Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/679E9F9CC19211EFB05C096B762E951A.roa
File: 679E9F9CC19211EFB05C096B762E951A.roa (raw, json)
Hash identifier: ptdYjvt/9K3VmrGuFHbLAGbK0W30wOo+O2KKKCZx1sc=
Subject key identifier: C7:CA:1D:B7:85:FC:03:D3:21:D5:62:50:05:A7:29:08:29:6E:3B:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011FFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/679E9F9CC19211EFB05C096B762E951A.roa
Signing time: Tue 24 Dec 2024 01:00:02 +0000
ROA not before: Tue 24 Dec 2024 00:00:58 +0000
ROA not after: Wed 10 Dec 2025 00:00:58 +0000
asID: 984
IP address blocks: 154.90.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73727 (0x11fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 00:00:58 2024 GMT
Not After : Dec 10 00:00:58 2025 GMT
Subject: CN=676a0792-245c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:a1:d2:24:15:ba:99:71:fc:a6:06:a4:b1:
aa:ef:8b:69:13:e4:61:2c:98:a6:e8:4a:6f:f6:e3:
97:92:35:b6:2b:f2:bc:f4:df:e2:31:de:7f:ba:b2:
da:e2:29:e8:d4:76:45:f2:5d:23:b3:1b:40:4f:79:
e8:21:df:77:08:5b:54:f2:07:3e:c7:d3:60:56:00:
7e:6e:e7:10:25:85:89:eb:c8:48:6f:ca:82:7d:0d:
59:29:af:64:61:cd:fd:f8:17:7f:94:a7:c6:fe:31:
5e:d6:1d:65:6b:de:44:a6:98:1a:e1:51:cf:7a:cd:
a9:94:7b:f4:e5:76:b2:6f:e5:93:e8:e9:56:ae:f6:
b3:b1:f2:85:04:2b:ca:72:b2:be:8f:bf:03:01:c3:
b9:f3:37:ee:d8:6c:ad:c2:c0:9c:e0:ac:12:d3:8b:
91:28:79:26:09:eb:35:83:27:a0:37:8a:78:dd:bd:
2c:9a:dc:ca:66:06:25:18:9b:8c:73:0e:d3:ce:bb:
1a:ef:f6:a1:42:ff:bc:88:83:92:2f:da:bb:5a:f5:
a5:f4:eb:2f:13:d7:c2:d3:37:74:8e:78:95:78:29:
66:76:43:d7:2a:ef:fe:86:23:61:5c:1c:05:16:14:
43:bd:37:ef:73:27:5c:9f:fc:6a:e4:d7:94:7f:d3:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CA:1D:B7:85:FC:03:D3:21:D5:62:50:05:A7:29:08:29:6E:3B:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/679E9F9CC19211EFB05C096B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.150.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5a:fb:de:b7:5c:af:27:07:0f:86:5f:5e:84:2c:50:d4:b6:
de:49:b0:48:77:36:19:1d:c9:f1:48:84:b7:f8:64:89:79:0f:
5e:6a:15:83:83:14:27:87:86:47:55:57:22:d5:27:b9:e4:85:
20:c2:c4:5b:3c:d6:5a:6f:13:c8:f9:23:9f:03:9f:8b:c5:4e:
d8:6a:1d:0e:63:61:10:09:16:a1:33:bd:08:ef:a9:f3:e1:83:
bd:02:02:8d:d6:48:b5:2d:6e:93:2e:e6:be:2d:a5:ae:79:ad:
89:77:ca:89:cd:f8:b9:f5:80:d9:46:eb:45:3a:74:e6:7f:65:
75:9d:9c:2b:4e:20:f5:f8:c1:22:3f:70:71:c7:21:5e:be:d5:
53:a4:20:9d:4f:78:87:50:c8:74:72:25:a2:65:a9:4b:4c:53:
4f:02:18:c5:2e:e8:c5:02:a6:2d:e5:7f:2e:dd:da:d1:11:2b:
0f:a1:bf:06:f8:77:92:c6:60:42:c8:39:13:84:7b:d0:2c:4f:
99:78:62:30:8d:d6:89:22:ed:47:c6:c0:c0:32:e2:09:14:84:
0b:cd:86:51:4a:65:6f:c8:72:a2:ad:23:e0:14:ce:64:61:13:
eb:a0:d8:68:0e:b3:f0:7e:66:11:66:ba:d1:61:16:3c:16:5e:
9c:b0:d0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:32:49 2025 by rpki-client