Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/424E2018C1CA11EF96060C60762E951A.roa
File: 424E2018C1CA11EF96060C60762E951A.roa (raw, json)
Hash identifier: +sAhJxfhkCL7DnlWZyHBPhb9KJJ6ZTMA30NtTSwsL0o=
Subject key identifier: EA:24:CE:C9:AF:FB:04:89:67:1B:F5:DF:DA:FD:83:F2:74:CB:1F:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012253
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/424E2018C1CA11EF96060C60762E951A.roa
Signing time: Tue 24 Dec 2024 07:39:51 +0000
ROA not before: Tue 24 Dec 2024 07:39:47 +0000
ROA not after: Wed 10 Dec 2025 07:39:47 +0000
asID: 984
IP address blocks: 154.193.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74323 (0x12253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:39:47 2024 GMT
Not After : Dec 10 07:39:47 2025 GMT
Subject: CN=676a6547-c196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:3c:04:87:4b:15:b7:cf:35:63:a5:a6:0b:
2a:47:6a:dc:2d:d8:85:2d:56:07:6d:40:6f:29:c9:
68:2f:76:12:71:68:ac:8f:36:8d:b4:ed:85:9c:5b:
2c:9e:cd:d2:10:a8:be:26:40:10:6b:4c:c1:6d:47:
d7:a5:4c:90:c0:81:85:c5:e5:9b:71:4d:48:90:83:
60:28:15:bd:4a:04:55:61:c8:4a:89:4a:77:e5:c6:
d2:07:8d:1d:fa:57:b0:34:bd:48:84:ed:98:ca:b7:
6c:cf:4d:ad:5b:1a:3f:19:4f:0e:a5:b8:28:cc:bf:
5f:1b:ff:34:e2:f1:a1:1b:d4:83:53:a0:f8:4b:f7:
d3:cb:9f:0a:e4:74:4c:e3:4b:f7:71:67:bd:c8:10:
c9:d9:86:3f:86:2e:6d:0f:e6:40:8d:4a:c0:2a:b4:
55:2b:c3:62:0b:37:22:bf:28:53:70:52:9a:a0:e3:
a3:73:ef:63:fd:d3:04:45:c0:7e:3e:76:73:56:69:
c9:de:46:c8:21:a4:ee:63:da:79:bd:07:df:1d:4f:
43:a6:7e:2f:f0:25:bb:f8:97:6b:dd:a2:1e:6d:8b:
c2:aa:56:24:bf:9e:11:b6:4d:dd:50:4c:92:2c:2a:
9a:1e:90:cf:35:af:ce:eb:0d:bf:e8:d6:5a:d6:94:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:24:CE:C9:AF:FB:04:89:67:1B:F5:DF:DA:FD:83:F2:74:CB:1F:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/424E2018C1CA11EF96060C60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:16:65:c2:57:ee:19:68:48:da:bd:4e:38:2e:50:57:57:2b:
06:85:91:70:90:9b:c0:a8:7f:82:35:16:f7:db:dd:c7:24:7d:
9a:ac:51:d7:fa:d5:3c:35:0b:85:7b:51:81:fd:e2:91:de:90:
d3:1c:d3:64:45:34:b4:f7:7b:25:42:48:2d:7b:7f:86:53:28:
2b:07:03:b5:7f:5d:89:67:27:9e:0f:32:11:c3:23:80:d1:95:
d2:84:a0:5f:88:1c:ff:e2:7d:77:52:0b:4f:fa:4d:fc:77:18:
b1:86:b4:f8:74:a6:bc:53:c6:a9:33:86:a5:31:27:32:d7:b2:
4a:dc:46:75:ad:96:29:8d:89:2a:5b:9e:3c:df:71:db:2f:21:
db:b8:0c:80:97:d9:44:47:c3:2e:99:9a:ea:db:a0:2e:6f:4b:
57:e7:c1:f8:ee:9c:5c:6c:7d:9b:d7:04:9e:ef:70:59:c7:ba:
b0:1c:c4:d9:c5:e2:91:b7:f4:09:fe:65:0e:6b:bf:78:c1:5c:
71:0c:23:8e:30:29:b6:18:dc:aa:0a:8c:86:c8:f3:5c:75:bd:
aa:87:02:d1:84:55:cc:f7:23:65:4a:f7:5a:30:84:49:fc:aa:
e0:5f:aa:0b:ab:19:36:66:f8:e0:37:7a:b7:3e:e3:67:aa:ec:
33:c0:b7:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASJTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDczOTQ3WhcNMjUxMjEwMDczOTQ3WjAYMRYw
FAYDVQQDEw02NzZhNjU0Ny1jMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm3U8BIdLFbfPNWOlpgsqR2rcLdiFLVYHbUBvKcloL3YScWisjzaNtO2F
nFssns3SEKi+JkAQa0zBbUfXpUyQwIGFxeWbcU1IkINgKBW9SgRVYchKiUp35cbS
B40d+lewNL1IhO2Yyrdsz02tWxo/GU8OpbgozL9fG/804vGhG9SDU6D4S/fTy58K
5HRM40v3cWe9yBDJ2YY/hi5tD+ZAjUrAKrRVK8NiCzcivyhTcFKaoOOjc+9j/dME
RcB+PnZzVmnJ3kbIIaTuY9p5vQffHU9Dpn4v8CW7+Jdr3aIebYvCqlYkv54Rtk3d
UEySLCqaHpDPNa/O6w2/6NZa1pQuowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOok
zsmv+wSJZxv139r9g/J0yx+bMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MjRFMjAxOEMxQ0ExMUVGOTYwNjBDNjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsHJMA0GCSqGSIb3DQEB
CwUAA4IBAQBcFmXCV+4ZaEjavU44LlBXVysGhZFwkJvAqH+CNRb3293HJH2arFHX
+tU8NQuFe1GB/eKR3pDTHNNkRTS093slQkgte3+GUygrBwO1f12JZyeeDzIRwyOA
0ZXShKBfiBz/4n13UgtP+k38dxixhrT4dKa8U8apM4alMScy17JK3EZ1rZYpjYkq
W54833HbLyHbuAyAl9lER8MumZrq26Aub0tX58H47pxcbH2b1wSe73BZx7qwHMTZ
xeKRt/QJ/mUOa794wVxxDCOOMCm2GNyqCoyGyPNcdb2qhwLRhFXM9yNlSvdaMIRJ
/KrgX6oLqxk2ZvjgN3q3PuNnquwzwLd9
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:46 2025 by rpki-client