Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DBD2E3AC0F511EFAA0BF39E762E951A.roa
File: 7DBD2E3AC0F511EFAA0BF39E762E951A.roa (raw, json)
Hash identifier: IGanWj48MuMAKhjqFfuyUd273yb3RF+LyUg/w9VZp8c=
Subject key identifier: 42:18:56:86:57:1F:20:EE:88:9B:35:10:CC:77:52:8F:2C:34:07:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DBD2E3AC0F511EFAA0BF39E762E951A.roa
Signing time: Mon 23 Dec 2024 06:16:48 +0000
ROA not before: Mon 23 Dec 2024 06:16:44 +0000
ROA not after: Wed 10 Dec 2025 06:16:44 +0000
asID: 984
IP address blocks: 154.90.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73608 (0x11f88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:16:44 2024 GMT
Not After : Dec 10 06:16:44 2025 GMT
Subject: CN=67690050-9a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:34:23:8d:3e:cb:90:63:a2:cc:3b:7a:3e:
3d:77:c6:68:77:f7:31:93:8c:07:ee:62:19:3a:aa:
dd:2d:5a:1d:1c:53:2f:30:71:ee:36:82:43:25:9b:
d9:2c:15:84:d0:e7:18:cf:5a:65:91:70:1d:50:d6:
cc:55:a7:47:2d:e1:52:dc:d3:f2:4e:e5:c2:a1:53:
b9:0a:88:62:ef:06:80:eb:a0:3c:3f:c3:0d:55:c2:
32:07:81:de:6f:6e:dd:60:2f:71:13:1f:ed:e3:5e:
28:53:9a:ca:e3:29:b6:a0:30:83:48:2b:54:79:6a:
d2:7b:62:1b:74:bf:e0:0d:06:23:ff:36:57:a5:eb:
26:6d:17:4b:61:41:08:45:24:a4:ba:37:ab:f9:b4:
c7:f0:ae:50:5e:87:94:b1:a9:0c:6f:eb:6e:47:52:
31:f1:e7:58:2a:14:ec:6f:f6:6d:69:56:e7:65:21:
1f:78:06:84:d2:07:5c:1e:c1:1f:d8:6a:74:90:67:
05:b1:4c:45:21:34:48:ae:66:0e:b8:82:4f:27:c8:
91:e9:85:6b:0d:6f:f3:be:64:80:6b:da:9b:fe:9e:
2e:41:db:9a:fa:3e:42:10:68:51:ed:15:ae:13:d0:
f4:3d:74:9a:1c:b6:6d:97:8e:3d:4e:48:cb:e0:5c:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:18:56:86:57:1F:20:EE:88:9B:35:10:CC:77:52:8F:2C:34:07:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DBD2E3AC0F511EFAA0BF39E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:63:ed:04:63:c1:98:8a:03:f9:f5:d0:31:cd:5a:13:7e:f2:
7d:ac:d8:02:b5:41:c4:e6:e6:05:5e:79:b7:6d:0c:83:b1:b9:
83:f0:ec:1d:dd:31:c9:2d:69:cb:b4:dc:2b:20:8f:dd:f1:01:
8b:8f:0e:0d:ec:c2:64:94:e8:83:54:d4:ac:8e:18:94:07:8b:
3e:bd:6c:d6:79:1c:08:25:b0:f3:98:2d:f1:a9:70:48:07:a0:
ef:2b:15:34:cb:f1:93:c7:45:ed:c7:cb:3b:3a:f6:ab:ad:17:
74:db:61:12:66:73:ca:cc:95:86:7c:dc:ee:a2:8a:e7:56:bb:
01:87:29:bb:88:f5:03:9c:8d:d2:3e:52:60:72:c1:20:ff:95:
1a:a7:65:89:af:d5:bf:82:24:21:4a:e5:93:89:5a:05:4e:19:
04:b7:aa:e3:f9:80:6f:13:93:aa:60:2e:b3:24:af:74:b4:ca:
b6:2f:18:bd:95:56:26:73:ed:21:50:5c:55:8a:a1:95:ba:16:
d1:2d:95:16:d6:56:f0:75:1d:2e:6e:17:68:4e:cb:a4:a8:25:
30:6c:7c:4d:42:7e:08:2a:2b:d9:8c:7c:1c:9b:7e:de:e3:e0:
be:e0:b6:94:3d:7b:5b:1f:bd:7e:48:59:19:f4:a2:17:69:57:
55:e2:31:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:22 2025 by rpki-client