Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/091790BCC25711EFB0E3EA59762E951A.roa
File: 091790BCC25711EFB0E3EA59762E951A.roa (raw, json)
Hash identifier: hMv3k02Ab4kulTibTh5aJOKIGMM7AC4czQ2WUeUgfdw=
Subject key identifier: 93:36:DE:FD:54:32:63:3E:5D:85:E0:2A:BA:90:30:04:80:E9:08:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01233D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/091790BCC25711EFB0E3EA59762E951A.roa
Signing time: Wed 25 Dec 2024 00:27:34 +0000
ROA not before: Wed 25 Dec 2024 00:00:31 +0000
ROA not after: Wed 10 Dec 2025 00:00:31 +0000
asID: 984
IP address blocks: 154.199.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74557 (0x1233d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:31 2024 GMT
Not After : Dec 10 00:00:31 2025 GMT
Subject: CN=676b5176-59fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:e0:57:61:c6:32:81:88:2b:78:55:a4:31:
29:32:c4:70:ee:49:3b:47:a2:a0:45:b6:45:ee:3d:
b1:1a:ae:f0:d5:b3:3e:f9:0c:e1:5b:7f:e0:31:40:
53:dc:14:2b:c2:ff:10:23:16:d4:81:d7:a7:88:19:
f4:fc:53:85:56:6b:ce:73:f9:c4:20:cd:92:06:83:
4a:03:c3:6e:ec:63:2a:7d:4a:fd:7e:66:be:36:ec:
b0:b9:b4:60:0a:73:36:e8:d0:e5:f8:54:4c:77:65:
81:29:20:d9:ea:2b:cf:35:38:c8:52:0f:b8:95:3c:
d9:65:64:e6:28:dd:f0:d1:77:c7:03:56:f0:87:0c:
c2:33:d6:37:3a:aa:7f:33:a1:ba:b5:ca:11:5f:3c:
cb:36:00:57:86:bb:4f:c7:4a:10:e0:be:2a:46:fa:
a1:63:7f:fc:96:50:93:0d:7a:95:62:ee:e9:09:31:
6a:2b:05:29:10:cd:4d:83:d2:98:42:84:17:a0:42:
af:b3:78:9b:5b:f9:62:dc:e6:80:85:ec:31:56:4f:
aa:6f:d3:e5:75:ec:82:27:ef:5a:47:8c:c1:ed:b0:
7a:02:a8:e3:29:e4:4a:c0:38:f4:d2:b1:d6:66:e9:
2a:fe:ef:88:7a:27:3d:81:c2:f6:cb:11:e9:79:d1:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:36:DE:FD:54:32:63:3E:5D:85:E0:2A:BA:90:30:04:80:E9:08:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/091790BCC25711EFB0E3EA59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.44.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:b2:78:bb:17:a5:b3:5a:1f:a4:bb:f4:d2:ba:16:2e:fb:ae:
6a:d8:90:99:d8:e9:bb:5b:3f:e4:25:f0:48:66:7c:de:1f:0e:
5a:12:cf:9f:bf:f3:67:c4:89:e6:12:86:79:9c:3e:d6:01:00:
80:b5:37:ff:55:9d:8c:82:fc:ee:a5:ff:99:02:b6:e5:b3:62:
9c:c2:8b:09:b9:ca:d9:91:85:ae:ed:01:bc:a5:d7:e1:4d:2d:
28:bc:7c:d5:56:74:82:50:2b:10:f7:84:ba:5e:9d:2e:02:24:
9a:c8:c6:ce:bf:78:b7:cb:db:03:91:d4:d5:e5:f8:85:75:f5:
df:2f:34:73:1c:6e:cd:52:2d:21:05:36:c7:57:b5:2a:0b:1f:
6f:24:75:be:01:57:13:5e:f2:3b:aa:d2:20:48:be:3d:32:b0:
28:ae:f7:0c:d9:a5:da:3e:91:43:67:0d:19:bf:ad:2d:cc:4e:
65:78:27:6b:a2:dc:fe:6b:e1:b6:15:ff:bf:c0:51:36:72:d7:
d6:4b:7e:89:41:93:9b:cd:cf:62:91:81:df:e9:73:95:d6:ef:
07:8a:1a:12:b8:d6:f1:f6:28:ca:08:7d:c6:12:12:bd:42:f7:
97:03:6b:f5:ea:26:e2:82:50:9a:7a:1e:ad:9c:98:6e:47:7e:
c0:30:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:51 2025 by rpki-client