Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/788FF5C0C0F311EF9EC33392762E951A.roa
File: 788FF5C0C0F311EF9EC33392762E951A.roa (raw, json)
Hash identifier: 9snrFXjdNHdFuboJbxzp8sF9On0PsWZytG9LFeMiLRA=
Subject key identifier: 73:77:BD:45:DC:C2:05:F7:7C:07:C2:E5:4B:7F:B4:A3:FB:2D:20:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/788FF5C0C0F311EF9EC33392762E951A.roa
Signing time: Mon 23 Dec 2024 06:02:20 +0000
ROA not before: Mon 23 Dec 2024 06:02:17 +0000
ROA not after: Wed 10 Dec 2025 06:02:17 +0000
asID: 984
IP address blocks: 154.90.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73588 (0x11f74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:02:17 2024 GMT
Not After : Dec 10 06:02:17 2025 GMT
Subject: CN=6768fcec-006c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:bb:ec:b8:00:80:94:af:c7:1c:59:2f:db:
b8:97:fa:9c:29:c5:ad:48:f3:9e:c1:ac:c6:1e:93:
b0:42:f4:e3:b4:5a:7b:5d:57:95:f6:1b:95:56:c0:
c2:92:9a:d5:ec:71:a7:c2:a7:e0:c1:a1:1f:66:3e:
42:89:3e:d6:01:d9:e9:af:8c:d4:f5:70:6f:8c:dc:
7f:b9:cf:7b:20:df:66:92:b6:9c:18:85:1e:61:84:
11:05:9b:74:0a:8e:da:69:c8:da:9d:9e:f4:23:91:
e9:b3:9a:8c:20:97:2a:4f:6b:9a:11:40:95:ad:bd:
21:d4:aa:f3:23:e7:64:f9:46:a2:32:95:8e:4d:eb:
38:f8:0a:23:bf:2e:5f:d0:7a:47:cc:ce:d3:3b:f9:
92:34:7c:40:08:48:15:9e:02:f4:76:74:a7:f9:3f:
eb:86:90:37:4f:e9:12:b4:4f:93:ba:89:5f:4d:91:
c8:f2:b3:b5:21:d9:34:93:3d:7a:ee:e7:a1:97:06:
2b:41:5e:8c:ef:71:94:b8:57:51:e1:99:62:60:a2:
e3:bb:d0:77:e3:6e:80:1d:04:58:62:69:fe:e4:e3:
53:24:63:01:3c:ee:30:d9:38:37:dc:e3:89:69:f6:
e6:8e:15:00:ad:1b:e4:ce:83:da:05:30:28:5e:54:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:77:BD:45:DC:C2:05:F7:7C:07:C2:E5:4B:7F:B4:A3:FB:2D:20:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/788FF5C0C0F311EF9EC33392762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.112.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:1f:d4:12:f8:d8:fb:28:43:0e:30:fa:1e:ed:f2:41:96:f1:
b6:dd:53:44:31:66:d1:5e:f4:98:1f:27:12:f0:d3:b0:b8:4d:
96:28:75:30:a6:47:2d:9a:d6:41:4c:8c:21:6b:8d:d8:87:7d:
08:9e:13:ed:2f:0f:6c:59:2f:1a:87:38:4f:88:1e:38:d2:76:
42:c5:97:20:07:f0:8e:dc:8d:a1:8a:7f:b1:b4:e5:30:cb:df:
e6:49:77:dc:e5:41:83:ab:53:0e:a4:0f:87:ed:4e:b5:cb:46:
ba:27:99:ab:e7:2d:0b:65:6f:89:bf:63:f0:87:34:b8:e7:f3:
9f:1b:ab:7d:68:fb:0f:a7:93:03:92:eb:22:a5:37:63:6b:f4:
c8:de:ff:9d:ea:f9:c3:54:e1:32:a2:5d:b4:2e:9b:c6:04:2c:
53:f2:2f:2d:99:9c:a1:74:af:d3:89:31:34:8a:8f:60:85:85:
fa:f8:40:79:87:4b:0b:cb:f1:52:b3:e3:8a:90:76:a5:05:5a:
1d:cb:5c:93:f4:ae:71:19:17:33:63:b7:08:04:33:b6:73:09:
20:75:27:cd:25:da:d3:ea:3e:24:75:48:ba:25:f0:c3:e5:a2:
56:73:23:b7:84:be:63:32:fc:1c:ff:d1:13:58:40:46:b8:1e:
47:e9:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:50 2025 by rpki-client