Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90B246DCC51F11EFB1BF8798762E951A.roa
File: 90B246DCC51F11EFB1BF8798762E951A.roa (raw, json)
Hash identifier: 4HFuFYa9CbeNf/+VySoVcVYuNEt+vntoWG0gi1Q1+OE=
Subject key identifier: 74:38:E2:DA:E7:9E:65:2C:8F:D6:9A:D5:D6:6D:DD:06:1C:75:61:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90B246DCC51F11EFB1BF8798762E951A.roa
Signing time: Sat 28 Dec 2024 13:28:03 +0000
ROA not before: Sat 28 Dec 2024 13:28:00 +0000
ROA not after: Sun 12 Dec 2027 13:28:00 +0000
asID: 17561
IP address blocks: 154.203.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76617 (0x12b49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:28:00 2024 GMT
Not After : Dec 12 13:28:00 2027 GMT
Subject: CN=676ffce3-e5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:b1:b2:1f:1a:ca:a3:a7:49:f8:a5:9e:9d:
ad:97:1b:e6:06:33:79:28:81:c5:ad:0a:4d:f3:34:
d9:a7:46:3b:c5:63:0b:36:89:88:28:64:f5:41:16:
f3:95:f4:91:bc:fb:5b:27:01:28:b4:ae:14:12:61:
d4:9d:68:bb:9c:69:05:f8:f5:59:77:aa:39:bb:e7:
b6:65:5f:c6:43:89:48:6a:83:67:98:6a:fe:06:20:
d4:7e:23:e2:0f:7d:6f:cd:29:d0:da:ae:6e:ca:30:
15:dd:a2:e0:db:f0:b4:12:64:df:37:f7:7f:0a:66:
64:b9:d4:c4:0a:5b:a7:e0:ce:4a:23:8f:4e:a1:d8:
9d:c2:e4:66:c1:85:ca:e2:f0:d7:e6:ea:ac:35:1e:
c4:cc:fa:f8:4a:a2:28:5c:82:98:4c:95:de:d7:99:
4c:ca:51:17:35:89:c5:a8:6d:db:da:6a:c1:42:0d:
0b:73:79:8b:63:9e:bf:21:73:83:bf:70:76:4f:96:
57:93:8e:13:ac:3f:c8:b5:8f:37:79:5f:04:3e:4b:
59:96:e3:e6:9e:2f:e3:98:c0:01:86:b7:1c:ea:3c:
e4:f0:0b:6d:78:5f:68:a1:c6:18:b5:b1:5a:7b:ac:
fb:36:70:d2:6c:23:ae:66:f2:c2:29:d0:78:ab:b7:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:38:E2:DA:E7:9E:65:2C:8F:D6:9A:D5:D6:6D:DD:06:1C:75:61:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90B246DCC51F11EFB1BF8798762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.49.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b2:69:00:5d:97:4b:b0:c7:3a:b7:a2:4a:f8:58:f1:a8:7d:
d4:1c:a6:c5:b6:a0:5e:07:3d:f8:37:31:10:8a:6d:92:0c:8e:
e8:2d:18:a2:ae:54:9f:f3:62:52:87:94:a1:c5:88:bf:38:b7:
57:bd:8e:8a:b8:26:53:0e:21:ec:89:89:a6:36:7b:43:4d:91:
d4:5c:26:47:03:6b:83:28:ce:95:ce:75:d0:4c:c0:49:d7:a7:
30:08:9f:0e:3d:b4:70:2a:71:12:df:39:57:6f:4e:1d:d5:8c:
93:8b:94:02:c6:0f:aa:e4:fa:6a:fb:ca:77:81:a6:7f:f3:78:
e3:f5:18:7a:a6:64:0a:08:4c:52:8d:6c:a3:30:a2:32:23:22:
86:04:51:f4:77:bf:c1:21:49:9b:88:54:fd:f7:2f:d7:b8:39:
8e:08:dc:33:8a:38:d5:63:c0:5b:1a:7d:81:66:c9:55:31:41:
46:78:d6:97:e8:38:3c:53:3a:9c:70:62:96:c0:05:3f:ab:c4:
74:f4:be:a2:9c:3e:f3:ac:62:01:f4:77:9c:ff:55:f8:e3:82:
41:81:c3:ce:92:03:e4:4d:7a:75:70:48:a2:80:e2:8d:fe:28:
ed:32:7f:13:df:27:5f:3a:8b:07:69:db:85:18:4c:b6:29:b6:
7a:cb:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:42 2025 by rpki-client