Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFA06340C0F011EF8ABBFA82762E951A.roa
File: FFA06340C0F011EF8ABBFA82762E951A.roa (raw, json)
Hash identifier: E18ZzSaRyDpSROx7aYwDT5YEqraTwnBo129o6IOjF1g=
Subject key identifier: B6:00:A8:D6:A2:D5:3F:26:4B:E8:5E:51:4A:D2:5D:C0:A6:6F:F1:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFA06340C0F011EF8ABBFA82762E951A.roa
Signing time: Mon 23 Dec 2024 05:44:39 +0000
ROA not before: Mon 23 Dec 2024 05:44:35 +0000
ROA not after: Wed 10 Dec 2025 05:44:35 +0000
asID: 984
IP address blocks: 154.90.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73564 (0x11f5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:44:35 2024 GMT
Not After : Dec 10 05:44:35 2025 GMT
Subject: CN=6768f8c6-dc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:e2:70:c0:d5:45:7f:98:da:23:04:b1:eb:
72:b3:11:39:53:0f:71:99:fd:ee:ce:0f:7b:1a:6d:
84:1c:70:df:90:3e:e8:75:cd:83:3f:7b:cf:e6:06:
a4:9b:4e:65:9c:db:39:35:26:87:26:79:84:e5:c5:
e3:38:df:4f:ab:b4:6f:28:40:40:7f:8a:ee:8e:5c:
b9:7a:13:7a:42:b2:9f:02:e0:14:84:08:f7:9e:ef:
ce:8e:33:fa:31:bc:ff:a3:fd:cc:5e:e1:8a:04:ce:
c7:66:4b:13:e3:cb:7b:d0:75:2d:4e:db:b6:3b:de:
57:6d:37:f3:f3:bd:e0:67:07:62:63:e7:df:84:c1:
70:3a:04:82:69:d8:40:dc:d1:0a:80:f2:59:9a:59:
57:72:51:1d:64:a5:bd:4a:19:dd:7f:e9:7f:43:93:
25:26:e3:39:9a:08:50:ad:bb:af:ec:95:85:01:3b:
c3:72:7d:7f:fd:a9:90:88:3a:7f:36:53:a8:e8:9e:
ed:9f:fe:96:42:21:84:84:a8:f6:51:48:cc:66:75:
58:d2:92:b8:13:2a:45:4d:43:b3:da:7d:8c:64:e4:
be:63:37:c4:a3:79:f6:ba:52:c1:ac:52:20:9a:26:
30:34:b6:02:d6:c7:5d:a1:74:f0:25:88:49:16:c9:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:00:A8:D6:A2:D5:3F:26:4B:E8:5E:51:4A:D2:5D:C0:A6:6F:F1:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFA06340C0F011EF8ABBFA82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.100.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6b:5f:c7:04:14:dc:ac:9c:d4:81:96:37:05:f6:36:ee:f7:
46:e4:41:25:c2:32:01:34:d8:2b:8c:07:95:76:7e:91:fc:32:
e2:c0:43:7c:57:73:f7:0d:ea:ce:19:70:9b:0a:c5:f8:80:79:
a8:08:d3:dd:41:c9:43:25:33:70:14:d2:62:48:af:2b:48:25:
b9:2a:2e:cd:64:4f:b5:b1:8b:14:98:81:df:82:15:72:b0:ce:
fb:37:76:a9:4d:b9:24:8e:2f:e4:17:e6:20:4f:b3:d7:9a:f3:
d0:55:81:55:8b:fa:0c:95:86:0e:20:8c:2b:65:cb:4c:14:43:
6c:f8:41:65:4f:0d:01:fd:7d:14:ed:6b:ee:b9:df:38:7b:5c:
bf:12:d6:2b:b8:67:94:62:43:83:6d:46:7f:fe:71:9f:ec:cc:
ce:51:23:9f:e0:6a:88:1d:f7:d9:03:33:73:37:dd:1a:2e:11:
53:37:ad:be:99:1d:3c:bd:bc:1b:c5:8c:7e:c6:4a:25:78:3b:
b3:5b:a6:d1:88:b1:19:e3:ff:94:1a:7c:87:bc:86:75:fa:66:
ca:24:d7:80:b8:f2:7f:49:8c:ac:90:9e:a5:3c:44:b9:d0:a2:
d0:4a:53:2a:dd:8e:9a:65:21:e8:de:ef:db:b9:25:83:15:f6:
55:76:f0:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR9cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDU0NDM1WhcNMjUxMjEwMDU0NDM1WjAYMRYw
FAYDVQQDEw02NzY4ZjhjNi1kYzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvqricMDVRX+Y2iMEsetysxE5Uw9xmf3uzg97Gm2EHHDfkD7odc2DP3vP
5gakm05lnNs5NSaHJnmE5cXjON9Pq7RvKEBAf4rujly5ehN6QrKfAuAUhAj3nu/O
jjP6Mbz/o/3MXuGKBM7HZksT48t70HUtTtu2O95XbTfz873gZwdiY+ffhMFwOgSC
adhA3NEKgPJZmllXclEdZKW9Shndf+l/Q5MlJuM5mghQrbuv7JWFATvDcn1//amQ
iDp/NlOo6J7tn/6WQiGEhKj2UUjMZnVY0pK4EypFTUOz2n2MZOS+YzfEo3n2ulLB
rFIgmiYwNLYC1sddoXTwJYhJFslrzwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLYA
qNai1T8mS+heUUrSXcCmb/GRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRkEwNjM0MEMwRjAxMUVGOEFCQkZBODI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlpkMA0GCSqGSIb3DQEB
CwUAA4IBAQCYa1/HBBTcrJzUgZY3BfY27vdG5EElwjIBNNgrjAeVdn6R/DLiwEN8
V3P3DerOGXCbCsX4gHmoCNPdQclDJTNwFNJiSK8rSCW5Ki7NZE+1sYsUmIHfghVy
sM77N3apTbkkji/kF+YgT7PXmvPQVYFVi/oMlYYOIIwrZctMFENs+EFlTw0B/X0U
7Wvuud84e1y/EtYruGeUYkODbUZ//nGf7MzOUSOf4GqIHffZAzNzN90aLhFTN62+
mR08vbwbxYx+xkoleDuzW6bRiLEZ4/+UGnyHvIZ1+mbKJNeAuPJ/SYyskJ6lPES5
0KLQSlMq3Y6aZSHo3u/buSWDFfZVdvAB
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:07 2025 by rpki-client