Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F587738C0F011EF8A14B080762E951A.roa
File: 5F587738C0F011EF8A14B080762E951A.roa (raw, json)
Hash identifier: fafKI/xho1Kfol3p/UueCEmqAoCSe+Euwti/5Cc4x10=
Subject key identifier: 2A:77:A1:FC:56:07:91:67:09:1E:EA:68:BC:9A:34:0D:81:D7:DC:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F587738C0F011EF8A14B080762E951A.roa
Signing time: Mon 23 Dec 2024 05:40:10 +0000
ROA not before: Mon 23 Dec 2024 05:40:06 +0000
ROA not after: Wed 10 Dec 2025 05:40:06 +0000
asID: 984
IP address blocks: 154.90.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73556 (0x11f54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:40:06 2024 GMT
Not After : Dec 10 05:40:06 2025 GMT
Subject: CN=6768f7ba-4330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:80:35:f3:4e:61:8d:e7:6d:7c:4b:6f:89:
d0:a6:3f:44:22:51:8c:c0:46:02:ea:b3:05:28:58:
e4:0e:04:38:60:25:9f:23:53:f2:42:96:ff:d7:19:
e5:52:e6:91:60:7e:fa:3b:85:f6:bb:ee:c2:c3:05:
db:26:90:9c:34:78:7b:8d:54:67:90:bc:5f:dd:a5:
c6:f7:13:3c:3c:fd:44:12:3b:40:4e:55:7a:8b:e9:
56:4b:bb:57:5d:f0:23:65:9d:40:da:79:04:51:bb:
f2:6d:83:3f:92:1c:03:d7:eb:a6:c5:71:13:ac:17:
7a:97:5c:df:81:f1:ef:19:56:26:7d:8f:4f:0a:f2:
cb:23:53:95:54:9a:f7:01:41:d0:6c:f8:84:ac:38:
92:41:0b:35:a7:a7:e4:14:49:e2:d5:bf:c2:9d:4f:
ae:e5:32:39:8e:eb:da:5b:26:38:d7:a5:1c:5c:f0:
43:e2:3a:aa:f8:dd:07:cd:5b:71:50:36:3b:ac:6a:
3e:18:65:2e:df:b2:4d:80:3d:1a:ce:e1:fc:ff:1e:
05:5e:9a:5f:2d:f9:56:be:5c:3b:6a:04:e5:2c:9b:
9e:29:a5:f8:c6:4d:f5:53:e3:98:24:40:5a:d0:f9:
df:50:67:2f:8a:ad:a0:1e:04:40:48:73:ee:50:75:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:A1:FC:56:07:91:67:09:1E:EA:68:BC:9A:34:0D:81:D7:DC:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F587738C0F011EF8A14B080762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.96.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:ca:e4:03:c3:0f:50:67:3d:fd:6d:22:26:6f:18:3e:78:b3:
25:d6:5d:8f:67:94:bb:80:08:7a:77:26:7d:69:20:3a:36:dc:
61:8e:cb:6e:ab:d9:ef:49:0d:a5:33:9b:33:66:8a:eb:e7:dd:
e0:c7:b3:f8:d5:cf:fd:2e:7e:ae:5d:58:6b:43:61:a4:55:a5:
4d:dd:b6:b0:bc:1d:ae:27:33:16:4f:87:e7:a2:46:9e:6d:03:
3a:da:00:f4:0d:19:f7:b4:88:2e:14:24:e0:c1:f1:78:e8:02:
a0:dd:a8:c6:98:86:77:c4:0a:bb:33:ea:d7:68:61:e2:0a:90:
6b:d0:18:5c:ae:4a:45:07:2c:b5:bc:56:01:fb:ca:ea:88:85:
b0:81:d6:42:1d:86:bb:df:ef:04:5d:58:80:b4:03:05:0f:4c:
0d:b2:3d:7d:11:54:21:23:1f:7a:93:7e:df:84:19:3f:3b:87:
87:31:88:73:e1:da:d5:77:e0:b6:d8:cc:4a:80:82:46:64:d9:
7d:cc:00:93:6d:f8:f7:5f:83:0d:7d:72:37:78:21:58:82:d8:
39:4a:e3:97:38:01:37:bd:14:2b:f5:8c:33:57:b6:a6:6c:b3:
78:45:f3:51:79:4f:c7:26:d9:8d:97:77:22:e6:52:f6:5b:24:
28:77:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:07 2025 by rpki-client