Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2021C528C0EC11EF986ED766762E951A.roa
File: 2021C528C0EC11EF986ED766762E951A.roa (raw, json)
Hash identifier: d0UGNfz4k9zUUC/27r441ZxAS2b3Qq096FiZVFSV8lI=
Subject key identifier: 49:CB:35:4D:84:C2:65:49:E6:9E:A6:10:11:D8:A0:93:AB:02:45:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2021C528C0EC11EF986ED766762E951A.roa
Signing time: Mon 23 Dec 2024 05:09:46 +0000
ROA not before: Mon 23 Dec 2024 05:09:42 +0000
ROA not after: Wed 10 Dec 2025 05:09:42 +0000
asID: 984
IP address blocks: 154.90.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73514 (0x11f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:09:42 2024 GMT
Not After : Dec 10 05:09:42 2025 GMT
Subject: CN=6768f099-4839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:6a:78:7f:96:9d:81:e8:fc:62:6e:9d:74:
93:e0:f1:ad:0e:1a:53:37:a2:9b:40:e7:46:0b:7c:
42:ee:43:16:03:25:8c:aa:22:87:d0:44:57:a6:08:
30:c5:aa:b4:61:1b:19:4b:31:57:98:12:f8:53:f5:
f0:8f:82:a3:24:4d:a7:b9:89:70:d3:5c:dd:2e:e7:
c0:94:d2:e5:e4:1e:a5:a9:fd:1f:64:21:24:76:77:
7a:4d:62:a0:c7:1b:57:7a:48:01:71:3d:6b:d0:68:
ff:43:73:f8:09:a0:31:9c:4a:1e:49:4e:38:95:79:
63:3a:24:5f:70:8b:72:4c:44:e9:24:d4:60:4d:c7:
07:4a:30:e3:51:d7:d5:4c:99:9f:f0:5b:ce:a7:e5:
90:c8:f0:03:15:14:c2:f2:78:2a:b8:e6:4e:6d:14:
93:81:ea:86:0b:d3:63:39:36:73:fc:fd:84:67:c3:
07:6b:62:b3:9e:2f:6a:c8:44:07:ec:bc:0d:d5:2b:
b6:46:d6:11:08:2f:fc:a3:d1:bb:46:6c:17:af:ed:
d9:42:79:99:f4:26:89:cf:8c:d1:9b:c3:df:6d:17:
18:66:18:e2:9d:08:27:81:ad:79:f9:bc:01:18:19:
ec:26:9e:71:2c:91:56:5d:25:2c:90:80:76:d9:d1:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CB:35:4D:84:C2:65:49:E6:9E:A6:10:11:D8:A0:93:AB:02:45:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2021C528C0EC11EF986ED766762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.75.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4b:98:21:10:7d:89:bb:1c:3a:80:29:33:11:0f:86:f2:87:
43:01:1e:2a:48:a1:04:04:f7:b6:fa:c9:3d:95:fa:6d:de:50:
d4:57:22:6b:0a:6b:41:1d:80:3f:1b:b9:69:e7:ae:20:28:ed:
17:96:a5:9d:63:3a:e5:12:a4:fa:26:57:5b:15:96:d4:ad:ef:
f7:6a:65:6c:91:d7:c3:48:a4:da:15:8b:9d:06:6a:bd:78:e9:
8e:3a:d5:72:3c:24:82:de:43:01:49:3c:28:c6:cf:62:0c:a1:
f7:6c:b0:b2:1b:58:ca:6b:31:aa:e7:2b:d5:33:ea:57:05:d0:
59:81:12:90:2d:7f:da:1c:bd:2f:57:67:b6:a3:9b:cf:07:db:
e3:a8:7a:13:de:05:ee:33:fe:03:05:a0:0a:b4:6a:a1:aa:57:
0e:6b:48:0f:ae:a9:93:86:7d:90:c3:5e:a1:66:eb:51:de:04:
ca:79:19:49:dc:24:07:9a:19:5e:78:d0:d1:74:f6:cd:5e:b2:
47:c3:0c:eb:ae:1b:d2:29:af:ed:de:35:95:d3:e3:ca:25:7c:
99:f1:5b:a6:8f:c3:5f:4f:86:28:13:a6:3d:e3:a2:00:ae:ee:
3d:89:b4:ad:7b:c0:dd:74:8a:eb:5e:36:cd:f5:0b:5a:04:0c:
46:09:11:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:12 2025 by rpki-client