Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75F6508AC19C11EFAFF5AAB3762E951A.roa
File: 75F6508AC19C11EFAFF5AAB3762E951A.roa (raw, json)
Hash identifier: Tza9N4qmoAXGRUWC67P5P98QfSCEfLlVgn8g9zTbRok=
Subject key identifier: 47:D4:05:5D:84:38:1E:EB:05:F5:1C:1D:32:E1:C1:9F:E1:85:41:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01207B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75F6508AC19C11EFAFF5AAB3762E951A.roa
Signing time: Tue 24 Dec 2024 02:12:01 +0000
ROA not before: Tue 24 Dec 2024 02:11:57 +0000
ROA not after: Wed 10 Dec 2025 02:11:57 +0000
asID: 984
IP address blocks: 154.90.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73851 (0x1207b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:11:57 2024 GMT
Not After : Dec 10 02:11:57 2025 GMT
Subject: CN=676a1871-4269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:78:3d:bc:d3:09:f1:b5:20:ce:a2:77:99:99:
68:1d:e9:b0:40:e6:1d:42:80:cf:e5:7a:35:1d:0a:
d2:11:c3:95:59:e6:e4:34:a1:ca:a1:50:7f:89:82:
97:ae:0d:03:39:30:57:46:6d:77:db:02:e7:bd:51:
a1:af:6e:53:9c:8e:6b:45:b2:af:54:61:75:cf:68:
0a:21:11:a5:f3:ce:44:a1:c8:41:e9:5b:da:f4:b5:
f9:b5:c3:05:31:3d:d0:f3:34:a9:88:f2:6e:e7:88:
2e:3b:3e:4c:1c:44:f1:4b:85:63:e7:c8:36:4e:c8:
9e:b1:6b:37:8b:ea:99:52:4b:7f:8f:17:7f:46:fc:
d0:36:71:cc:cc:d2:6a:0b:20:f1:e3:d5:83:6c:98:
bd:19:9f:5d:bc:1d:55:fc:f3:81:2c:f9:35:8d:81:
e6:58:e1:f5:4f:ad:2a:14:df:11:97:d0:54:82:be:
0f:d5:0d:fb:73:03:ac:d3:be:6b:a7:4a:83:90:48:
8e:85:90:76:bd:6a:6a:d6:36:d0:2b:4e:fd:18:7e:
59:47:21:ed:db:df:31:46:82:8a:07:5d:ad:1e:8a:
43:7a:7c:45:ca:e0:97:7d:b0:7c:8e:42:11:e0:ea:
cb:b4:98:97:2b:02:10:45:0e:27:2e:bd:0f:e4:2e:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D4:05:5D:84:38:1E:EB:05:F5:1C:1D:32:E1:C1:9F:E1:85:41:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75F6508AC19C11EFAFF5AAB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.217.0/24
Signature Algorithm: sha256WithRSAEncryption
05:81:07:dd:e8:5e:72:04:4d:6c:61:8b:ee:2a:96:be:de:bf:
f7:e4:66:b7:c8:d6:b1:84:e2:03:91:d6:95:28:8a:e7:9b:d6:
8b:ad:ee:d4:31:94:89:66:ee:75:9c:4b:cb:7b:93:36:d3:1d:
1e:a9:51:f1:5a:1f:d1:1a:e4:25:97:ab:97:cb:23:61:6d:08:
ad:c8:01:fe:05:4b:4a:8f:34:85:71:51:45:40:40:ab:8b:b9:
34:54:fe:a7:ef:5f:2b:16:ed:4a:c2:b1:da:23:d5:ce:01:2c:
1a:8a:1e:8a:0a:a6:21:c7:1a:d7:a1:0e:e8:42:92:89:4c:e6:
bc:96:08:dc:d7:63:27:53:14:07:08:e2:d8:9e:b4:80:fa:90:
5c:6f:13:e6:75:1a:75:48:24:9d:49:60:dd:7d:7c:95:a4:d0:
3e:2f:ec:81:89:59:5b:8c:43:39:a1:99:f5:6d:be:7b:7a:21:
dc:36:33:5a:8a:26:cd:e4:0f:1b:48:c8:54:cf:5c:9f:e5:ec:
a8:e4:57:3d:52:5c:7f:a4:fc:aa:20:88:9d:88:b6:d6:73:49:
0e:5a:86:78:70:a5:13:8c:74:05:2d:2a:5f:64:56:41:16:10:
ef:eb:c8:8c:98:a7:88:40:7a:91:41:b0:68:3e:d3:c6:65:21:
31:67:c2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:35 2025 by rpki-client