Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BA9AA72AB3611EF836483B1762E951A.roa
File: 6BA9AA72AB3611EF836483B1762E951A.roa (raw, json)
Hash identifier: D30r36/GwlHXJH0kzq2p9zMq6IgrZyPQi4ZW8BjtAE8=
Subject key identifier: 9B:85:4B:D0:F5:92:89:B4:A6:15:AC:83:5F:EB:46:5C:50:61:8B:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011364
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BA9AA72AB3611EF836483B1762E951A.roa
Signing time: Mon 25 Nov 2024 14:06:09 +0000
ROA not before: Mon 25 Nov 2024 14:06:06 +0000
ROA not after: Wed 07 Jan 2026 14:06:06 +0000
asID: 149981
IP address blocks: 154.85.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70500 (0x11364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 25 14:06:06 2024 GMT
Not After : Jan 7 14:06:06 2026 GMT
Subject: CN=67448451-0026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:46:f1:7a:28:f9:f6:d2:80:34:f1:5d:58:
42:71:aa:cb:19:7f:b3:e7:14:4d:73:1e:e1:e6:aa:
87:e9:28:f5:ac:b9:08:60:fb:6d:c6:6f:33:1a:30:
b5:71:bd:24:f0:75:b8:2f:74:f0:0c:c6:b6:4d:55:
f7:4b:ed:5a:14:77:aa:77:de:24:28:63:d2:b9:07:
f7:ee:c1:05:03:1c:fe:9d:0f:bf:b5:c3:20:83:a3:
79:13:2a:d9:ab:31:10:df:03:9e:f9:67:a3:e8:8a:
37:c1:60:82:d8:ba:86:7f:7f:b9:93:85:83:b2:8f:
6f:6e:79:5f:a0:19:e3:b8:64:12:cb:26:20:87:fa:
57:75:64:45:72:04:23:2f:22:07:f7:ab:75:4b:d2:
47:6f:d1:8f:52:5d:1c:e7:8e:b8:ca:1d:68:8d:d1:
a9:b7:aa:38:c1:f6:ea:64:36:c4:0e:00:7a:b3:2f:
44:c1:c3:fe:47:f3:d0:df:27:6b:fe:e3:91:80:0b:
25:7d:66:66:b0:d2:47:df:af:26:2c:63:71:3e:95:
df:e0:d5:58:83:26:d9:88:d9:4b:51:6f:5f:f8:21:
50:96:61:7a:cf:a2:cd:24:d9:e4:ee:ec:3e:10:f4:
3d:65:cb:b5:32:c3:0b:36:25:83:22:39:0c:19:30:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:85:4B:D0:F5:92:89:B4:A6:15:AC:83:5F:EB:46:5C:50:61:8B:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BA9AA72AB3611EF836483B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.90.0/24
Signature Algorithm: sha256WithRSAEncryption
be:3e:1e:9c:74:85:ae:a5:c8:21:57:5b:01:53:a7:2e:ab:5b:
de:9e:02:82:0a:62:fd:9c:ed:ed:08:13:54:ed:74:e0:5d:f3:
eb:5a:a5:17:97:9d:3c:12:50:0f:94:0f:6b:b3:11:5f:72:d9:
c3:0d:20:8b:00:3f:85:d8:5b:24:8d:56:2f:0b:bf:26:74:43:
6e:f4:c6:ea:2d:aa:af:88:28:2a:a2:27:f6:a6:95:e3:4f:0d:
4e:f7:59:ec:63:98:58:82:c9:25:b4:c1:7b:b3:49:cd:5e:52:
9f:a6:49:4a:4a:ae:57:51:57:e6:42:e7:72:2d:75:c2:af:43:
92:a5:c9:79:a5:44:81:01:86:f8:aa:56:41:cd:4e:1d:9e:a0:
1d:cf:55:00:6d:22:95:49:91:79:c0:a9:5e:ca:2c:24:e9:bb:
e9:71:e8:45:09:14:9e:7d:72:a2:f9:4f:4d:b2:a6:86:eb:13:
7e:c5:f0:04:96:55:8d:96:82:bf:6e:fc:28:1b:6a:92:16:2b:
85:35:62:ff:b3:8a:43:1c:55:90:8d:27:2c:1c:04:c2:1e:d9:
ab:94:f3:22:50:ad:ea:3a:c8:87:56:13:40:4f:f0:e9:5b:4d:
03:b6:f3:90:87:b3:ac:6b:c0:b1:c1:86:1c:2d:5d:5d:c3:c2:
8e:aa:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:14 2025 by rpki-client