAbmn/IAxWDAlXQF9LIduA/DDlDDYpWx7ip6oLQZBWJDw3tiViam2g3Ij9eFBne
g+1aAm5ZqXciYxFmyJyxPYzD7Pds2BGFMtxA65NBmzj3mc/ZrmqKts/4k5m45Teb
/MZ1dnwra52KpUODD8RwxF6HgvZRzb7ndyyEjFMXK+xYrsoXLX9W7euJ+R0iylXE
jg7CQnZszwaJlqUTNlUXJ2sv+8yzZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLfD
SurJYun9no1gPB21/R9QP6iUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMDczMjBCRUMxOTIxMUVGOUMzODEwNkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlqZMA0GCSqGSIb3DQEB
CwUAA4IBAQAR4bgqdZdEpHRmZ7aXcHzZ4xbalKIVxM5HDacoCY3uJHw9fD6buYes
u3y6aSyAURgT2Rx4kfD2Favp+jT50JUzGWOtC68rih1LQJuW7KLG9LOdxzP6yYmW
FkiZw6JsaVXX+bTQMuEyxN/mOv3GOWysQt8B/+4nXydOEzFGx4WvwCeIRp+vBPqo
VZs+kyzRmzHYkAAJoTsHHxdWKA7f1TauYxVPilm/POlnVTi93MoRuoUjmCq9x6EF
IKmGDIItW85XZ7zLD/9/SDHfZuX++z9RqBYxUymsBGKEecYQ98l2GEkIz7gnA8XG
VYjjvOq499EuT/AW9n9KpWRKNqaK4WaP
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:29 2025 by rpki-client