Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC10DD36C0F411EFA25D949A762E951A.roa
File: BC10DD36C0F411EFA25D949A762E951A.roa (raw, json)
Hash identifier: +Tsj9luW+DJZUvO9aF1BgNhfc6KyGSZscTqVacjMPXI=
Subject key identifier: D2:2C:B5:B0:C9:9C:14:BE:90:BE:B2:F5:09:CE:6C:6F:64:4A:F9:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC10DD36C0F411EFA25D949A762E951A.roa
Signing time: Mon 23 Dec 2024 06:11:23 +0000
ROA not before: Mon 23 Dec 2024 06:11:19 +0000
ROA not after: Wed 10 Dec 2025 06:11:19 +0000
asID: 984
IP address blocks: 154.90.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73604 (0x11f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:11:19 2024 GMT
Not After : Dec 10 06:11:19 2025 GMT
Subject: CN=6768ff0b-506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:eb:60:e5:8a:9a:1d:51:b3:3f:5b:1f:42:
25:20:da:5e:dc:39:34:51:69:fb:c6:14:f3:d7:e4:
32:c2:93:ce:cc:80:40:74:93:4c:46:19:26:13:e1:
bc:09:28:53:b4:63:55:6e:79:dd:e6:aa:e4:49:48:
da:a9:47:83:ed:ad:d2:69:8f:c4:62:56:a8:5d:18:
17:ce:1e:ba:21:45:52:fa:d6:2b:ee:a9:e6:c5:31:
6e:4d:6f:b5:0b:ce:cc:4f:cc:cf:88:07:28:8a:fb:
ea:d4:38:35:b3:3a:bc:2a:06:0d:5f:86:5d:b8:a8:
65:2c:76:87:11:de:7f:3e:45:58:a1:98:26:85:3f:
f9:3c:2b:1c:60:76:cd:1d:8e:7d:4c:c9:3f:5d:bf:
82:87:b0:ad:10:49:49:6e:b4:4a:67:d1:e3:e8:10:
e3:91:08:9d:50:01:4c:4a:ed:aa:0d:88:de:dd:1c:
a7:84:80:58:83:cd:46:9f:4e:30:12:2e:54:7e:b7:
53:bc:84:d0:cd:32:4f:b5:b4:fc:14:bb:b1:41:cb:
aa:2d:f2:f1:21:32:d4:8b:e8:9e:c7:de:ac:a3:f2:
54:dc:bf:3f:df:b6:cf:f4:4b:72:41:17:8b:47:c9:
81:3f:c3:57:9c:da:e1:1e:4b:a8:6e:89:c6:a7:39:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2C:B5:B0:C9:9C:14:BE:90:BE:B2:F5:09:CE:6C:6F:64:4A:F9:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC10DD36C0F411EFA25D949A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d4:17:65:9f:96:09:95:ef:33:54:a2:cd:f1:b9:7f:4b:92:
15:71:67:db:ea:2a:56:34:6c:0b:f6:53:b5:7c:fc:ca:f7:a6:
16:ef:81:69:84:f7:8d:40:b1:59:4a:af:3a:6f:d2:bc:fd:5c:
0a:4a:71:bc:48:e1:5a:1e:a8:bb:a8:2b:a4:e5:7e:58:4e:f9:
62:e5:f2:00:a0:69:a2:e3:b7:ff:56:ed:bb:3d:a6:5f:b5:da:
25:1a:e2:fb:2e:b5:c2:83:59:0b:86:a4:fb:4a:39:94:bd:6e:
09:36:0e:1f:61:20:17:d0:aa:a6:f2:b2:87:f3:fe:59:04:3a:
48:5b:8d:71:26:5a:a9:95:d6:b1:26:12:df:c9:83:e4:03:1f:
55:1c:da:37:1f:25:9a:ee:68:33:15:43:c7:6a:23:2d:cc:ae:
24:e1:d0:52:c0:9e:4c:6b:e0:bf:ec:48:28:44:28:22:ba:e6:
dc:db:0e:4f:ea:c6:94:ff:b0:a3:b3:20:9c:b8:94:95:93:28:
e3:30:ef:97:d5:ef:46:9d:a9:9c:ed:f5:fa:cd:5b:7b:1d:81:
4a:13:4a:de:ad:b0:fa:12:78:24:30:4c:1e:e5:ba:7d:2b:4f:
59:77:03:6b:34:68:12:7a:14:71:69:41:3a:f9:4f:c3:73:f2:
a4:0e:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:30:00 2025 by rpki-client