Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74AD9330C1CB11EF951EB866762E951A.roa
File: 74AD9330C1CB11EF951EB866762E951A.roa (raw, json)
Hash identifier: JsPvyh8pkLzJYOf42GiEfBb+czux2z96cQcy28MPXaE=
Subject key identifier: EC:2A:5B:03:90:02:D0:4F:DD:8F:92:0A:18:04:F3:14:D1:AB:97:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012261
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74AD9330C1CB11EF951EB866762E951A.roa
Signing time: Tue 24 Dec 2024 07:48:25 +0000
ROA not before: Tue 24 Dec 2024 07:48:21 +0000
ROA not after: Wed 10 Dec 2025 07:48:21 +0000
asID: 984
IP address blocks: 154.193.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74337 (0x12261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:48:21 2024 GMT
Not After : Dec 10 07:48:21 2025 GMT
Subject: CN=676a6749-9996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8c:ff:b0:46:3e:11:58:76:e7:f3:5d:f9:0a:
1f:b0:29:ae:72:60:96:c5:5c:ba:ba:39:84:7d:f4:
df:0d:ab:8d:04:f5:ef:1b:d4:cd:00:f6:97:d1:d6:
83:5f:0d:12:fc:d4:25:c6:ea:11:71:78:1d:90:b1:
d1:69:b2:f0:f9:46:81:19:d7:c8:8f:f5:03:01:72:
70:ee:eb:ed:47:71:1e:74:53:71:79:26:f3:a7:97:
3e:d1:0a:72:97:ae:8c:2b:9b:39:68:60:9f:18:16:
2e:4d:59:1c:52:53:14:44:ff:65:43:aa:66:06:1e:
83:f0:0d:5b:86:74:88:4f:70:00:f7:91:0a:1d:9c:
c1:bd:59:16:42:8d:4b:68:e3:49:55:c7:1b:48:03:
04:d0:ec:9c:b7:ba:83:54:99:a4:cd:d3:d1:59:77:
fe:aa:2b:11:36:d7:59:56:43:83:57:02:2c:0e:db:
09:b0:f6:9a:88:d2:78:73:e3:14:4c:72:f2:60:8d:
e7:52:cd:b1:87:c7:6b:78:bd:c4:61:45:5e:4c:0f:
4f:51:af:13:12:1b:fd:b5:df:4a:51:28:6d:51:b7:
84:4a:3d:43:d3:4f:bc:19:8c:c6:3b:84:04:58:9f:
5c:5a:61:34:75:13:24:d1:80:11:18:b3:bc:11:ad:
d4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:5B:03:90:02:D0:4F:DD:8F:92:0A:18:04:F3:14:D1:AB:97:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74AD9330C1CB11EF951EB866762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a2:02:0c:cb:24:96:71:d7:31:6e:14:57:f6:16:42:7b:7b:
c0:34:06:2b:e2:71:6e:8a:cf:d1:09:b1:01:87:d8:f0:21:3c:
b9:94:e3:c2:d3:57:d9:34:3a:bd:40:fc:73:bc:fd:0b:92:33:
37:eb:ab:06:a6:4c:6a:2c:8b:2b:1f:e7:4e:ec:c8:6f:91:dd:
00:c0:1c:1a:2e:5f:5c:81:88:45:18:17:70:74:3b:8d:0b:81:
cf:5b:12:01:62:07:77:43:1c:04:44:f8:95:39:4f:4d:ab:af:
d4:44:ce:40:b0:de:66:6b:62:d2:20:60:c3:a7:05:73:f7:8a:
62:03:6e:d3:a5:39:1f:da:89:63:e3:b0:6b:11:18:95:2c:01:
8e:c1:43:9c:e4:b5:dc:d0:68:ef:f5:18:fe:e7:38:59:2d:35:
4e:db:1a:96:03:4f:b5:6c:23:90:df:69:83:4f:a2:8d:d4:23:
30:6e:ee:8e:16:b7:f8:63:7b:c1:18:c8:48:ab:cf:4e:7a:60:
aa:9d:df:18:23:0e:3e:3d:be:f1:27:3f:df:60:5d:b5:e9:01:
5f:6c:57:66:8c:3f:bc:3a:c6:ea:8a:94:ab:81:64:d5:d6:a3:
a5:62:c5:f2:3b:c8:40:95:c8:16:d5:0b:ec:b3:cd:9c:82:40:
a1:9c:9d:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASJhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDc0ODIxWhcNMjUxMjEwMDc0ODIxWjAYMRYw
FAYDVQQDEw02NzZhNjc0OS05OTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4oz/sEY+EVh25/Nd+QofsCmucmCWxVy6ujmEffTfDauNBPXvG9TNAPaX
0daDXw0S/NQlxuoRcXgdkLHRabLw+UaBGdfIj/UDAXJw7uvtR3EedFNxeSbzp5c+
0Qpyl66MK5s5aGCfGBYuTVkcUlMURP9lQ6pmBh6D8A1bhnSIT3AA95EKHZzBvVkW
Qo1LaONJVccbSAME0Oyct7qDVJmkzdPRWXf+qisRNtdZVkODVwIsDtsJsPaaiNJ4
c+MUTHLyYI3nUs2xh8dreL3EYUVeTA9PUa8TEhv9td9KUShtUbeESj1D00+8GYzG
O4QEWJ9cWmE0dRMk0YARGLO8Ea3U8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOwq
WwOQAtBP3Y+SChgE8xTRq5c4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NEFEOTMzMEMxQ0IxMUVGOTUxRUI4NjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsHQMA0GCSqGSIb3DQEB
CwUAA4IBAQBsogIMyySWcdcxbhRX9hZCe3vANAYr4nFuis/RCbEBh9jwITy5lOPC
01fZNDq9QPxzvP0LkjM366sGpkxqLIsrH+dO7Mhvkd0AwBwaLl9cgYhFGBdwdDuN
C4HPWxIBYgd3QxwERPiVOU9Nq6/URM5AsN5ma2LSIGDDpwVz94piA27TpTkf2olj
47BrERiVLAGOwUOc5LXc0Gjv9Rj+5zhZLTVO2xqWA0+1bCOQ32mDT6KN1CMwbu6O
Frf4Y3vBGMhIq89OemCqnd8YIw4+Pb7xJz/fYF216QFfbFdmjD+8OsbqipSrgWTV
1qOlYsXyO8hAlcgW1Qvss82cgkChnJ2o
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:53 2025 by rpki-client