Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9189670CC1A011EFB8E3B653762E951A.roa
File: 9189670CC1A011EFB8E3B653762E951A.roa (raw, json)
Hash identifier: eOK6kNm7wvlt4XMUimZKlY7nxAJ7Ot1LXPDbsmzPZOA=
Subject key identifier: 70:2C:39:64:AD:53:15:32:17:35:6C:05:5D:E3:C8:E3:6A:F6:84:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9189670CC1A011EFB8E3B653762E951A.roa
Signing time: Tue 24 Dec 2024 02:41:25 +0000
ROA not before: Tue 24 Dec 2024 02:41:22 +0000
ROA not after: Wed 10 Dec 2025 02:41:22 +0000
asID: 984
IP address blocks: 154.90.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73901 (0x120ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:41:22 2024 GMT
Not After : Dec 10 02:41:22 2025 GMT
Subject: CN=676a1f55-8da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:c0:b3:7f:85:3c:5a:2c:62:4b:f5:5e:41:
fc:a1:e5:f3:0c:a7:ca:49:47:46:38:ba:52:e4:1f:
87:39:a1:56:9d:76:02:54:ff:1e:47:3c:df:e0:54:
68:a1:7b:02:fa:20:4e:f1:34:ef:f0:88:00:87:43:
75:f2:2c:f3:a7:22:e4:2b:7e:2e:ad:ff:2e:c7:dc:
bb:05:c8:37:a1:2c:a1:5b:7d:92:66:f4:92:21:38:
ff:d7:1b:f2:52:fe:69:98:d4:20:37:83:ee:39:af:
7d:f7:71:bb:57:33:86:bc:22:25:2f:1d:bf:27:f6:
b8:2f:d1:41:91:73:be:5a:49:33:8e:c8:8a:51:c2:
73:53:7e:7c:bd:76:80:a3:0e:b3:96:49:b8:b9:b5:
b8:a6:6f:25:b5:ba:68:b2:7f:5b:9b:26:60:a4:d7:
12:d5:76:89:02:24:43:27:9d:9f:d7:88:21:c1:c1:
a8:17:6d:15:03:7e:de:9e:20:18:84:5a:fa:04:38:
0f:bc:de:29:6e:6e:e5:f8:bb:a9:a7:df:bf:cc:7b:
d0:c5:0b:d6:d7:90:4d:a7:f5:94:e8:3c:d1:c8:29:
0f:f2:9d:fd:4b:58:f2:de:c6:b9:26:15:83:ed:ff:
80:e9:95:2e:9f:e2:88:8c:5b:d4:de:c9:2d:34:e0:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:39:64:AD:53:15:32:17:35:6C:05:5D:E3:C8:E3:6A:F6:84:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9189670CC1A011EFB8E3B653762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.242.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:03:42:97:58:e3:79:8f:c4:c9:f5:01:ee:03:bd:94:bc:7d:
f1:a8:fa:04:b9:a9:67:67:7a:59:75:1b:4a:d6:18:b8:07:e1:
be:f0:0d:25:53:8c:e9:5e:91:ce:11:ee:bf:9a:b0:da:02:7a:
a4:30:fa:49:a5:55:af:ae:8f:76:3a:e2:c8:84:ff:81:f8:1d:
33:bd:5e:6f:c1:0b:a4:ca:a3:c5:c9:55:2b:7a:f5:3f:c6:60:
c9:cb:6d:72:a8:23:59:77:bf:e8:0c:a2:07:70:5d:26:de:56:
a6:84:62:95:73:fc:2a:61:5c:bd:28:65:1c:ab:80:88:b1:5f:
75:2c:7a:4a:84:9e:d3:3f:f5:f7:e4:57:8f:75:24:4d:93:0e:
03:47:e5:58:42:3b:70:21:73:25:da:f3:3e:55:66:a6:7c:77:
31:02:37:4b:df:51:84:fd:9a:7d:bd:92:37:d7:da:e3:2a:37:
19:7c:68:13:8b:6c:81:67:4f:e9:1d:a6:67:f1:f9:99:bf:54:
c2:30:c0:d4:0e:f1:cd:8b:80:98:e2:10:11:d1:ee:7d:c4:14:
55:62:12:c1:ff:22:73:12:e5:77:48:41:89:7b:b9:c3:d8:96:
a0:58:c8:ea:86:4f:7d:ff:5b:df:fd:3d:14:af:b8:4c:1a:ce:
27:2e:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:33 2025 by rpki-client