Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC110C72C19311EFAEAE4C73762E951A.roa
File: AC110C72C19311EFAEAE4C73762E951A.roa (raw, json)
Hash identifier: C1PPqLSOavjahmlC5AkIkZrC/i5KM2aV+ob0BEHuHIU=
Subject key identifier: 97:A1:98:BD:DD:C6:BD:ED:54:1A:68:F9:A5:4C:64:41:11:9F:AD:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01200F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC110C72C19311EFAEAE4C73762E951A.roa
Signing time: Tue 24 Dec 2024 01:09:06 +0000
ROA not before: Tue 24 Dec 2024 01:09:03 +0000
ROA not after: Wed 10 Dec 2025 01:09:03 +0000
asID: 984
IP address blocks: 154.90.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73743 (0x1200f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:09:03 2024 GMT
Not After : Dec 10 01:09:03 2025 GMT
Subject: CN=676a09b2-b9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:a9:99:15:ed:6e:7e:eb:f9:10:92:e0:a5:
0f:c7:b0:23:fa:93:dc:27:3e:a9:58:48:9a:16:86:
4b:4f:82:38:fa:f5:d4:9c:d8:89:ed:73:3f:2e:dd:
c2:6e:86:51:b8:6f:bc:d1:c9:00:86:3a:7f:30:27:
f7:aa:29:ee:4f:a4:b5:4b:41:a8:30:04:50:5e:0e:
af:a0:a5:89:03:98:30:75:38:14:1a:a1:42:a3:3e:
3d:af:f8:29:65:f3:69:3e:fb:85:15:cf:0f:c9:3b:
cf:27:92:c0:fe:3d:7b:4d:86:8a:de:10:b5:90:43:
65:c5:8c:a0:c4:28:93:95:38:4e:0b:96:70:c6:e3:
3c:d8:96:18:93:fe:9a:ac:6c:4b:38:11:bd:3e:b4:
a1:b4:c6:08:4b:82:57:d6:f7:e5:9e:c5:ce:aa:ba:
65:d4:a4:40:cf:b7:dc:4b:cf:96:c4:73:31:72:12:
b5:49:32:2d:55:11:43:3c:0c:9a:b2:94:7a:8c:b8:
1a:b8:c9:bd:71:01:29:58:a6:7e:81:92:a4:d8:ce:
e2:d8:e1:8b:52:84:d3:ec:e5:19:83:9b:ee:66:9a:
ed:2d:a8:b6:b0:18:c4:84:00:29:65:72:7f:29:17:
16:98:78:0b:a6:b2:d2:f8:e1:56:57:a7:4e:7a:5e:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A1:98:BD:DD:C6:BD:ED:54:1A:68:F9:A5:4C:64:41:11:9F:AD:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC110C72C19311EFAEAE4C73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.158.0/24
Signature Algorithm: sha256WithRSAEncryption
92:cc:2c:d9:32:b4:33:85:3a:a9:38:2d:3a:ca:aa:e8:6f:b7:
c8:cf:d9:2f:d1:e3:3b:e5:88:1d:ef:bc:ec:dc:ba:c5:e7:97:
a7:02:b9:cf:c1:6c:62:6a:cd:8f:87:2e:5e:45:50:65:f2:35:
c0:57:7a:7e:0d:ee:14:41:ae:fc:7b:9b:2a:d0:5a:cb:e1:ae:
a6:73:a6:3d:a0:70:2f:31:8a:df:54:6d:4a:8e:6f:6a:17:09:
a0:06:e8:55:65:31:87:26:7e:31:2b:f4:2c:83:94:c5:ba:df:
69:7d:94:fa:3a:f9:ed:3f:2f:d9:1a:83:3d:ac:8f:31:8b:98:
e2:6b:87:eb:4b:c0:24:21:3d:4f:8b:9f:23:21:17:c1:ad:3d:
7a:e7:35:6e:70:90:6d:6d:2a:a4:b1:11:3c:be:31:fb:03:8c:
b7:37:e8:62:41:e5:36:be:15:90:e3:d2:17:9e:ae:0b:dc:a7:
93:4c:24:6a:be:ff:c6:90:29:6b:01:c3:5d:99:2f:e0:65:a1:
00:e8:6d:b8:4c:76:db:16:06:7c:df:c4:fd:f1:63:71:7f:df:
eb:1b:a7:73:9d:6a:a6:49:f4:42:14:0f:b8:60:90:8d:27:0a:
fa:f3:0d:b4:0b:ea:8e:ef:9f:00:76:65:b6:14:58:55:34:70:
04:fa:e2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:55 2025 by rpki-client