Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8798122CC19411EFB6BD8F7A762E951A.roa
File: 8798122CC19411EFB6BD8F7A762E951A.roa (raw, json)
Hash identifier: XhSaGc2Uddl1iyP4wvbxLqtrHwt5/aD6G76F/614CG4=
Subject key identifier: E7:EB:85:50:5F:7B:A2:3F:5B:47:F2:F0:66:81:81:B2:B8:35:3F:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012019
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8798122CC19411EFB6BD8F7A762E951A.roa
Signing time: Tue 24 Dec 2024 01:15:15 +0000
ROA not before: Tue 24 Dec 2024 01:15:11 +0000
ROA not after: Wed 10 Dec 2025 01:15:11 +0000
asID: 984
IP address blocks: 154.90.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73753 (0x12019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:15:11 2024 GMT
Not After : Dec 10 01:15:11 2025 GMT
Subject: CN=676a0b23-420d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f7:db:ec:cd:8c:f1:9f:b8:dd:7c:31:f3:05:
29:70:f2:45:71:b1:cc:9b:9b:fa:25:7f:9f:f3:be:
23:ba:91:10:15:3e:c1:a5:90:7b:5b:68:61:d9:9d:
c7:67:b8:30:c1:8d:7c:4d:12:27:b5:b7:08:10:5c:
2a:99:d1:45:f5:a2:fe:3d:fc:cd:fa:8d:50:48:44:
b7:7f:b9:c8:21:45:f8:4e:0d:2b:c5:f3:b8:d8:a2:
87:19:ce:ad:65:52:26:06:0b:d4:60:d8:1b:92:79:
55:16:7b:4c:ae:28:63:ab:10:50:01:39:2e:a6:70:
9b:f0:77:a7:b4:e2:bd:04:c9:7a:64:74:ff:5f:96:
04:de:1d:dc:7c:05:6a:13:19:05:55:39:0d:45:87:
6f:a4:28:e8:9f:dc:9b:c1:02:e7:5d:a6:18:82:8e:
b3:3e:3c:08:38:24:1a:2a:85:62:3f:2f:dc:67:27:
85:f9:e3:53:fb:c6:bb:82:68:98:27:55:95:69:5d:
9a:9e:5d:74:47:aa:44:15:12:ee:fb:81:db:3f:af:
ec:39:8e:bc:9b:9b:8e:9a:a7:b8:ce:aa:33:83:00:
60:79:1c:ee:49:f0:17:2e:01:cc:cd:43:31:df:cb:
f3:df:7c:8f:d6:32:c4:36:15:eb:d4:53:3f:39:46:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EB:85:50:5F:7B:A2:3F:5B:47:F2:F0:66:81:81:B2:B8:35:3F:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8798122CC19411EFB6BD8F7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.164.0/24
Signature Algorithm: sha256WithRSAEncryption
62:fe:c6:2f:66:3b:2a:e6:f2:d4:03:a2:4b:20:8e:93:9c:ee:
f1:5f:b5:68:7b:6c:cb:13:7a:b4:7e:df:ba:7e:76:58:d6:ae:
e7:4d:93:1f:74:d4:d4:66:81:0e:58:a4:69:ef:e4:7e:52:0f:
a6:51:97:d6:cd:62:d7:eb:f3:fd:4e:a8:99:38:e7:ea:fc:2a:
8b:ea:7c:3e:2e:8e:1b:a8:8f:32:6a:ba:5e:24:ae:1e:bf:87:
75:8d:44:69:10:f1:92:b9:3e:db:5a:fe:32:07:02:f2:c4:2f:
89:80:e6:16:08:72:29:f9:70:e6:a5:c3:06:ae:89:44:89:23:
bf:e1:1f:ab:09:a9:1f:f4:47:b7:75:ad:37:7e:87:ad:57:d9:
47:5e:c3:e9:4d:fb:72:7f:5c:ab:02:06:85:a9:33:ec:8b:11:
ed:59:68:21:fa:72:14:6a:63:b2:40:ff:37:0f:71:47:3f:34:
34:e8:76:ff:3b:b4:46:27:75:fe:8b:d8:9c:ad:5e:ad:97:fc:
d2:f6:b2:bf:62:53:b1:5e:26:23:8f:66:51:2e:87:97:f0:9e:
58:ad:b0:00:70:cf:d9:c4:2b:29:03:0b:a7:79:40:e6:0f:1a:
58:4c:e1:21:cb:26:ad:35:89:fd:c5:66:e9:67:ed:8a:4c:9f:
c1:5c:6f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:17 2025 by rpki-client