Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A70463C0C0F611EFACD629A7762E951A.roa
File: A70463C0C0F611EFACD629A7762E951A.roa (raw, json)
Hash identifier: Pqw0wRlH1PYCl4jPf/kcdcDHDgdRMY0uSmyr7kXv0C8=
Subject key identifier: 6A:4A:C1:77:3E:52:0A:E7:78:D7:B2:BC:89:96:1F:CC:E7:B1:31:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A70463C0C0F611EFACD629A7762E951A.roa
Signing time: Mon 23 Dec 2024 06:25:07 +0000
ROA not before: Mon 23 Dec 2024 06:25:03 +0000
ROA not after: Wed 10 Dec 2025 06:25:03 +0000
asID: 984
IP address blocks: 154.90.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73622 (0x11f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:25:03 2024 GMT
Not After : Dec 10 06:25:03 2025 GMT
Subject: CN=67690243-1f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:a9:fe:07:a4:a0:d8:24:2b:0b:46:5c:4c:
23:f2:00:6a:13:9b:49:a1:d4:5b:d9:37:c1:91:f8:
7f:62:a1:88:bf:a7:c9:6b:3f:0a:a2:72:fd:f8:6a:
67:d1:1e:20:ab:17:4b:c1:4b:b6:96:f0:89:9c:27:
3c:19:d8:dc:f3:02:1f:4e:48:d1:b7:15:b2:4d:9a:
57:d7:70:88:61:4d:65:c6:f3:38:24:82:64:25:06:
3f:c6:0e:3d:dd:24:bf:1c:4c:bb:a5:61:87:90:81:
e5:67:f7:13:01:f4:67:ac:46:c3:39:3d:51:80:f1:
dc:b4:10:c0:93:fd:3a:80:01:69:ae:97:b6:a8:22:
df:00:f6:c9:3c:35:5c:a5:c2:53:6c:34:1a:79:98:
49:52:f8:c4:40:41:1c:aa:e8:0f:16:fb:eb:50:bb:
3a:ff:8e:7b:88:98:61:b4:df:cc:82:47:6a:74:f8:
3c:84:8d:5d:0d:0e:b7:90:64:7b:8c:7f:b4:e8:20:
6a:95:6d:04:b8:5c:9d:83:59:c8:4a:7f:a2:63:88:
9a:39:75:b5:de:5e:2d:65:b2:93:35:19:ba:cc:33:
b9:40:e1:ac:2f:6c:d7:c0:cc:ac:be:9d:3e:23:2e:
e7:00:b2:01:39:c4:90:39:83:a0:de:be:f9:1e:85:
59:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4A:C1:77:3E:52:0A:E7:78:D7:B2:BC:89:96:1F:CC:E7:B1:31:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A70463C0C0F611EFACD629A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.143.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a9:93:50:0a:c0:50:09:3c:4d:02:51:9b:fb:3d:ff:f7:3a:
fd:78:8e:59:67:f1:7c:c8:b9:c2:8f:bb:48:71:03:2a:b2:ca:
13:62:0d:79:7e:a3:00:61:43:65:a2:46:b4:33:28:76:63:a4:
1b:b0:71:52:2d:97:d0:2e:97:0b:c4:7c:03:0c:59:a1:59:2a:
8a:b2:73:7c:d2:21:ef:af:45:b3:91:5f:e6:9a:88:2c:42:e6:
6f:66:f2:04:84:77:2a:d7:31:19:c7:61:6e:57:be:e2:03:58:
2b:bc:e3:c4:d2:aa:42:f2:48:a1:71:15:c1:15:db:b5:17:7f:
ea:94:5e:58:06:6c:8f:89:b6:c0:99:cf:18:f7:73:f8:a5:fc:
44:77:2a:38:b9:ca:d8:d0:ca:a6:d8:4f:82:77:ab:85:39:53:
4c:58:54:14:df:f2:a4:4f:ea:22:ef:2c:aa:14:01:30:81:6c:
77:1b:03:de:05:dc:5e:24:c9:3a:dd:60:6d:63:48:42:3e:2d:
9a:ce:09:c0:9f:cc:5e:44:bc:10:b4:48:c3:c4:8d:b9:59:b8:
db:62:c5:a4:d2:c9:96:09:0a:2b:a6:f8:f5:2b:c4:57:9b:39:
15:2f:62:82:16:5a:48:c7:17:1b:c9:7b:c5:f0:59:2f:5f:27:
41:a7:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:25 2025 by rpki-client