Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/327AB53EC19311EF8C1D8A70762E951A.roa
File: 327AB53EC19311EF8C1D8A70762E951A.roa (raw, json)
Hash identifier: dxsUfyJlxkHE2ncAbsOlSCUR8NE1YK4vpipFIAt9Ouk=
Subject key identifier: 93:AB:3B:0D:F1:F0:31:AF:24:19:93:85:4B:7A:03:93:BE:E0:EC:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012009
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/327AB53EC19311EF8C1D8A70762E951A.roa
Signing time: Tue 24 Dec 2024 01:05:42 +0000
ROA not before: Tue 24 Dec 2024 01:05:39 +0000
ROA not after: Wed 10 Dec 2025 01:05:39 +0000
asID: 984
IP address blocks: 154.90.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73737 (0x12009)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:05:39 2024 GMT
Not After : Dec 10 01:05:39 2025 GMT
Subject: CN=676a08e6-cabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c3:73:d0:4f:66:6d:83:e5:6d:00:e0:81:e3:
b8:24:7c:ca:d1:5b:1e:e2:38:35:82:02:0c:ba:92:
68:41:d9:85:be:e1:38:c7:d9:8d:6d:c2:c7:5f:8f:
20:da:dc:47:ea:e6:b5:db:eb:2f:66:49:e8:f0:71:
6b:9a:8a:55:5f:d9:e5:7e:a2:62:74:cd:89:5b:d2:
22:d9:05:ed:95:17:bb:50:76:e7:5f:41:0a:c7:cf:
17:85:82:ae:66:c9:60:fa:88:1a:33:45:e1:16:b4:
7e:fb:56:be:29:13:5f:20:3a:19:bb:a7:27:93:25:
7e:b8:9d:53:ee:0b:60:d4:bc:61:cb:1f:af:b7:10:
27:14:5f:46:f5:0f:dc:b0:73:8f:ac:dd:61:23:9c:
ad:e7:34:90:ff:9b:55:ea:07:19:6c:2d:a2:cb:b9:
06:f6:d9:cf:b1:40:13:3b:60:94:d1:3b:f1:72:e7:
f2:a5:74:8d:37:21:8a:b6:64:82:18:d0:af:f7:af:
f1:ae:a2:3b:0f:7f:35:7f:eb:d4:a5:6f:88:a7:d7:
df:e0:ad:eb:89:31:61:75:dc:85:50:e3:ca:c3:6a:
c2:2e:0f:d5:ed:d7:07:ed:d8:16:01:f7:6e:24:4b:
04:ca:33:77:86:57:c7:52:64:36:a1:47:7a:0d:b4:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AB:3B:0D:F1:F0:31:AF:24:19:93:85:4B:7A:03:93:BE:E0:EC:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/327AB53EC19311EF8C1D8A70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:51:2c:f2:ee:ba:d5:fe:e6:fb:b8:e3:b7:cb:34:19:6a:b2:
a6:3a:03:41:a6:70:cc:f5:11:12:bf:64:90:34:40:9f:01:20:
b3:1b:dc:8e:18:69:f5:fc:c7:ef:99:f2:55:29:c1:a3:8f:66:
ce:76:60:c6:89:1e:e5:d8:5a:af:25:3e:4d:53:4a:a4:f0:ed:
4b:ca:e7:c1:43:ed:f9:d7:05:3a:d7:ba:d8:be:69:f0:8f:9b:
e8:35:77:5f:47:78:da:17:03:58:f2:f6:e3:08:96:5c:9c:6f:
4a:d6:a4:bc:d7:59:ca:3f:85:0b:e7:70:85:6a:a3:5e:c1:de:
88:91:d9:9d:68:ee:1d:9b:b4:31:3d:27:98:c6:fa:23:23:a9:
a5:f8:62:31:19:13:76:7f:a6:60:66:08:28:a3:ae:64:d7:40:
0b:46:d3:14:02:1e:84:6d:51:7d:9d:71:31:8e:68:63:63:da:
07:1a:dc:3e:38:b3:cf:26:83:72:25:05:f3:81:01:c3:ea:68:
cd:63:40:69:32:bd:ad:de:5b:a8:96:b0:0a:22:4b:02:06:fc:
a9:47:a1:03:a0:d8:18:44:90:6b:fa:58:f1:58:db:5f:7f:cc:
0b:db:0b:02:05:28:2f:77:0b:ba:ce:0d:d6:f2:4a:5a:87:ab:
ac:62:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:47:45 2025 by rpki-client