Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ACF1188C1B011EF87ED6CB9762E951A.roa
File: 1ACF1188C1B011EF87ED6CB9762E951A.roa (raw, json)
Hash identifier: KsydVwf1P6I1yIJL+YtzNMRS6CdF1bTnOI8agI9xG/c=
Subject key identifier: 4D:A5:17:E4:A9:33:9D:FF:E4:97:6E:E6:97:17:7C:15:93:7C:1B:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012169
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ACF1188C1B011EF87ED6CB9762E951A.roa
Signing time: Tue 24 Dec 2024 04:32:38 +0000
ROA not before: Tue 24 Dec 2024 04:32:34 +0000
ROA not after: Wed 10 Dec 2025 04:32:34 +0000
asID: 984
IP address blocks: 154.193.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74089 (0x12169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:32:34 2024 GMT
Not After : Dec 10 04:32:34 2025 GMT
Subject: CN=676a3966-7fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:02:1f:64:87:c2:85:53:6b:bf:a9:3f:af:
bd:df:ff:4e:79:32:94:4e:be:3b:3a:33:a9:d4:73:
9b:23:d1:4a:55:2a:5d:0b:ce:a1:76:c6:21:4e:12:
5b:da:09:b1:b0:b0:a5:92:4e:e3:6b:d9:7a:d5:8b:
33:0f:3a:d5:19:e9:68:6f:7e:57:ac:47:06:67:07:
f9:8b:51:cf:eb:26:52:92:eb:ad:87:9a:10:53:1c:
6d:44:82:ad:a5:c9:19:4b:c0:7f:b2:4b:57:bb:57:
74:8e:47:34:99:b6:c3:8d:af:bb:7a:59:4b:b9:02:
97:21:db:9d:94:fc:76:89:06:c6:34:c8:31:6b:2a:
4c:bd:bf:ca:e5:cc:02:ab:70:24:29:fa:27:86:cd:
29:07:c9:26:76:06:75:34:b7:02:01:df:5d:9d:16:
6a:7d:4b:41:22:49:15:85:f2:75:49:f7:74:cf:9f:
b3:d9:bf:02:83:30:a0:ca:b3:09:f2:b9:21:89:b1:
1f:62:cf:02:30:d4:6d:ed:08:b1:af:24:25:4e:ba:
7d:7c:3b:7d:f9:da:5d:4d:fb:11:a7:ef:b4:a9:8e:
d0:58:ba:8e:9c:2f:8f:73:7f:5e:ba:95:8b:e0:f4:
c8:cf:ae:0c:da:b6:d0:31:4d:54:9f:0c:98:83:10:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:17:E4:A9:33:9D:FF:E4:97:6E:E6:97:17:7C:15:93:7C:1B:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ACF1188C1B011EF87ED6CB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:cc:49:a7:93:0c:90:b0:1a:86:2e:e6:cb:83:6e:e7:33:18:
da:cb:7f:1c:ac:ce:8b:cd:6c:b8:a9:1e:59:6a:79:a2:ee:51:
6a:af:23:a7:66:c9:43:84:b6:de:74:16:8e:af:4c:8a:54:12:
bf:05:fa:06:7b:e0:12:38:cb:59:e0:1e:47:34:4d:9b:c6:52:
8b:2a:21:4e:1c:a9:bf:e6:34:4d:36:b7:0f:ba:bd:b3:44:39:
7f:55:e8:96:20:d4:3a:49:20:96:c2:75:ca:3b:8c:c1:f2:b0:
cd:5b:10:d9:9f:79:d1:70:f9:85:41:24:52:d3:12:94:a4:66:
b3:fc:00:40:e0:b5:c4:07:50:29:9f:98:c4:04:3e:1d:eb:ab:
9d:86:3d:2c:92:01:60:d3:64:6f:34:4c:11:78:d2:be:3c:87:
ac:dc:eb:94:82:c4:e2:d2:20:9f:f2:5c:34:9b:77:53:64:bd:
57:d5:4e:92:71:7b:44:9c:e1:ed:29:8e:26:d3:d8:8f:c0:1f:
af:57:c3:fb:fe:26:79:a1:24:18:40:66:ec:8c:da:44:a7:f6:
93:11:cb:05:ed:3a:ad:4d:12:a6:40:08:ad:2b:2d:65:e0:c6:
44:64:e3:28:d6:d8:64:96:33:db:54:1a:e3:bc:e0:31:27:ad:
34:45:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:48 2025 by rpki-client