Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC74CB522FD311F08C6E8EF5DAE4EC9C.roa
File: DC74CB522FD311F08C6E8EF5DAE4EC9C.roa (raw, json)
Hash identifier: UoNVLVAO5aB/pEyOzWJXldEHn/6XtrLCrgmCn6G4NO4=
Subject key identifier: E0:22:33:09:FF:D8:10:2F:89:AF:24:23:50:E7:1C:00:DF:B0:61:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01804E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC74CB522FD311F08C6E8EF5DAE4EC9C.roa
Signing time: Tue 13 May 2025 08:25:43 +0000
ROA not before: Tue 13 May 2025 08:25:38 +0000
ROA not after: Wed 13 May 2026 08:25:38 +0000
asID: 41095
IP address blocks: 154.205.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98382 (0x1804e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 08:25:38 2025 GMT
Not After : May 13 08:25:38 2026 GMT
Subject: CN=68230207-e4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:9c:35:e3:58:a0:b3:81:41:7b:b1:2c:ef:
30:10:01:06:34:16:51:5c:4d:b1:86:ba:32:f1:34:
df:4b:59:ec:53:77:37:98:20:e6:d0:e1:52:b3:4d:
15:5e:47:7e:7e:cb:17:3a:7b:d9:32:f3:82:61:e8:
4b:dc:5c:1b:8c:09:40:fe:5d:82:9e:0b:c6:5a:41:
5e:a5:ba:0b:f3:63:0a:6a:3a:b1:4a:54:e2:9a:f0:
2a:73:35:4a:55:80:f5:12:29:d7:26:df:25:5d:05:
36:0c:70:76:88:84:a8:17:04:d4:5f:91:16:15:0a:
b6:0e:8b:c8:b0:46:05:98:c5:01:f3:ae:5d:b1:82:
55:48:f7:d3:dd:94:ee:1e:28:fd:9d:ae:7e:36:7e:
60:bd:f2:ca:97:e8:90:60:f8:29:f0:53:7a:53:6b:
a8:c8:ae:1a:cc:73:a8:19:50:6e:a3:80:de:fe:81:
a6:df:48:b1:e1:32:0c:40:41:6c:20:d6:42:36:23:
1c:b7:d0:7b:94:65:67:f4:e1:36:b1:c7:4a:8f:3f:
9e:a4:f3:06:40:44:0f:c0:7f:11:ea:6d:12:1b:ea:
79:fc:2e:5e:c2:04:e4:27:d9:ee:40:c3:75:14:d5:
30:41:cc:b0:01:7f:c3:05:e1:ee:ac:a1:bb:fb:a9:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:22:33:09:FF:D8:10:2F:89:AF:24:23:50:E7:1C:00:DF:B0:61:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC74CB522FD311F08C6E8EF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.0.0/23
Signature Algorithm: sha256WithRSAEncryption
48:99:65:e1:5c:15:ef:2d:0f:44:cb:bf:40:09:8f:bd:5d:3a:
fb:88:be:97:85:c5:41:d7:d4:2e:7a:ed:52:0e:5e:b9:60:d0:
60:76:fa:08:67:de:83:b2:97:ed:bb:28:98:ac:7c:80:a8:d5:
32:af:6b:71:06:61:a4:02:64:33:50:a2:83:ee:dc:b4:64:43:
93:c0:61:f7:7d:a6:a2:09:27:99:68:d4:ec:0e:6e:09:5a:2a:
68:b4:96:45:ea:cc:c6:cf:e9:b1:89:71:8d:36:67:13:53:1d:
50:35:b3:aa:4d:ee:cb:ed:fc:cd:86:40:9c:43:10:94:01:4f:
35:e3:60:95:05:80:6d:35:c8:d4:ac:b0:0a:8e:71:e4:e0:6f:
2a:df:14:46:f1:f3:30:ae:5d:69:57:91:a0:c8:89:c6:d7:9d:
9f:df:99:fb:2c:2a:e3:74:c5:64:63:06:3a:41:3a:7f:2e:85:
33:e3:e9:0a:74:1b:45:d4:6f:a7:05:64:b1:e1:58:28:df:54:
10:8e:08:e8:5f:9b:dc:86:69:f1:ac:3f:66:00:13:df:1e:38:
b6:12:4a:09:e3:90:38:eb:8a:9f:97:b0:12:4b:35:c4:4e:df:
60:d3:58:f0:58:4d:60:06:04:1d:15:9c:f4:49:29:69:90:99:
de:2b:cc:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYBOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTEzMDgyNTM4WhcNMjYwNTEzMDgyNTM4WjAYMRYw
FAYDVQQDEw02ODIzMDIwNy1lNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoJycNeNYoLOBQXuxLO8wEAEGNBZRXE2xhroy8TTfS1nsU3c3mCDm0OFS
s00VXkd+fssXOnvZMvOCYehL3FwbjAlA/l2CngvGWkFepboL82MKajqxSlTimvAq
czVKVYD1EinXJt8lXQU2DHB2iISoFwTUX5EWFQq2DovIsEYFmMUB865dsYJVSPfT
3ZTuHij9na5+Nn5gvfLKl+iQYPgp8FN6U2uoyK4azHOoGVBuo4De/oGm30ix4TIM
QEFsINZCNiMct9B7lGVn9OE2scdKjz+epPMGQEQPwH8R6m0SG+p5/C5ewgTkJ9nu
QMN1FNUwQcywAX/DBeHurKG7+6m1iwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOAi
Mwn/2BAvia8kI1DnHADfsGFnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQzc0Q0I1MjJGRDMxMUYwOEM2RThFRjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms0AMA0GCSqGSIb3DQEB
CwUAA4IBAQBImWXhXBXvLQ9Ey79ACY+9XTr7iL6XhcVB19Queu1SDl65YNBgdvoI
Z96DspftuyiYrHyAqNUyr2txBmGkAmQzUKKD7ty0ZEOTwGH3faaiCSeZaNTsDm4J
WipotJZF6szGz+mxiXGNNmcTUx1QNbOqTe7L7fzNhkCcQxCUAU8142CVBYBtNcjU
rLAKjnHk4G8q3xRG8fMwrl1pV5GgyInG152f35n7LCrjdMVkYwY6QTp/LoUz4+kK
dBtF1G+nBWSx4Vgo31QQjgjoX5vchmnxrD9mABPfHji2EkoJ45A464qfl7ASSzXE
Tt9g01jwWE1gBgQdFZz0SSlpkJneK8yO
-----END CERTIFICATE-----
Generated at Thu May 15 23:45:04 2025 by rpki-client