Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B030D2CCC0F011EF85181181762E951A.roa
File: B030D2CCC0F011EF85181181762E951A.roa (raw, json)
Hash identifier: YhvY88sPrBfIXhZALzCk+2tScmK0NB2D7ZfA1lCCvx8=
Subject key identifier: DB:D4:1E:33:72:3A:FA:F0:C2:CF:43:A1:D9:C2:E9:34:1E:23:95:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B030D2CCC0F011EF85181181762E951A.roa
Signing time: Mon 23 Dec 2024 05:42:25 +0000
ROA not before: Mon 23 Dec 2024 05:42:22 +0000
ROA not after: Wed 10 Dec 2025 05:42:22 +0000
asID: 984
IP address blocks: 154.90.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73560 (0x11f58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:42:22 2024 GMT
Not After : Dec 10 05:42:22 2025 GMT
Subject: CN=6768f841-2177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:f8:47:64:63:0a:98:33:71:4c:16:56:3b:
e3:b6:34:21:0a:48:be:b0:45:f8:b7:fb:e5:da:cd:
69:c9:6b:8f:60:ea:84:c7:ba:75:fa:c4:c5:af:c1:
39:54:95:be:a3:8d:34:bd:15:29:8f:81:7b:e4:6f:
4d:f7:9d:bd:2e:48:a0:05:5a:82:2b:9b:eb:45:d2:
2f:8a:13:29:b6:ab:09:a2:69:8b:3b:79:7c:86:7e:
55:2f:d9:9f:ed:8c:ea:46:fd:2b:64:89:71:58:94:
0d:1a:d9:d2:02:f6:51:63:59:e1:22:16:dc:7d:13:
9f:fc:c7:88:c1:e3:28:ab:ff:9b:ea:83:44:28:37:
d7:b4:35:e2:82:98:d0:92:cb:89:7b:51:d9:19:cf:
7f:90:21:35:52:97:6b:a8:8d:17:46:ca:00:d1:22:
29:f0:b3:ee:fc:98:bd:d9:73:cb:a9:61:a2:1f:55:
f2:c1:e8:d3:e1:80:36:3e:9d:40:a2:f2:f2:8a:85:
c3:b6:c5:a8:4f:8d:32:8c:b7:9f:f9:4a:c7:15:be:
11:c7:99:24:7e:48:4a:9f:3e:65:eb:b5:2a:67:6e:
55:22:3b:bb:2a:f7:9b:34:27:ca:1e:5a:bf:2b:34:
01:25:23:15:f4:e7:8b:27:50:b1:fc:a3:46:76:80:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D4:1E:33:72:3A:FA:F0:C2:CF:43:A1:D9:C2:E9:34:1E:23:95:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B030D2CCC0F011EF85181181762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.98.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c5:a4:e6:28:5b:ce:df:b3:f8:49:1d:f4:af:8e:48:c0:d0:
b0:9e:d3:ad:41:a4:0d:0f:89:32:b8:a5:34:4f:3b:58:c7:e1:
fc:58:98:dd:69:99:2e:b2:59:d7:91:53:fb:d7:80:99:65:fd:
38:8a:7c:98:70:a5:bb:5a:c8:50:8d:1b:d9:e9:8e:32:63:78:
3c:c8:62:a9:b9:bb:5f:bc:43:17:a2:df:02:60:32:32:8b:16:
63:df:ce:13:6a:cd:16:ea:92:33:c0:c8:25:51:77:2c:71:50:
11:9c:5e:b2:57:19:d9:de:81:69:fb:f8:75:65:e5:31:c4:f0:
fc:0f:7c:9b:fa:19:11:26:4a:fb:30:05:03:ec:ae:71:c0:a9:
3d:b2:65:18:37:6c:3a:9b:e2:99:d6:3c:ef:c4:e1:a8:0e:32:
49:64:95:48:e7:a9:04:50:56:81:ec:aa:2c:92:77:e3:b8:46:
d9:13:43:e3:18:f6:33:9e:35:52:7d:56:ab:bd:15:60:81:40:
64:b2:9e:30:cb:3f:9c:08:bb:8f:c4:0e:2b:e9:d8:b6:55:91:
c4:d5:7a:6a:d2:fe:7b:b7:61:eb:24:ff:1e:d5:d9:43:e4:12:
35:27:40:3a:89:01:23:25:e9:5a:d8:68:00:cc:f0:52:75:04:
27:57:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:36 2025 by rpki-client