Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A19EAA8F42C11EFA31BEEB6762E951A.roa
File: 0A19EAA8F42C11EFA31BEEB6762E951A.roa (raw, json)
Hash identifier: Xs0jvcUoa6C/DtZ+9xs+lYTi8EefmZxFqH7dztz83hM=
Subject key identifier: 1A:67:64:A4:55:8B:33:91:4C:C9:19:94:70:95:FA:B7:F4:14:3D:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016231
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A19EAA8F42C11EFA31BEEB6762E951A.roa
Signing time: Wed 26 Feb 2025 10:25:46 +0000
ROA not before: Wed 26 Feb 2025 10:25:42 +0000
ROA not after: Thu 19 Feb 2026 10:25:42 +0000
asID: 984
IP address blocks: 154.208.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90673 (0x16231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:25:42 2025 GMT
Not After : Feb 19 10:25:42 2026 GMT
Subject: CN=67beec2a-fa70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:4a:02:f5:78:9f:2e:fd:22:54:54:07:8a:
7d:e5:17:c9:0d:cc:b4:38:fb:00:df:00:01:4a:04:
ae:87:d7:01:5b:cc:b3:f1:e2:fb:2f:ad:15:81:0f:
e5:c4:3c:27:1f:8a:02:7b:cb:48:eb:6d:24:df:4d:
33:c7:3c:a2:18:06:16:07:1a:4f:05:8e:72:59:ee:
55:20:26:72:35:47:f0:5f:17:67:77:be:d4:70:0d:
35:da:bb:85:86:03:e1:0d:95:c2:ee:e8:bd:54:e8:
e6:f4:f8:72:a5:b7:6f:34:c8:d4:3b:70:2b:5e:72:
30:ba:3c:df:5a:89:e0:07:03:5a:4c:a3:05:14:4d:
4b:ba:3d:53:d9:ed:5f:01:47:44:70:c4:e3:fb:3d:
ac:4e:fd:b4:8b:1c:c8:56:ca:7a:53:9d:4e:e8:21:
2e:69:11:15:26:8d:39:4c:12:37:55:8b:c8:9d:19:
e2:d1:09:66:e8:3b:51:03:06:6b:f6:d1:fb:f5:a8:
a3:81:e1:09:27:c2:45:ba:25:5a:3b:f6:4d:5f:aa:
65:8b:56:74:09:78:ff:22:a5:de:5c:cc:c9:19:c9:
06:d6:23:e1:39:ee:b1:56:8c:70:8a:f0:f3:ed:ea:
c8:5c:12:93:22:43:dd:63:19:35:1c:42:41:9e:03:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:64:A4:55:8B:33:91:4C:C9:19:94:70:95:FA:B7:F4:14:3D:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A19EAA8F42C11EFA31BEEB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.74.0/24
Signature Algorithm: sha256WithRSAEncryption
17:80:bd:cf:d1:c4:6c:cf:13:92:92:60:46:a6:c1:9b:82:c7:
10:45:d7:6d:3a:e5:b2:2f:64:34:e7:97:f6:ec:ad:82:fa:33:
35:8e:fd:9d:73:ec:17:ae:77:20:99:77:d6:54:15:0b:98:98:
5a:d7:fa:62:0b:e8:7c:24:89:db:7e:5d:94:de:c2:95:ec:a7:
07:b3:a8:55:a9:5c:c2:57:bb:5d:40:46:c8:1e:ea:1b:dc:ba:
c4:99:ee:7b:b6:2f:8f:4c:26:a5:5f:e1:91:09:d6:61:c5:b9:
bb:7c:a8:96:0a:68:ec:d2:cd:90:fc:33:21:f4:db:b6:ea:40:
ec:65:c5:ae:bc:4e:c8:7c:39:df:b7:4c:9e:ef:35:63:f0:7f:
4e:66:6c:d6:fb:1d:dd:51:a5:2d:e6:bb:fd:a8:c1:63:b8:ae:
e2:10:0e:93:ac:96:b6:b9:18:3e:09:4f:06:88:6f:49:70:1d:
46:60:55:52:83:3d:b1:97:86:36:0e:65:64:e1:d4:21:c3:68:
34:01:b2:07:fe:b0:3a:ff:9c:4e:f0:11:e9:5e:92:e1:57:e3:
4b:3a:34:0b:4f:f0:be:fc:5f:80:6e:9a:8a:0c:6a:b7:60:1c:
71:0a:8e:f7:b6:58:99:b2:c5:a2:3b:a6:74:c7:d9:3a:ee:05:
9d:8c:43:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWIxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTAyNTQyWhcNMjYwMjE5MTAyNTQyWjAYMRYw
FAYDVQQDEw02N2JlZWMyYS1mYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv7VKAvV4ny79IlRUB4p95RfJDcy0OPsA3wABSgSuh9cBW8yz8eL7L60V
gQ/lxDwnH4oCe8tI620k300zxzyiGAYWBxpPBY5yWe5VICZyNUfwXxdnd77UcA01
2ruFhgPhDZXC7ui9VOjm9PhypbdvNMjUO3ArXnIwujzfWongBwNaTKMFFE1Luj1T
2e1fAUdEcMTj+z2sTv20ixzIVsp6U51O6CEuaREVJo05TBI3VYvInRni0Qlm6DtR
AwZr9tH79aijgeEJJ8JFuiVaO/ZNX6pli1Z0CXj/IqXeXMzJGckG1iPhOe6xVoxw
ivDz7erIXBKTIkPdYxk1HEJBngNCEwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBpn
ZKRVizORTMkZlHCV+rf0FD0PMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQTE5RUFBOEY0MkMxMUVGQTMxQkVFQjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtBKMA0GCSqGSIb3DQEB
CwUAA4IBAQAXgL3P0cRszxOSkmBGpsGbgscQRddtOuWyL2Q055f27K2C+jM1jv2d
c+wXrncgmXfWVBULmJha1/piC+h8JInbfl2U3sKV7KcHs6hVqVzCV7tdQEbIHuob
3LrEme57ti+PTCalX+GRCdZhxbm7fKiWCmjs0s2Q/DMh9Nu26kDsZcWuvE7IfDnf
t0ye7zVj8H9OZmzW+x3dUaUt5rv9qMFjuK7iEA6TrJa2uRg+CU8GiG9JcB1GYFVS
gz2xl4Y2DmVk4dQhw2g0AbIH/rA6/5xO8BHpXpLhV+NLOjQLT/C+/F+AbpqKDGq3
YBxxCo73tliZssWiO6Z0x9k67gWdjEOn
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:20 2025 by rpki-client