Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97544162C19F11EF96CE214C762E951A.roa
File: 97544162C19F11EF96CE214C762E951A.roa (raw, json)
Hash identifier: dcFYwSemP2VNp+Qw+84JQGHg6r0sZgfiVS4263RWQt0=
Subject key identifier: D1:EA:C8:9F:1A:65:51:8A:09:13:F7:96:CD:DF:D1:27:AA:AD:BF:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97544162C19F11EF96CE214C762E951A.roa
Signing time: Tue 24 Dec 2024 02:34:25 +0000
ROA not before: Tue 24 Dec 2024 02:34:22 +0000
ROA not after: Wed 10 Dec 2025 02:34:22 +0000
asID: 984
IP address blocks: 154.90.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73889 (0x120a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:34:22 2024 GMT
Not After : Dec 10 02:34:22 2025 GMT
Subject: CN=676a1db1-48f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:d0:ca:fd:74:8a:d3:9c:e6:cf:9f:88:d1:
77:95:c2:f6:28:20:49:a1:ac:ac:86:01:b9:2d:7e:
ea:3b:27:c7:1c:b7:0d:d6:f3:0f:59:79:2f:cd:88:
82:57:6e:fb:1e:02:61:7a:b3:e0:d7:48:6c:ad:1c:
21:23:d5:bc:4b:c7:d1:c5:56:b0:95:c0:a5:16:88:
9c:0d:19:08:e9:5a:86:d3:b0:54:eb:54:3b:80:e7:
71:e6:53:cf:7d:34:92:d1:5a:01:d0:23:9c:e2:49:
c1:7c:e7:1c:d8:64:23:83:fa:a7:3b:fc:d8:eb:f1:
e5:fc:10:f2:b8:67:f4:2e:0d:09:f2:a1:a8:36:b3:
ae:c5:3a:db:4c:9d:2a:7f:7a:86:71:e2:7e:43:bb:
f1:cc:25:ac:c7:9b:b8:03:e7:30:6b:60:01:a7:9c:
7c:de:85:37:87:52:64:4f:1d:60:e7:f5:45:ae:57:
b2:8a:e9:df:d5:4c:8d:81:94:ef:ad:0a:c2:2a:4e:
06:fe:64:d8:c4:41:a2:eb:e6:1e:90:fc:26:24:01:
2b:bb:47:06:ea:ad:50:db:a2:e5:d2:d6:0b:05:67:
ab:83:39:6d:d8:41:7a:aa:e6:74:09:ca:28:a8:35:
3d:83:eb:7e:93:51:8c:ce:06:01:16:b2:09:98:83:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EA:C8:9F:1A:65:51:8A:09:13:F7:96:CD:DF:D1:27:AA:AD:BF:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97544162C19F11EF96CE214C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.236.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:c6:d8:43:54:8c:96:31:b6:a4:fd:78:b6:6a:6f:c1:87:51:
d5:40:9d:1d:8a:86:59:59:75:cb:b2:cd:3b:ef:99:7a:24:1c:
69:43:2c:7a:e3:f8:0e:bf:b9:e9:d0:09:a2:c4:44:48:75:62:
ea:34:37:82:93:e2:13:10:ba:6c:49:a6:7d:ee:1c:eb:c6:3f:
37:c7:5c:d0:43:fe:bf:82:91:9f:df:dd:08:ee:63:54:64:4c:
a3:e3:f0:d6:5d:e5:20:38:50:89:69:60:b2:9a:93:70:35:81:
bf:6e:36:be:d5:41:a7:1d:a5:88:f7:fd:d4:c6:eb:77:82:59:
2e:0d:7c:37:5b:20:0f:38:24:8c:52:53:77:f4:70:cb:4a:a1:
cc:8d:c4:cf:e9:1b:0a:a8:89:dc:51:a1:e9:1d:42:fd:3b:b1:
80:b5:2b:0b:27:9f:17:e3:8e:d0:31:c5:30:cb:13:06:59:2b:
56:7e:35:8c:9c:5e:1d:b0:ff:38:73:77:a0:df:9e:a0:47:96:
4d:2e:cc:be:3c:c0:31:e9:1c:9d:34:dc:85:e4:f6:26:c6:50:
de:8b:72:2a:8a:0b:de:75:90:4b:e0:cf:5d:59:99:5c:c2:8e:
ac:c8:93:3f:d9:7a:ab:77:97:7d:64:43:a8:5f:a6:9b:6b:e8:
69:ec:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:03 2025 by rpki-client