Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C0EBD4CC19911EF9BC4709B762E951A.roa
File: 3C0EBD4CC19911EF9BC4709B762E951A.roa (raw, json)
Hash identifier: H4jD1DB8u+ldWwwacmM5VH6B8noBJ0fX4/3FM07VzN4=
Subject key identifier: AF:7C:8E:10:9F:C5:F2:E1:F9:49:44:E8:0A:57:67:E8:3D:60:85:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012053
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C0EBD4CC19911EF9BC4709B762E951A.roa
Signing time: Tue 24 Dec 2024 01:48:55 +0000
ROA not before: Tue 24 Dec 2024 01:48:52 +0000
ROA not after: Wed 10 Dec 2025 01:48:52 +0000
asID: 984
IP address blocks: 154.90.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73811 (0x12053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:48:52 2024 GMT
Not After : Dec 10 01:48:52 2025 GMT
Subject: CN=676a1307-d2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:b0:db:04:39:04:9a:88:af:74:9a:17:be:
5c:ab:65:02:b1:09:b6:af:c6:b2:b5:34:e3:d2:08:
bd:7d:79:7c:8d:cc:36:1f:56:da:e8:f5:c8:6d:60:
cf:0f:e0:f5:a3:90:ce:84:6f:44:2e:fa:0e:12:10:
49:74:44:8c:8d:ef:5d:d5:0d:e4:fb:7e:b4:e1:99:
d6:c1:84:fc:8e:c8:99:a0:2c:52:e3:09:10:cf:7e:
29:15:96:b2:be:9c:de:af:6c:45:66:44:33:e7:09:
fb:9b:6d:7b:b8:33:2b:b8:72:da:3f:58:bd:e7:61:
55:12:ce:0d:b7:a1:f7:bb:7b:0d:73:8d:71:82:f2:
12:63:f4:18:f1:8c:40:78:a2:8e:00:66:30:00:85:
3c:f3:f6:3c:a5:a9:34:52:ca:81:e6:1c:01:2b:c9:
0c:98:a3:42:40:14:e0:33:31:41:31:27:8d:be:d1:
32:b0:45:a7:9a:00:ee:f9:bc:f0:89:6a:7e:77:43:
e5:91:c0:78:6e:fb:9f:fd:d9:a9:10:76:ac:8f:87:
3f:1b:2d:44:12:f9:c1:94:2c:da:74:c3:2b:37:4e:
75:6b:e1:6b:f6:72:a2:c3:3a:5a:f6:53:26:3d:46:
31:79:c4:2d:b3:37:86:ea:40:8d:95:00:6f:17:40:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7C:8E:10:9F:C5:F2:E1:F9:49:44:E8:0A:57:67:E8:3D:60:85:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C0EBD4CC19911EF9BC4709B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.197.0/24
Signature Algorithm: sha256WithRSAEncryption
55:30:1c:be:f0:98:fd:7b:e0:3c:8b:30:2c:e8:29:24:6a:e3:
7b:aa:eb:b8:5a:6f:ab:d2:28:65:b4:09:e8:25:ab:98:33:1e:
47:b8:2f:26:3b:93:11:83:fb:60:8b:7f:b5:a8:63:54:7d:af:
56:b9:3e:06:0c:19:5c:ab:64:26:b0:b5:f0:c4:36:8a:2a:f9:
f2:39:00:5c:3c:70:08:f7:7c:43:7c:0a:f1:68:3b:ff:b7:74:
52:b2:e1:d2:c2:90:97:55:e3:ef:72:78:dd:25:22:3e:be:4c:
a5:49:a4:e1:33:a2:4e:02:ac:9b:50:a0:e7:0e:86:da:03:3d:
28:7e:a0:0b:18:d7:75:e2:8a:15:c9:52:0b:1c:43:c4:fa:43:
5b:6c:ba:a6:38:34:8a:f0:77:70:99:23:06:fd:bb:ee:6d:b1:
09:9a:d0:76:9e:3a:45:7c:c0:70:f6:f3:5f:05:90:e9:31:6f:
9f:0b:60:29:94:9d:f0:ae:23:77:a2:51:f7:7e:a1:97:d0:6d:
e4:a9:50:8d:24:95:26:91:de:14:f4:a7:e3:f0:a3:c3:98:58:
6a:27:82:f3:14:e7:c0:c4:bc:83:c0:6d:0e:7f:70:c7:1d:bd:
49:4a:29:e6:ad:bd:46:9e:bf:02:22:33:0a:1f:f3:63:f4:a0:
f3:39:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:47 2025 by rpki-client