Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/056A6A06C19511EF99FD4B7D762E951A.roa
File: 056A6A06C19511EF99FD4B7D762E951A.roa (raw, json)
Hash identifier: zVGd54aAOLbV2KjgZDOVAfk/6Ca0owlfAPKDHtFZryI=
Subject key identifier: 86:05:B6:9B:00:71:D7:FF:B8:BF:ED:AF:0C:F3:D4:D8:E7:FB:9C:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01201F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/056A6A06C19511EF99FD4B7D762E951A.roa
Signing time: Tue 24 Dec 2024 01:18:46 +0000
ROA not before: Tue 24 Dec 2024 01:18:42 +0000
ROA not after: Wed 10 Dec 2025 01:18:42 +0000
asID: 984
IP address blocks: 154.90.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73759 (0x1201f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:18:42 2024 GMT
Not After : Dec 10 01:18:42 2025 GMT
Subject: CN=676a0bf6-73f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:ea:61:3c:b6:f7:a2:19:99:18:01:14:9a:
88:df:9f:f9:6c:70:83:fa:8b:0d:55:40:7b:9b:99:
81:2e:5e:e4:a9:a7:53:e2:d2:93:a0:c4:71:0e:54:
8c:57:e0:16:7b:e2:12:60:b0:56:42:8e:b4:f8:1a:
14:3b:00:21:ce:21:fb:5e:eb:cc:0d:9f:cd:84:c6:
e5:90:cc:a9:97:e7:bb:24:fd:3d:26:3b:a9:04:e5:
23:4e:1e:83:0c:7a:b2:b5:0f:5a:e9:95:93:88:ba:
47:f5:94:78:9b:6a:6d:ae:cf:1d:21:be:cc:07:fb:
6f:b7:ef:0c:90:8f:a2:cb:65:50:38:21:43:20:a5:
2b:1b:3c:97:cd:f3:6d:20:db:00:79:37:d2:29:b4:
2e:6b:4e:5e:8d:9c:fd:ed:16:a7:04:f5:9c:9e:87:
b8:b2:22:0c:e8:21:56:6e:7e:f2:66:18:84:66:f2:
fe:7a:27:23:01:79:25:14:89:91:20:fc:7f:a5:67:
81:ac:92:e0:73:18:d6:46:e3:48:42:2f:8d:77:31:
84:78:e7:71:98:9a:60:54:89:0a:2c:7b:ae:88:a7:
ac:18:78:fb:58:5f:2a:64:60:dd:90:c2:d0:88:2e:
00:58:9c:89:69:ee:33:c3:60:03:e1:66:ff:ec:87:
ba:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:05:B6:9B:00:71:D7:FF:B8:BF:ED:AF:0C:F3:D4:D8:E7:FB:9C:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/056A6A06C19511EF99FD4B7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.167.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1c:ff:42:3e:72:38:14:bf:7f:a4:fb:7a:ed:cc:48:0e:35:
d0:6d:2f:38:ae:2a:31:bb:de:f8:d9:28:b9:02:d2:9d:a9:2c:
09:f4:a8:cf:96:f3:05:e4:24:cc:32:d1:c8:bb:2e:51:ae:0d:
7e:54:fa:4b:80:94:c2:36:9b:b4:91:ec:9c:20:1a:8d:76:fb:
2d:5c:5e:69:98:2b:e5:ab:ff:03:bb:3e:85:13:ed:04:f7:3a:
25:a2:09:6b:c4:41:fb:42:77:32:44:5c:6d:d2:bd:32:3e:61:
65:44:76:f8:90:8f:94:4d:69:38:37:ba:b9:ed:4e:6b:0d:54:
cd:e4:84:99:50:6a:e1:24:15:87:da:69:da:69:04:61:90:0a:
0c:9e:eb:37:63:4f:93:a1:65:95:39:b2:b5:c9:8a:4a:1a:73:
79:b3:d6:23:67:e2:eb:82:58:4b:d3:d6:4d:32:17:cd:e7:b2:
ee:71:ae:b1:7d:d2:04:2c:0b:b7:c3:3c:3c:7a:55:6a:52:f3:
0d:69:9a:b6:07:3f:3c:0d:35:aa:03:e6:a8:cd:94:5b:1a:65:
0f:0b:d6:7c:c9:20:d1:8e:97:78:9f:11:5e:ff:c2:1f:3c:79:
b0:fe:c0:15:49:2a:79:7e:e1:18:bf:05:55:23:7c:54:a2:c3:
ed:a7:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:08:03 2025 by rpki-client