Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2558EC1AC19611EF80853985762E951A.roa
File: 2558EC1AC19611EF80853985762E951A.roa (raw, json)
Hash identifier: H6Nb2+d7skKtlZw7OZ+Vy+WQ7swsP3K7ZX3lRLyDQsQ=
Subject key identifier: EE:11:6D:54:26:71:0E:95:EB:42:67:FB:25:21:7C:E0:EC:AD:D8:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01202D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2558EC1AC19611EF80853985762E951A.roa
Signing time: Tue 24 Dec 2024 01:26:49 +0000
ROA not before: Tue 24 Dec 2024 01:26:45 +0000
ROA not after: Wed 10 Dec 2025 01:26:45 +0000
asID: 984
IP address blocks: 154.90.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73773 (0x1202d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:26:45 2024 GMT
Not After : Dec 10 01:26:45 2025 GMT
Subject: CN=676a0dd9-d83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:99:e9:fb:2f:ae:bc:56:12:89:d6:d9:ff:86:
5d:1c:94:cf:09:3b:b2:c4:6e:0c:1b:45:e1:76:e7:
95:44:16:88:16:e1:e6:6a:14:86:98:22:bb:17:ce:
26:90:36:d7:60:17:81:5b:25:4c:90:a4:4c:92:59:
04:9c:0d:d3:46:ce:cb:75:2c:36:7a:47:94:03:83:
05:75:c1:b3:5d:71:55:1b:e0:84:03:2b:8a:66:53:
c4:18:34:94:d6:ca:41:c1:ae:2e:bb:1f:05:8b:0b:
21:87:d0:3d:0d:a3:b7:ed:fd:59:1f:1d:ed:5f:56:
d5:c0:cc:a2:45:22:db:0a:73:c0:8c:a8:18:d6:35:
2b:d0:8e:f3:4a:7a:a8:e3:84:bb:13:a2:66:cd:dd:
7e:b4:f6:a3:de:f2:7b:ae:e9:f3:5a:b9:2c:de:f0:
c6:0f:70:df:e2:d7:d8:67:61:59:fc:a7:81:fa:8a:
45:2a:c2:c1:cc:04:89:69:e4:52:b0:89:07:c0:e3:
74:33:f0:20:f3:d0:90:08:fd:7a:44:eb:d6:47:3d:
66:ba:ff:2a:ff:a9:61:a4:1a:d0:7d:e1:84:79:bd:
ab:0e:63:dc:43:04:67:52:0f:60:4d:bc:32:23:51:
ab:50:45:74:75:d2:21:7a:ba:1c:10:2f:ab:4e:22:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:6D:54:26:71:0E:95:EB:42:67:FB:25:21:7C:E0:EC:AD:D8:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2558EC1AC19611EF80853985762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8b:81:25:16:67:b6:bc:d3:d8:96:89:10:f7:54:6f:84:70:
14:59:44:6c:08:6b:dc:50:7f:a0:09:d2:ca:29:70:47:c2:2c:
fc:21:a5:f8:39:40:fc:8b:fc:f6:ef:83:46:0a:37:21:36:4a:
d5:9c:f7:d8:c9:d2:21:7e:13:b9:6b:2c:ad:e8:8f:0a:a0:ca:
d0:ff:eb:83:52:2b:11:f5:07:ab:d1:15:5a:df:3e:95:5e:ff:
2d:e7:31:fd:b1:07:c6:52:35:c1:bd:d3:07:10:d0:ea:42:96:
16:4e:b4:54:3b:35:6f:d9:4e:4a:eb:23:0f:58:35:91:0f:c9:
ef:95:03:fe:6a:77:1d:78:db:dd:9a:c7:20:e0:42:f5:7c:a6:
d0:00:d1:e8:bf:90:1e:fa:88:f2:91:5c:3c:10:17:1f:20:3a:
6c:6e:b2:42:bd:7d:2c:e7:4a:17:82:c2:49:fc:1f:f9:f2:37:
3b:d9:cd:61:1b:66:a9:0e:57:1d:1a:9d:9b:79:50:c6:24:c7:
38:7f:7b:2b:29:e7:69:f3:fd:e1:2e:b3:82:2f:42:7a:46:45:
82:44:03:8b:4c:3b:6c:bc:8e:a4:f8:03:78:75:3a:59:1c:b0:
d2:42:62:e5:5e:a8:eb:26:3f:85:b2:a4:b1:7b:1b:29:69:85:
fb:6d:6a:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASAtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDEyNjQ1WhcNMjUxMjEwMDEyNjQ1WjAYMRYw
FAYDVQQDEw02NzZhMGRkOS1kODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4pnp+y+uvFYSidbZ/4ZdHJTPCTuyxG4MG0XhdueVRBaIFuHmahSGmCK7
F84mkDbXYBeBWyVMkKRMklkEnA3TRs7LdSw2ekeUA4MFdcGzXXFVG+CEAyuKZlPE
GDSU1spBwa4uux8Fiwshh9A9DaO37f1ZHx3tX1bVwMyiRSLbCnPAjKgY1jUr0I7z
Snqo44S7E6Jmzd1+tPaj3vJ7runzWrks3vDGD3Df4tfYZ2FZ/KeB+opFKsLBzASJ
aeRSsIkHwON0M/Ag89CQCP16ROvWRz1muv8q/6lhpBrQfeGEeb2rDmPcQwRnUg9g
TbwyI1GrUEV0ddIherocEC+rTiLkDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO4R
bVQmcQ6V60Jn+yUhfODsrdjAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNTU4RUMxQUMxOTYxMUVGODA4NTM5ODU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlquMA0GCSqGSIb3DQEB
CwUAA4IBAQBri4ElFme2vNPYlokQ91RvhHAUWURsCGvcUH+gCdLKKXBHwiz8IaX4
OUD8i/z274NGCjchNkrVnPfYydIhfhO5ayyt6I8KoMrQ/+uDUisR9Qer0RVa3z6V
Xv8t5zH9sQfGUjXBvdMHENDqQpYWTrRUOzVv2U5K6yMPWDWRD8nvlQP+ancdeNvd
mscg4EL1fKbQANHov5Ae+ojykVw8EBcfIDpsbrJCvX0s50oXgsJJ/B/58jc72c1h
G2apDlcdGp2beVDGJMc4f3srKedp8/3hLrOCL0J6RkWCRAOLTDtsvI6k+AN4dTpZ
HLDSQmLlXqjrJj+FsqSxexspaYX7bWqo
-----END CERTIFICATE-----
Generated at Fri Apr 11 02:53:58 2025 by rpki-client