Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4396ED7CC19F11EFB6F5D249762E951A.roa
File: 4396ED7CC19F11EFB6F5D249762E951A.roa (raw, json)
Hash identifier: 3tEBtuvB7p2mmlq5saOKtnQvWEjlANe662uP5lTPojU=
Subject key identifier: 85:4A:83:F7:05:EA:CC:2B:5E:E7:B9:B7:14:EA:05:96:80:1F:71:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01209D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4396ED7CC19F11EFB6F5D249762E951A.roa
Signing time: Tue 24 Dec 2024 02:32:05 +0000
ROA not before: Tue 24 Dec 2024 02:32:01 +0000
ROA not after: Wed 10 Dec 2025 02:32:01 +0000
asID: 984
IP address blocks: 154.90.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73885 (0x1209d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:32:01 2024 GMT
Not After : Dec 10 02:32:01 2025 GMT
Subject: CN=676a1d25-7948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:a4:cf:f6:71:1e:a4:b9:0d:a6:c6:3d:a4:
45:29:64:58:94:81:a4:ba:da:db:b0:76:66:f0:df:
ff:99:a4:23:be:a2:bb:29:c5:ed:49:90:a0:2d:06:
b4:d1:3e:a5:50:4e:5a:65:9a:c2:b9:15:97:72:d0:
16:0d:4e:53:17:ed:aa:6c:01:b1:91:b7:93:38:be:
54:77:7d:e5:5c:de:d8:83:ce:bb:5f:fa:ee:ea:ac:
ec:bf:b8:0d:6e:e4:9e:b0:3c:46:7a:51:ae:90:9a:
3c:e5:64:50:34:ec:d4:1d:3b:8e:b0:59:a9:08:5b:
63:85:8e:07:b5:fb:4f:63:03:54:4b:49:3f:ed:c1:
35:6c:7f:5f:04:77:7f:80:66:7f:5e:77:80:f7:24:
27:ed:e8:77:ba:63:78:31:b6:d8:92:37:d6:29:88:
44:29:1d:b8:a0:18:f1:99:47:44:c2:7c:ad:9a:75:
07:59:ba:f1:5d:c3:af:13:b7:c6:3c:54:1e:fb:0e:
ad:32:8e:f9:e3:3c:6a:b8:84:76:68:0d:06:2a:87:
d7:91:be:8b:e1:cd:56:26:86:7a:4a:bb:a9:f6:ec:
3c:41:10:d1:21:2c:20:cf:fd:2e:63:16:93:41:72:
3b:f1:2d:1f:a4:e3:0e:80:71:9c:49:34:b6:16:e2:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4A:83:F7:05:EA:CC:2B:5E:E7:B9:B7:14:EA:05:96:80:1F:71:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4396ED7CC19F11EFB6F5D249762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.234.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9e:9d:91:ff:bc:d4:da:76:bc:33:2e:bb:0f:19:e0:34:8e:
d0:5b:25:ba:1a:64:e5:5a:70:9f:45:43:af:76:b1:0f:b2:af:
ee:a1:61:56:74:c6:2d:2e:1e:bf:e6:40:7e:34:ff:73:be:96:
88:d4:96:ba:f8:45:5c:d8:21:a4:b1:6e:8b:23:34:8b:14:fb:
bb:19:9c:5c:4b:49:be:13:a0:b8:9a:9a:90:ee:d4:d9:ac:cf:
54:c4:1e:ab:e6:a0:cc:af:61:ae:f2:10:35:fd:be:d5:0a:97:
3c:d6:75:43:c7:ef:46:42:52:f7:97:25:ca:fe:fc:66:e7:52:
2d:93:a3:16:6d:d4:15:10:88:f1:18:c0:68:82:e8:78:ed:b9:
3b:4d:ae:26:8f:ff:86:10:3e:b3:30:4d:96:43:35:fd:7f:37:
4d:61:b9:92:83:39:bd:7f:32:bf:9e:3c:4c:02:12:de:bd:04:
86:6f:b4:eb:5f:ae:b7:08:05:17:a6:81:8b:58:fd:1e:ef:b1:
14:4d:cc:cc:e2:89:93:ec:8b:59:03:34:5a:bc:00:25:05:67:
0b:de:d1:64:33:7b:47:33:dc:49:31:7f:ac:ff:d2:45:ac:91:
19:6a:bf:9c:1b:2a:03:9e:d0:81:3e:09:4f:01:0c:a6:36:a8:
89:5f:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:48 2025 by rpki-client