Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53BBD568C0F611EF912449A3762E951A.roa
File: 53BBD568C0F611EF912449A3762E951A.roa (raw, json)
Hash identifier: JHKvl4zBKcECrimmJrYB8BGL0HLpbUkQ/id3y3OgwRs=
Subject key identifier: 56:09:09:28:E6:43:88:98:76:FC:0E:68:21:EC:18:23:27:DF:40:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53BBD568C0F611EF912449A3762E951A.roa
Signing time: Mon 23 Dec 2024 06:22:47 +0000
ROA not before: Mon 23 Dec 2024 06:22:43 +0000
ROA not after: Wed 10 Dec 2025 06:22:43 +0000
asID: 984
IP address blocks: 154.90.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73618 (0x11f92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:22:43 2024 GMT
Not After : Dec 10 06:22:43 2025 GMT
Subject: CN=676901b7-2646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a1:dd:25:49:ae:f6:bf:c9:e0:d3:80:4a:80:
7f:f3:8e:ec:6b:34:bb:c7:3b:7e:aa:ff:cb:2b:28:
96:e8:9e:e2:70:9a:ad:3d:ef:95:bc:0c:88:4e:e9:
41:d6:6e:f6:3f:44:f5:bf:dc:c3:70:13:0c:27:18:
e4:39:1e:2e:a5:94:2c:cc:22:92:90:3a:6a:ba:f1:
05:34:64:cf:e4:a2:89:6b:18:57:c9:d5:91:68:af:
72:7d:50:5d:57:f5:e0:53:83:a8:e9:9e:1d:07:48:
f0:97:8d:59:b3:ec:6e:1f:0d:06:55:1d:0a:28:cd:
05:67:79:ff:77:3b:13:7f:78:97:0c:9c:63:46:96:
e3:dc:f2:1b:6a:32:07:e0:2a:97:3a:09:2d:c5:1b:
18:82:de:f7:27:9d:34:5b:a6:3c:42:29:11:b0:d4:
16:90:b9:a3:d9:71:71:aa:88:f4:c0:5a:7c:e8:9c:
97:3e:03:5f:41:99:e9:a0:98:8e:c6:bf:12:d2:14:
71:f9:34:c5:bd:1a:43:31:0d:4f:95:2f:bf:90:f0:
ee:4f:2c:95:4d:ff:e1:66:75:5d:ee:ba:bf:17:4c:
0c:8b:04:86:bc:e2:23:fa:8a:bf:64:9d:cf:c5:49:
f7:40:a9:da:3f:14:96:bd:38:e1:1e:65:84:dd:aa:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:09:09:28:E6:43:88:98:76:FC:0E:68:21:EC:18:23:27:DF:40:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53BBD568C0F611EF912449A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.127.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:01:42:6b:7b:b0:ca:b2:5a:42:69:93:7a:2b:98:0f:e5:c3:
93:ef:4a:4f:91:3e:56:b5:01:67:35:ac:8b:ea:2a:0e:4c:31:
6b:2f:56:6d:37:d9:a1:f5:5b:4c:24:dd:cc:8b:49:e8:38:37:
90:0f:3e:f5:93:5e:e2:23:6e:96:5a:7e:35:85:06:a7:6f:89:
0f:42:26:67:b7:ef:61:fc:d4:d1:fa:2d:27:cb:2e:f6:86:19:
fe:64:39:1c:0e:99:b4:3d:0d:ee:ff:2a:a8:dd:c4:ec:dd:e3:
c8:62:1d:49:b8:df:07:75:5b:63:c9:98:09:6d:52:7f:5d:2e:
4d:41:4a:cf:65:58:69:e9:b9:21:27:80:c0:f3:39:f9:87:48:
87:62:ab:d9:05:94:9f:cf:15:05:9e:fb:93:59:f8:4f:87:72:
21:21:fe:a6:64:a8:33:17:63:17:6b:75:0c:33:b2:61:e8:55:
49:9c:a9:d8:fc:03:8b:40:c8:37:25:fc:be:6f:6d:68:c2:30:
99:58:c0:54:7d:90:51:d4:cb:6f:21:10:c5:09:98:aa:4c:44:
dc:92:3d:ab:2d:62:8e:cf:f0:4f:ce:d8:58:25:f0:6b:32:31:
dc:9a:00:cf:7b:f5:ea:86:0d:97:b8:57:ea:39:70:9d:ed:51:
45:1d:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:35 2025 by rpki-client