Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADFC83F4C1A211EFBC14D662762E951A.roa
File: ADFC83F4C1A211EFBC14D662762E951A.roa (raw, json)
Hash identifier: Dyr3ywDqvlEPTGB9ISSMbSu6XRM6Y2AibNegviP6wJ0=
Subject key identifier: 59:F6:54:E0:A6:6C:B9:CE:40:55:EE:90:63:ED:3D:0C:0E:93:C4:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADFC83F4C1A211EFBC14D662762E951A.roa
Signing time: Tue 24 Dec 2024 02:56:32 +0000
ROA not before: Tue 24 Dec 2024 02:56:28 +0000
ROA not after: Wed 10 Dec 2025 02:56:28 +0000
asID: 984
IP address blocks: 154.90.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73927 (0x120c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:56:28 2024 GMT
Not After : Dec 10 02:56:28 2025 GMT
Subject: CN=676a22e0-27be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:5f:4b:c6:a8:3c:4e:4e:af:a5:25:91:17:
c2:e8:2b:65:a2:58:d1:34:51:7b:9a:08:04:15:a4:
23:af:5e:a3:13:91:4a:ad:69:cb:7c:86:0d:51:79:
0e:04:73:4a:ba:a9:3a:78:59:01:75:fe:59:d4:05:
c6:3b:16:d2:f7:70:5c:65:77:ed:03:35:16:69:1a:
ef:fd:ec:d2:f1:87:d2:bd:2a:c6:8d:b5:81:c8:c7:
9c:2b:1b:47:ac:08:fd:e0:6f:db:4d:97:9b:72:a0:
33:e7:6c:83:0b:70:57:86:e2:24:87:49:d8:86:1d:
85:f7:73:a6:cf:24:68:ab:0a:67:67:53:40:7b:e5:
3b:42:d4:c5:95:0b:d9:40:13:26:67:5f:be:33:4d:
ce:a8:48:30:ac:74:55:39:fa:8b:91:92:93:2b:8e:
5f:82:3a:35:43:1e:84:14:a0:11:80:54:94:30:df:
0e:d4:ff:b2:73:2d:7d:5e:1d:d6:01:50:e7:ed:de:
74:38:76:27:89:2b:64:91:f3:3e:36:b5:c0:6d:5f:
9b:de:04:09:aa:16:12:be:f6:bc:77:35:29:4c:6d:
98:ff:a0:41:b4:97:98:b5:5a:ec:a3:2a:c1:17:7b:
73:92:85:16:b6:aa:ec:02:b6:e5:e9:eb:7b:b6:be:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:54:E0:A6:6C:B9:CE:40:55:EE:90:63:ED:3D:0C:0E:93:C4:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADFC83F4C1A211EFBC14D662762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.255.0/24
Signature Algorithm: sha256WithRSAEncryption
00:07:34:81:25:56:27:13:af:48:44:3a:50:28:bd:9f:58:8c:
fa:54:33:e6:41:af:c6:a2:dd:d6:fa:8b:f4:6c:14:33:43:fd:
1f:10:69:6f:f5:c4:f2:b2:ea:e4:eb:83:c0:ef:2a:d4:fa:d1:
30:86:e4:ab:33:f2:e4:a3:85:f7:b1:81:28:92:b8:0c:99:3c:
6a:a2:8a:a5:df:eb:2a:0f:76:99:49:e7:9f:db:d4:00:84:17:
03:f4:b2:d0:cb:19:4b:d2:68:d3:ce:fc:04:b8:36:a5:59:1b:
92:c8:b6:e5:2a:08:53:a2:bf:cd:3f:29:3b:41:6f:15:d7:e3:
22:09:b6:a2:80:af:ce:74:0a:8d:63:44:dc:b2:b4:cb:bd:8c:
42:52:32:16:af:98:35:bb:87:0c:1c:bc:d3:2d:56:11:97:ae:
5b:2f:f8:5e:ae:08:ba:cc:e6:cb:91:33:21:6d:ec:31:d6:b0:
43:e8:57:b1:5f:7d:1d:a0:d9:e9:7d:59:ad:d3:7b:5c:83:03:
39:56:07:38:f1:21:38:b5:2e:d8:a1:0b:7b:5d:b1:89:fc:39:
14:1a:44:5d:d1:fd:ed:15:64:3e:0e:d5:f4:c6:f8:aa:f7:20:
d9:73:6e:95:76:5c:6b:ad:e1:07:1e:49:0b:58:f8:21:59:57:
3f:75:be:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:20 2025 by rpki-client