Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/848EEC5EF61E11EF981461A0762E951A.roa
File: 848EEC5EF61E11EF981461A0762E951A.roa (raw, json)
Hash identifier: DHjx8wwphTymETZpIuDHZlg4q7ax6YU1EHah2qyO1aE=
Subject key identifier: 61:7D:FD:29:73:B8:8A:EC:AC:CC:E3:E3:C1:79:CF:70:FC:AA:28:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C63
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/848EEC5EF61E11EF981461A0762E951A.roa
Signing time: Fri 28 Feb 2025 21:54:01 +0000
ROA not before: Fri 28 Feb 2025 21:53:57 +0000
ROA not after: Sat 19 Apr 2025 21:53:57 +0000
asID: 138915
IP address blocks: 154.90.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93283 (0x16c63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:53:57 2025 GMT
Not After : Apr 19 21:53:57 2025 GMT
Subject: CN=67c23078-8c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:93:68:c1:cd:b7:ad:39:03:fd:ed:4d:a5:
c9:8c:cf:74:0c:b5:f7:d4:44:19:eb:01:5a:4e:eb:
49:73:7a:0c:af:ea:cf:a6:54:32:2d:96:b1:b3:5c:
1e:2a:02:1e:5e:c2:d6:d9:e9:90:64:46:58:99:2f:
ee:e4:ca:cb:93:02:7d:d3:6e:3f:bc:39:b2:c4:be:
1b:88:d7:ab:bb:56:3a:62:df:ac:a1:cd:fc:bf:ce:
6c:09:a1:cc:11:94:f8:53:d5:8c:0f:a2:2f:d1:b6:
2f:6e:f3:70:9c:e0:ed:af:cb:02:a3:4b:b6:9a:f9:
98:09:39:2d:20:26:13:96:81:39:10:6e:65:54:16:
18:6a:4d:cd:12:00:0b:a2:23:6d:fd:bb:6a:4f:fd:
fd:1d:e5:b9:45:7b:45:dc:91:40:73:4e:ac:7a:d0:
c1:88:e0:1e:d2:93:72:f8:e1:c1:7a:98:06:eb:40:
51:1e:31:48:92:60:a2:d9:f3:49:cf:31:f9:87:4e:
4f:b0:a3:c2:fc:a8:cc:64:b2:6e:30:ae:a1:81:47:
a5:4b:34:d7:84:4b:8f:3b:f7:a6:c6:53:de:db:0c:
d6:75:0a:44:9e:c9:21:39:90:c4:47:ae:1b:e8:b0:
3f:92:40:d2:fa:30:f7:43:2d:14:11:e0:bf:47:08:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7D:FD:29:73:B8:8A:EC:AC:CC:E3:E3:C1:79:CF:70:FC:AA:28:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/848EEC5EF61E11EF981461A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.40.0/23
Signature Algorithm: sha256WithRSAEncryption
78:2f:92:11:51:bb:2b:40:3a:96:58:75:02:3f:3d:9c:6a:1b:
76:6e:cd:8d:b6:97:3d:cc:2c:9e:ad:11:7b:de:cc:e2:18:bb:
be:96:27:07:c5:c7:f2:26:40:85:8a:b1:e1:fa:ee:cd:55:e6:
45:77:04:1c:e2:e2:55:4b:d1:ff:89:d1:23:4e:d5:7b:cf:1a:
63:2e:23:9d:1c:a8:23:f6:12:68:a6:4f:8f:17:5f:e0:5a:59:
40:2c:85:f4:97:ae:2b:1a:f4:65:97:4d:7b:66:36:e7:53:5b:
c7:00:4b:d9:85:7b:5d:1b:93:4a:7f:0d:18:a5:ee:39:c8:ff:
49:99:13:b9:8e:2c:e7:6c:dc:6a:a2:02:b5:7b:43:e0:ec:6e:
50:71:12:a9:89:95:30:e4:85:5f:4a:ee:c6:25:6c:1f:fe:cc:
26:67:bf:d3:a8:3d:fa:fb:11:91:da:ac:6e:c8:7b:92:98:05:
16:2e:33:74:10:af:21:d9:e1:49:32:38:df:53:59:41:ea:68:
d4:c8:8b:f5:be:d5:78:a5:76:33:07:be:32:6d:2c:e6:12:37:
73:63:a3:13:9c:91:3d:52:e9:2d:5b:db:62:0d:4a:92:b4:46:
79:66:e8:95:6d:3b:4e:f0:dc:47:b8:b6:0e:0f:65:9b:b9:02:
be:ba:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:15:04 2025 by rpki-client