Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177C88E0C1A011EFB3DAE050762E951A.roa
File: 177C88E0C1A011EFB3DAE050762E951A.roa (raw, json)
Hash identifier: cQESjlyGsegUToE+flxsFknA6/RvfOEkwnYA78wAID8=
Subject key identifier: B9:CF:06:89:6B:F9:90:74:68:86:E2:61:9D:68:41:46:49:9D:D3:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177C88E0C1A011EFB3DAE050762E951A.roa
Signing time: Tue 24 Dec 2024 02:38:00 +0000
ROA not before: Tue 24 Dec 2024 02:37:57 +0000
ROA not after: Wed 10 Dec 2025 02:37:57 +0000
asID: 984
IP address blocks: 154.90.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 10 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73895 (0x120a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:37:57 2024 GMT
Not After : Dec 10 02:37:57 2025 GMT
Subject: CN=676a1e88-b329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:46:b9:ee:ea:7e:0b:b3:58:cf:0f:87:4c:
a7:a0:32:c4:ce:e2:36:86:38:16:c8:c2:bc:31:cf:
68:93:cd:f2:c8:f0:2d:66:70:66:eb:7a:d3:1a:4d:
d0:c6:85:4a:5e:76:6f:a6:3e:86:3e:df:bc:20:61:
d2:b8:95:13:bb:ed:d3:7d:e1:09:fb:4d:38:ed:04:
7c:22:89:3f:f8:72:38:6d:c9:b0:61:16:9f:3d:93:
89:bb:ab:64:e0:a0:dc:6d:75:15:61:cf:e9:8e:e4:
69:a8:5f:e2:1d:77:bd:57:2f:38:4b:70:69:a6:71:
31:81:29:6b:fd:21:86:14:2c:e3:9f:71:2c:0c:f8:
85:f2:8f:18:f9:a2:3e:cd:67:de:f2:0a:fa:a0:45:
43:83:e0:0d:a7:64:c4:22:71:ba:d0:dd:4d:33:95:
a6:c4:14:d1:98:2f:9b:42:c8:25:e8:aa:a4:aa:c1:
b6:34:29:37:52:d0:99:1f:37:85:a7:ef:ad:75:96:
21:d9:e2:36:32:31:1d:6d:63:8b:30:34:66:cf:08:
d4:5a:44:c4:c8:52:7d:c0:a5:85:34:f7:97:b2:c5:
90:7a:1d:c3:ac:51:82:f1:38:9f:c5:c1:3f:3f:46:
3c:05:ec:aa:21:16:3e:d9:e9:d2:b3:02:da:0a:7e:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:06:89:6B:F9:90:74:68:86:E2:61:9D:68:41:46:49:9D:D3:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177C88E0C1A011EFB3DAE050762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7e:79:2b:74:fa:c0:00:3b:4b:e6:8b:0b:45:7b:d0:6d:12:
4c:ef:fc:c1:eb:e1:45:a8:79:5f:5f:27:e4:9c:ff:bc:6b:a5:
0f:9b:da:4a:a3:98:62:8f:c9:7d:0a:fa:72:16:d4:0d:19:cd:
ce:65:ec:6d:d8:a9:55:78:09:a2:f6:38:c8:8e:ab:42:b8:78:
0b:d6:0f:9d:ab:1d:b8:28:50:c4:58:00:f0:67:25:7e:1f:8e:
86:12:e7:52:b2:4d:d5:bb:29:2e:7b:77:e7:80:60:2d:02:ea:
8d:05:19:55:46:67:d6:98:13:e8:63:a2:65:ba:f3:41:6e:a2:
4a:ef:6d:79:76:8c:5d:b5:1b:df:0a:6e:40:3c:d7:88:af:d3:
90:dc:2a:17:46:df:d6:b8:18:49:2c:28:61:27:8b:87:83:7c:
50:a8:05:e6:85:a4:13:61:28:21:d6:7e:7e:62:a1:ea:25:53:
9e:e9:26:c4:f7:f9:f9:f1:7e:23:ca:ca:b6:40:54:3d:ff:21:
d6:d5:58:ee:ad:89:41:72:46:bc:bb:ca:8e:ca:82:60:b2:cc:
08:98:c5:e0:39:b5:47:ba:8f:ef:d1:4c:c4:ec:37:dc:8a:6f:
24:04:76:cf:8e:fd:a8:72:f9:1b:6a:65:70:62:b8:3a:2c:da:
df:1f:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:47:53 2025 by rpki-client