Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B691AB2C19B11EF9B48C1AD762E951A.roa
File: 7B691AB2C19B11EF9B48C1AD762E951A.roa (raw, json)
Hash identifier: nF0feidMUeEZmXJ58CM+F1pmZXAnHO9S4T8kce/Aw20=
Subject key identifier: B2:E8:43:F8:7A:9A:1E:8E:2F:58:73:B9:8D:41:54:E3:6D:92:39:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01206F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B691AB2C19B11EF9B48C1AD762E951A.roa
Signing time: Tue 24 Dec 2024 02:05:01 +0000
ROA not before: Tue 24 Dec 2024 02:04:57 +0000
ROA not after: Wed 10 Dec 2025 02:04:57 +0000
asID: 984
IP address blocks: 154.90.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73839 (0x1206f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:04:57 2024 GMT
Not After : Dec 10 02:04:57 2025 GMT
Subject: CN=676a16cd-df14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:44:7b:65:7b:2f:57:fb:4a:11:a9:09:45:
94:fe:00:94:a6:72:10:fa:aa:72:b0:e8:a4:b0:99:
e7:92:64:9e:a3:33:c5:92:91:b5:79:d6:91:0c:bf:
ae:73:b9:e0:41:55:99:db:9d:48:fa:db:65:6d:91:
48:f1:29:d7:26:e8:c9:80:a8:f4:97:36:d5:5b:e0:
6d:b8:8d:c8:8a:16:47:b6:1b:1e:92:18:d3:75:72:
13:29:fe:f4:29:8e:73:b3:77:3b:9c:b3:76:a6:4b:
4f:80:bb:f0:d7:e3:e1:83:42:5a:3d:9c:7d:57:25:
b6:58:7d:cb:e0:44:76:f2:29:4a:65:39:64:33:65:
d8:19:4a:13:5c:05:09:df:d8:9b:86:fe:a0:d0:f5:
c7:bf:68:f5:98:ae:a9:b8:f2:96:e1:8b:95:ec:f4:
55:7d:3f:f4:d3:7e:76:54:26:3e:e2:9d:e2:56:cf:
ba:4a:cb:3f:1f:7d:e6:53:0e:bc:7f:1c:64:f6:88:
1d:76:87:47:55:f1:34:8e:29:2b:0a:ec:5e:64:97:
93:bd:e5:a7:59:46:30:32:a7:f7:92:35:a8:08:14:
9b:b0:d7:57:55:c4:94:63:f6:5c:ac:65:5b:7c:66:
00:66:a5:91:e1:f4:e3:f7:ba:97:06:b0:ef:0f:68:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E8:43:F8:7A:9A:1E:8E:2F:58:73:B9:8D:41:54:E3:6D:92:39:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B691AB2C19B11EF9B48C1AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.211.0/24
Signature Algorithm: sha256WithRSAEncryption
65:46:70:af:3c:4c:ae:e8:6d:45:f4:c6:d1:42:e3:84:ef:ce:
00:db:77:f6:5f:cc:b8:e0:b3:d8:81:5f:d9:ee:e7:ca:e6:ca:
3b:8b:8d:89:a4:e9:b8:3a:81:fe:2c:e4:db:9f:15:6a:27:e5:
1a:05:5c:0c:a4:03:f2:d1:8b:bc:0c:79:9a:a5:66:c7:9c:a7:
f0:e2:67:57:a9:ea:98:53:4d:90:27:cd:c1:80:d7:23:1d:7e:
b5:cd:66:04:f8:2f:4b:6d:86:78:c5:5c:20:a6:65:24:20:e9:
d3:08:cd:ae:d5:30:38:c4:f7:8e:54:bc:08:4a:be:15:dd:cf:
22:2c:f8:ea:3b:43:a7:0e:28:88:6b:7d:7d:41:5e:4f:ad:ec:
a4:46:1d:a6:40:4b:61:93:98:2b:20:d5:a1:d9:7e:cc:9b:18:
98:d3:88:c9:e4:e9:70:19:d8:c4:52:3b:44:05:99:7e:54:51:
59:c0:7a:23:94:c4:54:83:14:45:51:24:30:ff:b0:96:97:16:
a0:7c:5b:69:ac:0e:92:1f:1b:95:72:62:24:0a:35:a0:29:bd:
54:7a:9e:03:6b:b9:57:7a:ea:bd:ac:17:d2:1e:e4:39:46:68:
7c:b7:3f:7d:dd:ee:61:4f:2c:64:91:02:c1:30:40:7d:76:06:
03:75:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:02 2025 by rpki-client