Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5E93806C1A111EFA54B415B762E951A.roa
File: B5E93806C1A111EFA54B415B762E951A.roa (raw, json)
Hash identifier: JRktiDR7VXr6lgtHmtsPOjCjLJNOiCt3fongj+xns6Y=
Subject key identifier: D0:91:55:EF:49:A3:29:0C:67:86:CC:3B:AF:B5:5E:10:72:EC:B9:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5E93806C1A111EFA54B415B762E951A.roa
Signing time: Tue 24 Dec 2024 02:49:36 +0000
ROA not before: Tue 24 Dec 2024 02:49:32 +0000
ROA not after: Wed 10 Dec 2025 02:49:32 +0000
asID: 984
IP address blocks: 154.90.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73915 (0x120bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:49:32 2024 GMT
Not After : Dec 10 02:49:32 2025 GMT
Subject: CN=676a2140-2401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:95:b4:dd:5a:c3:cd:51:1b:44:f8:0b:64:78:
72:53:be:0f:2c:e2:da:e8:e7:f6:ec:93:cf:ce:52:
3c:9c:91:c1:6d:97:7a:4d:74:f6:ea:ac:ed:66:bc:
35:cb:ce:ef:0a:9e:89:d3:fd:77:9d:27:fb:f8:81:
b6:ca:5e:31:a4:59:fb:f2:68:81:46:c1:8b:13:7d:
f3:9b:b1:77:50:6a:86:00:83:85:c5:ed:6d:aa:ff:
5c:c8:15:68:25:d1:c1:70:45:49:fa:7b:8a:97:9e:
7a:fa:f8:05:98:18:d2:78:2b:d6:37:a4:d4:96:58:
22:2e:1a:b4:ed:52:d1:8f:b0:bf:f1:8f:f7:97:68:
5f:ad:37:5e:d0:fc:e8:7e:f7:3d:c2:a3:06:56:b9:
50:c2:53:41:f3:cb:53:a8:44:0b:00:36:1c:3e:18:
24:3b:85:61:47:75:08:69:75:0e:42:2b:73:00:7d:
51:6b:ec:f3:76:52:0c:e3:e9:73:25:af:af:d2:a0:
ec:15:07:e6:4d:22:83:49:15:85:cd:fb:c7:73:d5:
bb:c5:7b:de:fc:26:c2:14:b4:41:78:83:a7:c6:62:
04:31:7b:0f:97:09:4b:db:50:00:b0:94:99:f6:10:
6d:d1:b6:d0:42:a8:c8:de:2b:f7:4c:32:7d:df:01:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:55:EF:49:A3:29:0C:67:86:CC:3B:AF:B5:5E:10:72:EC:B9:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5E93806C1A111EFA54B415B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.249.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:14:ed:ab:29:90:e9:5c:4e:4a:f9:59:60:7b:53:90:d3:bd:
17:83:e8:9b:76:47:34:ca:0b:b0:da:7b:68:e3:42:ba:93:8b:
5a:1e:f5:c9:c5:ef:8e:de:00:93:44:c3:00:44:c7:26:83:59:
c4:22:55:f1:bc:33:70:55:c6:ba:b6:6c:ac:46:34:a4:9d:d9:
d5:94:b9:b5:0d:9b:0a:9c:41:29:38:02:da:97:a2:e1:30:b5:
60:39:d5:0f:b8:c5:dd:1b:3a:dd:51:1d:a8:f7:8b:29:82:a3:
e7:7c:5f:53:0f:c9:da:d4:be:06:a7:45:a5:07:d6:4c:c4:04:
85:34:d8:36:15:18:2f:09:46:fc:f9:2b:cf:b4:4b:28:28:49:
ee:e4:11:fa:73:dd:b8:37:7c:62:7c:45:79:a9:f0:9b:8a:ce:
97:92:0b:ae:0d:b4:81:f6:c1:e0:43:92:5f:ee:fc:5f:4d:02:
eb:55:eb:68:a6:36:e9:9e:c7:97:39:5e:f8:40:4e:3d:34:fe:
59:ac:33:b8:2a:ce:c9:23:cd:7c:e0:c8:5d:e0:20:04:8c:0b:
37:91:16:08:87:9c:a6:09:61:67:af:17:db:2f:d9:3e:08:77:
86:95:2f:c9:c7:3f:4b:a9:f1:50:ac:b3:5b:63:33:76:57:e5:
85:f9:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:36 2025 by rpki-client