Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F780C6AC0F111EF9B585785762E951A.roa
File: 4F780C6AC0F111EF9B585785762E951A.roa (raw, json)
Hash identifier: qFXq3yiw7tWmMyMT9i8LS0gbkpiBZAPaDNUeelP5qY0=
Subject key identifier: 03:BD:51:D9:EC:9C:87:10:B9:07:6A:C6:BA:BE:E1:0D:7D:6B:3F:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F780C6AC0F111EF9B585785762E951A.roa
Signing time: Mon 23 Dec 2024 05:46:52 +0000
ROA not before: Mon 23 Dec 2024 05:46:49 +0000
ROA not after: Wed 10 Dec 2025 05:46:49 +0000
asID: 984
IP address blocks: 154.90.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73568 (0x11f60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:46:49 2024 GMT
Not After : Dec 10 05:46:49 2025 GMT
Subject: CN=6768f94c-a1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:8b:5c:56:33:8a:96:15:67:d7:4c:5a:06:
3d:3f:ea:c9:a3:dd:5d:db:d1:63:44:07:cd:cd:93:
e5:50:44:c4:e9:f3:f7:27:4b:b7:f2:40:1b:ed:80:
3b:14:9e:92:09:ab:31:66:4e:f7:bf:ae:9c:14:79:
66:4f:d5:94:d0:cb:b9:07:74:c5:7e:de:13:86:d3:
2c:ab:45:d6:8d:02:df:7e:b2:75:2b:da:ed:3c:bc:
87:31:b1:45:98:98:52:f0:70:fe:cf:db:45:9b:1d:
61:09:b5:76:49:a5:4d:6a:1a:df:1f:75:08:d7:fc:
db:52:d8:34:36:30:bc:cf:71:2a:68:a6:ff:1e:f2:
89:90:5a:e8:bc:ba:40:cd:d3:f9:fa:0e:b3:aa:da:
9a:49:5d:e9:e6:e8:23:8a:d6:ab:39:65:b6:40:c0:
26:ec:38:84:5f:d0:49:15:52:1a:3d:d4:3a:91:4f:
6a:7c:21:5c:41:63:dc:86:67:a9:a1:5c:95:60:26:
94:d2:8f:b9:ff:2c:8d:a5:1a:5d:0c:65:b3:51:ce:
97:01:60:87:d1:bc:92:6d:4d:3d:15:9f:55:8e:b1:
91:06:b3:66:13:d7:7f:fc:9b:55:6e:c4:7f:37:c0:
67:68:17:34:d3:91:5b:91:d8:b4:7d:b4:c1:9a:d3:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BD:51:D9:EC:9C:87:10:B9:07:6A:C6:BA:BE:E1:0D:7D:6B:3F:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F780C6AC0F111EF9B585785762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.102.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:6a:06:39:f7:49:39:d9:93:75:4c:dd:d3:65:54:21:5e:82:
78:9b:59:5c:bf:78:d6:50:5e:b0:a8:05:6c:19:c3:ca:c6:fb:
c0:44:4b:ff:45:61:82:83:7b:43:d0:c3:75:18:9d:2a:1c:44:
3a:f3:11:18:ac:b0:e5:e5:e7:cf:04:95:6a:fe:45:b7:25:95:
8e:b6:cb:89:67:9c:c0:27:c1:56:30:10:41:06:16:6d:e5:a8:
4d:c4:ca:3c:dc:2e:0f:85:8f:2e:f2:a9:8e:af:62:bc:6a:47:
93:56:d4:a6:b6:9e:32:8d:86:84:d9:26:5c:0d:1a:47:f6:10:
a2:ee:b8:3d:c7:a2:0e:4e:bb:50:9e:3a:1a:5b:f4:08:c1:fa:
a8:4f:bf:d6:59:b9:92:4b:67:bc:62:c5:72:97:ac:d1:df:bf:
9f:65:31:90:97:77:03:b9:69:9e:f7:12:01:ef:4d:d4:5a:21:
15:17:8a:99:06:60:ac:c9:e0:6f:4e:f8:36:44:c8:f4:65:44:
e9:11:7c:3d:ea:a2:3b:8e:38:b7:8c:8d:56:bf:94:1d:ef:d5:
01:77:3b:13:20:c7:b4:e4:ea:00:03:63:3a:ae:2e:f6:80:f1:
62:3a:d3:50:cf:e7:99:e7:5e:ad:68:0c:bb:1a:26:67:bd:3b:
c8:86:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:51 2025 by rpki-client