Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9728874C1AD11EF84EE91AC762E951A.roa
File: E9728874C1AD11EF84EE91AC762E951A.roa (raw, json)
Hash identifier: e45R7Bq3jAdHher4h8fvdIVrU5EDZqti/Z3jQIoLD7I=
Subject key identifier: 9B:3B:9C:1B:E8:1F:1D:22:8F:30:C3:E5:04:D7:95:B0:F1:58:1A:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01214F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9728874C1AD11EF84EE91AC762E951A.roa
Signing time: Tue 24 Dec 2024 04:16:56 +0000
ROA not before: Tue 24 Dec 2024 04:16:53 +0000
ROA not after: Wed 10 Dec 2025 04:16:53 +0000
asID: 984
IP address blocks: 154.193.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74063 (0x1214f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:16:53 2024 GMT
Not After : Dec 10 04:16:53 2025 GMT
Subject: CN=676a35b8-518a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:45:84:c2:28:f1:43:4a:76:cb:97:ba:4b:
eb:36:c4:6c:98:64:b0:53:e8:76:b1:49:87:27:94:
ae:e2:ce:7a:48:e2:f2:54:28:8e:70:98:6e:20:6a:
b2:ff:c8:d9:72:96:c4:6f:31:94:5e:ee:13:4b:b9:
e1:0c:69:e2:2e:a4:3a:1f:02:03:13:03:b8:f3:5d:
6f:5b:5e:2a:5d:4d:9a:1e:99:11:66:35:80:21:94:
b3:8e:2a:46:f7:08:11:e7:f4:73:9d:d5:9d:51:a3:
73:0a:f1:ea:bd:cd:47:db:42:54:44:28:11:b0:52:
d2:4c:f2:5b:25:76:2d:fc:73:a4:09:e6:42:57:30:
98:bd:d1:d3:59:04:13:f6:2c:b6:73:c1:6e:22:09:
60:a0:df:2a:36:4b:a7:8c:c9:72:62:b3:68:54:03:
ef:df:8c:31:51:ad:75:e7:88:af:5b:9a:32:40:f0:
78:00:55:6b:73:49:26:59:af:39:cf:eb:c9:2e:37:
af:a3:5f:b8:02:aa:b5:95:e5:c7:73:f3:d0:77:80:
d1:76:e7:b8:76:d3:57:00:d2:2c:e7:d2:a2:71:7a:
8b:3a:27:87:03:4c:03:2b:a2:67:ff:fe:24:75:3e:
0e:fd:63:ea:c6:34:29:87:91:22:79:93:51:cd:53:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3B:9C:1B:E8:1F:1D:22:8F:30:C3:E5:04:D7:95:B0:F1:58:1A:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9728874C1AD11EF84EE91AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f8:4c:e2:92:70:0d:cc:1c:12:da:41:e3:3c:e2:96:65:6b:
5a:af:a3:66:c0:19:0d:5c:2d:fa:73:35:79:de:51:c4:92:bf:
32:90:dc:8b:84:5c:6b:cc:fb:25:d8:92:84:ff:17:07:55:ea:
d5:74:cb:ad:91:c6:8d:90:4f:06:2b:41:98:22:9b:b3:14:62:
c2:5f:fd:f9:5e:a3:01:2d:16:f9:51:86:0e:d5:0a:a9:8d:2b:
89:6f:1d:ed:5f:0b:d4:86:02:a8:26:d7:57:0d:5f:14:ac:90:
9e:15:e8:e7:6f:b2:42:e5:06:91:65:ce:33:a2:b3:5e:2f:8f:
d0:86:46:ac:a3:5a:c7:2a:f8:c0:7f:a6:cd:52:2d:e9:78:42:
77:ec:ed:9c:20:cf:24:91:69:5d:6e:4c:c7:00:a3:cc:ef:39:
be:58:84:74:bc:f5:07:02:e9:2d:cb:2b:b6:00:29:3e:47:71:
fd:07:ee:98:65:0f:da:7f:5f:f9:b5:7a:32:af:3a:18:53:b1:
96:b2:d0:2c:2c:1c:97:38:6f:70:35:6c:fb:f8:c3:24:ba:34:
d6:b1:0e:d4:37:1b:ec:0f:5b:f4:c8:a0:ef:0e:33:db:ce:f2:
9c:31:2f:47:1b:cc:9f:40:81:af:f5:38:aa:14:04:66:e2:62:
51:2b:d7:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASFPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDQxNjUzWhcNMjUxMjEwMDQxNjUzWjAYMRYw
FAYDVQQDEw02NzZhMzViOC01MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4X5FhMIo8UNKdsuXukvrNsRsmGSwU+h2sUmHJ5Su4s56SOLyVCiOcJhu
IGqy/8jZcpbEbzGUXu4TS7nhDGniLqQ6HwIDEwO4811vW14qXU2aHpkRZjWAIZSz
jipG9wgR5/RzndWdUaNzCvHqvc1H20JURCgRsFLSTPJbJXYt/HOkCeZCVzCYvdHT
WQQT9iy2c8FuIglgoN8qNkunjMlyYrNoVAPv34wxUa1154ivW5oyQPB4AFVrc0km
Wa85z+vJLjevo1+4Aqq1leXHc/PQd4DRdue4dtNXANIs59KicXqLOieHA0wDK6Jn
//4kdT4O/WPqxjQph5EieZNRzVMkmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJs7
nBvoHx0ijzDD5QTXlbDxWBrxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOTcyODg3NEMxQUQxMUVGODRFRTkxQUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsFLMA0GCSqGSIb3DQEB
CwUAA4IBAQAh+EziknANzBwS2kHjPOKWZWtar6NmwBkNXC36czV53lHEkr8ykNyL
hFxrzPsl2JKE/xcHVerVdMutkcaNkE8GK0GYIpuzFGLCX/35XqMBLRb5UYYO1Qqp
jSuJbx3tXwvUhgKoJtdXDV8UrJCeFejnb7JC5QaRZc4zorNeL4/Qhkaso1rHKvjA
f6bNUi3peEJ37O2cIM8kkWldbkzHAKPM7zm+WIR0vPUHAuktyyu2ACk+R3H9B+6Y
ZQ/af1/5tXoyrzoYU7GWstAsLByXOG9wNWz7+MMkujTWsQ7UNxvsD1v0yKDvDjPb
zvKcMS9HG8yfQIGv9TiqFARm4mJRK9fM
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:50 2025 by rpki-client