Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58BEB93CC19511EFB24CE27F762E951A.roa
File: 58BEB93CC19511EFB24CE27F762E951A.roa (raw, json)
Hash identifier: T8Wwmv+w5VA7HXlx+piK/uLRgAQb+mFek/1s0hYMqPc=
Subject key identifier: 97:EE:C7:B6:B4:26:EB:77:15:DA:E8:D2:39:9F:DD:2A:5C:AD:14:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012023
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58BEB93CC19511EFB24CE27F762E951A.roa
Signing time: Tue 24 Dec 2024 01:21:05 +0000
ROA not before: Tue 24 Dec 2024 01:21:02 +0000
ROA not after: Wed 10 Dec 2025 01:21:02 +0000
asID: 984
IP address blocks: 154.90.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73763 (0x12023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:21:02 2024 GMT
Not After : Dec 10 01:21:02 2025 GMT
Subject: CN=676a0c81-14f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:60:a6:58:02:e5:b2:d3:7e:4a:ff:57:61:
25:3c:3b:d9:6c:71:b5:90:38:ba:d6:3b:82:83:64:
74:37:7c:4c:47:4c:ab:7a:bd:9c:7d:1e:6d:c3:72:
a9:5c:b1:43:37:ef:7b:01:29:7e:09:9e:e0:3a:ed:
68:ff:4c:b8:bf:66:53:ce:c7:ca:51:7f:8d:82:c8:
c3:06:3c:ba:d4:af:24:f2:c9:8d:46:09:fd:4b:b9:
61:6c:0b:73:40:08:d3:a7:c4:89:5c:76:81:16:89:
7a:c8:94:1a:1b:4b:5d:82:45:30:1e:fa:6e:d1:d6:
41:53:de:40:d0:1a:54:9d:59:15:6d:d3:1f:91:54:
bb:af:fe:ff:1c:0b:9c:67:99:7b:09:a6:12:b0:50:
d8:58:82:3f:cf:3b:e1:23:7b:9b:41:04:4c:c5:0d:
46:a4:9a:5e:f6:72:7f:1f:f8:1f:9b:49:14:53:00:
cc:5b:4b:cf:ac:d9:75:e9:20:a2:d5:c1:0b:3a:7f:
ea:9e:d2:94:58:4a:da:67:b7:8a:8c:5f:e7:31:0f:
b3:5c:e8:bc:59:d8:dc:45:2c:80:ef:72:a2:c0:96:
b0:9f:20:ff:d0:1e:fc:bc:af:c1:ed:7c:ce:1f:ad:
f3:8e:37:4e:5a:b3:cc:d8:1f:63:25:cf:64:92:0d:
aa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:C7:B6:B4:26:EB:77:15:DA:E8:D2:39:9F:DD:2A:5C:AD:14:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58BEB93CC19511EFB24CE27F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.169.0/24
Signature Algorithm: sha256WithRSAEncryption
88:06:da:8f:69:0e:4a:c8:9d:f4:ce:0e:07:80:25:3c:11:5c:
b5:6f:a9:5a:47:28:da:6f:1d:7a:d9:73:e9:d3:8c:7e:e3:a3:
dd:a8:d7:a3:b1:65:c5:bc:ac:0f:bc:48:63:92:58:7f:1e:04:
8d:06:bc:fc:c7:94:ec:19:ba:ed:c7:71:69:ee:e2:61:17:d7:
89:9a:a8:42:20:7d:73:cc:62:90:8f:99:12:aa:8c:12:e4:25:
4c:1e:26:66:62:4f:67:79:1d:0d:fb:ae:ca:28:dd:aa:e7:8d:
6f:3f:b0:9b:77:cf:af:12:c9:d8:b1:61:5a:b0:6d:00:8b:4d:
2a:d6:bf:8b:c2:3d:4e:70:c6:f2:39:ca:aa:10:64:6a:07:ad:
39:83:ca:f5:4e:eb:1a:72:9e:6d:b2:fc:a9:81:f8:8e:b3:73:
d6:74:cb:50:47:86:03:ed:ff:24:83:12:46:d5:a4:7d:86:37:
c1:aa:48:1b:ea:ce:56:fa:e9:4a:c8:4d:34:ff:55:88:9f:42:
5b:3f:b6:59:2c:13:49:74:e8:64:04:cc:70:00:1d:30:c2:dd:
0d:e3:cd:4b:f2:57:4e:8f:11:9b:13:b3:e7:39:7e:7d:b2:8b:
50:76:e7:29:ec:34:ff:29:51:3b:da:c9:f1:91:f3:90:63:43:
18:50:67:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:39 2025 by rpki-client