Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBA0931ECDC511EFB3E9F09D762E951A.roa
File: FBA0931ECDC511EFB3E9F09D762E951A.roa (raw, json)
Hash identifier: RsVxczjIy6inEN7g7kn/yjZY3psvLQJ35QQVPckny6s=
Subject key identifier: 94:81:35:FD:9F:E1:CD:06:D3:4D:07:76:C0:EF:73:CC:B7:10:06:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01373C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBA0931ECDC511EFB3E9F09D762E951A.roa
Signing time: Wed 08 Jan 2025 13:39:29 +0000
ROA not before: Wed 08 Jan 2025 13:39:25 +0000
ROA not after: Thu 23 Dec 2027 13:39:25 +0000
asID: 17561
IP address blocks: 154.89.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79676 (0x1373c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:39:25 2025 GMT
Not After : Dec 23 13:39:25 2027 GMT
Subject: CN=677e8010-48c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:93:ca:99:b2:b8:6c:4a:44:d0:31:f2:0f:
4a:32:40:72:54:4a:c2:f5:16:34:6f:00:b3:7b:22:
89:3c:3e:08:5c:24:32:34:a3:2c:7b:15:48:be:bd:
33:a1:77:1d:eb:0a:ca:1e:a4:c0:da:b1:bb:7e:a5:
45:58:98:6d:57:40:f0:8c:67:2f:cc:d2:d0:b7:ad:
ae:94:69:f8:db:a2:c2:cd:85:0f:b2:7f:08:82:22:
01:7b:35:80:6b:52:1b:ed:3f:dc:d8:1e:c3:26:ac:
7d:d8:cc:cc:ef:a3:17:e1:f5:27:54:b9:d1:82:b8:
4b:09:15:7e:71:38:d6:90:3a:a8:41:3a:ba:bf:58:
1b:c7:2a:eb:66:42:46:a9:98:0a:42:05:07:81:1b:
33:73:30:4e:2e:1d:21:0a:63:fd:52:ad:6d:3d:c9:
bd:43:b7:f3:c1:7d:f0:21:d1:88:11:22:18:7c:56:
55:cf:b7:d6:15:3c:e3:35:47:62:a8:49:1f:da:2e:
37:7b:2d:74:89:8c:6d:14:79:92:8c:e2:a6:eb:96:
32:16:b6:36:d1:a5:57:4e:e3:6e:a7:c7:9a:4c:1a:
5a:31:57:cf:66:21:f9:5d:a7:63:b5:68:ea:c7:45:
86:a3:6f:79:92:6a:7b:54:1d:d3:4d:7c:64:a3:86:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:81:35:FD:9F:E1:CD:06:D3:4D:07:76:C0:EF:73:CC:B7:10:06:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBA0931ECDC511EFB3E9F09D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.23.0/24
Signature Algorithm: sha256WithRSAEncryption
27:8c:6d:26:5f:31:a7:b4:67:e2:1a:bb:a0:eb:94:6e:9d:2c:
4c:4d:c7:f7:c6:df:cc:de:ff:9d:9e:92:c9:d2:6b:9a:d2:9e:
49:24:5b:c1:93:41:13:92:21:f7:61:e0:a9:00:1a:2c:4a:d9:
62:eb:e5:bb:32:5b:37:02:3b:b9:b9:6f:76:a8:36:1b:6e:d8:
3b:7a:92:1b:61:22:14:9c:ae:ed:0f:46:4c:ec:6e:3f:12:78:
d7:f8:42:a7:c4:ab:63:49:9c:15:91:ba:8e:ca:fe:8f:f8:92:
22:b1:e8:15:63:74:b1:5b:75:3c:1a:35:4c:79:d2:1f:42:5e:
46:6e:6f:e1:ef:7f:d4:32:99:da:3a:8d:24:c8:7b:a7:7d:8d:
5d:7a:73:d0:f3:f6:c9:13:f3:06:7c:0a:b3:ec:47:50:98:38:
61:79:d1:1b:29:d6:91:9e:dd:88:12:32:a6:f7:18:35:44:ca:
85:7d:ef:3d:e4:3f:27:ed:21:02:fb:bb:0c:94:22:61:a4:2d:
8b:58:fd:04:06:95:23:08:af:c7:de:2e:22:7d:e3:87:60:d4:
52:16:7b:33:1e:90:f8:48:40:3f:03:54:2a:d4:17:92:94:7c:
99:df:5a:89:de:d2:e4:26:dd:7e:ac:72:c6:01:97:b9:3c:3b:
2e:62:70:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATc8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTMzOTI1WhcNMjcxMjIzMTMzOTI1WjAYMRYw
FAYDVQQDEw02NzdlODAxMC00OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0RmTypmyuGxKRNAx8g9KMkByVErC9RY0bwCzeyKJPD4IXCQyNKMsexVI
vr0zoXcd6wrKHqTA2rG7fqVFWJhtV0DwjGcvzNLQt62ulGn426LCzYUPsn8IgiIB
ezWAa1Ib7T/c2B7DJqx92MzM76MX4fUnVLnRgrhLCRV+cTjWkDqoQTq6v1gbxyrr
ZkJGqZgKQgUHgRszczBOLh0hCmP9Uq1tPcm9Q7fzwX3wIdGIESIYfFZVz7fWFTzj
NUdiqEkf2i43ey10iYxtFHmSjOKm65YyFrY20aVXTuNup8eaTBpaMVfPZiH5Xadj
tWjqx0WGo295kmp7VB3TTXxko4aLTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJSB
Nf2f4c0G000HdsDvc8y3EAYfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQkEwOTMxRUNEQzUxMUVGQjNFOUYwOUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlkXMA0GCSqGSIb3DQEB
CwUAA4IBAQAnjG0mXzGntGfiGrug65RunSxMTcf3xt/M3v+dnpLJ0mua0p5JJFvB
k0ETkiH3YeCpABosStli6+W7Mls3Aju5uW92qDYbbtg7epIbYSIUnK7tD0ZM7G4/
EnjX+EKnxKtjSZwVkbqOyv6P+JIisegVY3SxW3U8GjVMedIfQl5Gbm/h73/UMpna
Oo0kyHunfY1denPQ8/bJE/MGfAqz7EdQmDhhedEbKdaRnt2IEjKm9xg1RMqFfe89
5D8n7SEC+7sMlCJhpC2LWP0EBpUjCK/H3i4ifeOHYNRSFnszHpD4SEA/A1Qq1BeS
lHyZ31qJ3tLkJt1+rHLGAZe5PDsuYnAF
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:31 2025 by rpki-client