Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98EA05181CA111F0AE337AF6DAE4EC9C.roa
File: 98EA05181CA111F0AE337AF6DAE4EC9C.roa (raw, json)
Hash identifier: JiesVNEitQLST3Vi8XgZqhNdJeGBkjwUljUxl2TRYJg=
Subject key identifier: A0:AF:9A:98:84:55:7F:C8:B2:D5:6A:99:A9:92:8E:D2:8B:E1:A6:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98EA05181CA111F0AE337AF6DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 22:08:03 +0000
ROA not before: Fri 18 Apr 2025 22:07:59 +0000
ROA not after: Wed 04 Jun 2025 22:07:59 +0000
asID: 398993
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96758 (0x179f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 22:07:59 2025 GMT
Not After : Jun 4 22:07:59 2025 GMT
Subject: CN=6802cd43-b5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:cf:fd:db:4c:fd:34:c8:a3:ea:54:a3:1a:
b1:b2:bf:d5:3a:3f:cb:20:88:62:b2:27:8b:8a:2f:
35:14:14:6e:78:31:ac:4c:5f:8e:32:2c:85:88:ec:
03:36:96:a0:a7:03:54:b6:b5:dd:f1:87:17:5c:d9:
da:2f:d1:34:a5:c2:fd:1d:ee:17:c6:a1:4b:9a:74:
02:b8:ed:9c:6f:a3:5c:8c:c0:31:78:45:ed:17:d4:
13:86:04:4a:38:ce:89:21:a8:3c:05:7d:ba:a7:03:
86:c5:6c:28:ab:aa:a0:69:bd:1d:65:af:97:0e:35:
f8:80:c5:42:96:2a:c6:75:e4:eb:9c:a5:2f:06:96:
c9:8e:b6:4f:8d:82:ab:93:37:3e:8d:1d:bc:cc:71:
7a:1d:65:52:70:bf:99:67:1c:df:75:7b:c3:a9:5d:
a6:8b:60:a7:da:72:fc:c6:d6:60:47:57:50:77:67:
3e:de:62:b5:0f:ef:82:70:ba:fa:94:02:67:d7:63:
fa:3e:af:ca:b6:4d:bc:bf:f6:ad:db:3a:42:09:c0:
96:5d:92:bc:a0:83:b6:f8:8e:b1:c3:c5:7f:67:1c:
de:da:bd:c0:86:d7:c3:7d:7a:9b:65:00:da:7d:24:
67:3d:dd:4f:fc:5d:43:04:1a:a9:e8:94:a1:2e:37:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AF:9A:98:84:55:7F:C8:B2:D5:6A:99:A9:92:8E:D2:8B:E1:A6:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98EA05181CA111F0AE337AF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:47:c6:cb:5e:84:11:36:71:ec:4b:1a:3c:ed:ff:5b:44:fe:
b5:1e:92:0a:fa:a6:48:03:3c:be:8e:26:d7:90:2f:39:ec:10:
2a:f2:c2:b3:41:44:0b:a4:67:f7:c3:59:e7:45:1a:a6:54:a0:
85:e5:70:c2:f4:9a:cf:07:8c:49:5d:d0:ac:2c:8b:ec:f7:d1:
69:34:e9:b3:6a:98:9a:f6:bb:51:2a:8e:7d:af:15:1e:30:fe:
e7:5f:bc:c8:a2:d5:fd:d1:0b:3c:70:10:8a:a2:c5:cf:b5:e4:
ef:d0:57:1f:7d:b5:c2:0e:65:fa:35:e1:df:1f:bb:2b:3a:68:
e5:06:6d:61:ac:e4:6d:46:7f:68:fd:5e:22:b1:15:1e:ae:d6:
cb:e4:7e:6e:bd:9a:af:92:7c:69:34:e8:85:d8:a0:c4:7b:b3:
75:47:54:99:8b:25:ac:93:95:c9:61:9f:02:d2:6f:62:c4:58:
27:a9:06:34:91:e3:af:fc:53:5e:43:a1:3e:4d:e4:1e:7c:30:
a4:47:b3:58:1b:a0:21:a8:e6:50:f5:f1:0b:c9:aa:f6:ca:97:
b6:f7:5f:e2:24:2f:a2:fa:4e:1d:2b:18:01:24:33:54:21:cb:
2a:a7:7a:16:c1:5e:21:07:8a:6b:54:fb:7a:62:3e:f3:ff:e3:
b8:f5:41:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXn2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDE4MjIwNzU5WhcNMjUwNjA0MjIwNzU5WjAYMRYw
FAYDVQQDEw02ODAyY2Q0My1iNWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs5vP/dtM/TTIo+pUoxqxsr/VOj/LIIhisieLii81FBRueDGsTF+OMiyF
iOwDNpagpwNUtrXd8YcXXNnaL9E0pcL9He4XxqFLmnQCuO2cb6NcjMAxeEXtF9QT
hgRKOM6JIag8BX26pwOGxWwoq6qgab0dZa+XDjX4gMVClirGdeTrnKUvBpbJjrZP
jYKrkzc+jR28zHF6HWVScL+ZZxzfdXvDqV2mi2Cn2nL8xtZgR1dQd2c+3mK1D++C
cLr6lAJn12P6Pq/Ktk28v/at2zpCCcCWXZK8oIO2+I6xw8V/Zxze2r3AhtfDfXqb
ZQDafSRnPd1P/F1DBBqp6JShLjciuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKCv
mpiEVX/IstVqmamSjtKL4ab/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OEVBMDUxODFDQTExMUYwQUUzMzdBRjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQCgR8bLXoQRNnHsSxo87f9bRP61HpIK+qZIAzy+jibXkC857BAq8sKz
QUQLpGf3w1nnRRqmVKCF5XDC9JrPB4xJXdCsLIvs99FpNOmzapia9rtRKo59rxUe
MP7nX7zIotX90Qs8cBCKosXPteTv0FcffbXCDmX6NeHfH7srOmjlBm1hrORtRn9o
/V4isRUertbL5H5uvZqvknxpNOiF2KDEe7N1R1SZiyWsk5XJYZ8C0m9ixFgnqQY0
keOv/FNeQ6E+TeQefDCkR7NYG6AhqOZQ9fELyar2ype291/iJC+i+k4dKxgBJDNU
Icsqp3oWwV4hB4prVPt6Yj7z/+O49UEc
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:56:46 2025 by rpki-client on console.sobornost.net