Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0D2F0F2C19E11EFAA47AB46762E951A.roa
File: C0D2F0F2C19E11EFAA47AB46762E951A.roa (raw, json)
Hash identifier: DQ21ty/ceUyWAPukW78JQkrVBXr68WzwWj3inuQ6b6Q=
Subject key identifier: A8:81:2E:CF:DD:E5:A6:44:87:A3:8D:5F:17:CE:12:6C:AC:BC:AF:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012097
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0D2F0F2C19E11EFAA47AB46762E951A.roa
Signing time: Tue 24 Dec 2024 02:28:26 +0000
ROA not before: Tue 24 Dec 2024 02:28:22 +0000
ROA not after: Wed 10 Dec 2025 02:28:22 +0000
asID: 984
IP address blocks: 154.90.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73879 (0x12097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:28:22 2024 GMT
Not After : Dec 10 02:28:22 2025 GMT
Subject: CN=676a1c49-15b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:ec:e7:66:c8:74:96:88:d8:05:a3:4b:2c:
35:2e:18:be:36:99:48:b3:17:b9:6f:d3:5b:c7:3e:
2c:ac:34:80:c4:da:75:24:29:7b:98:a7:16:fc:d2:
0f:2d:45:f2:7d:8d:15:b2:03:db:d4:99:26:14:fb:
79:ad:63:e1:fc:07:75:88:a6:e7:01:b0:74:16:19:
b5:5d:21:a3:0a:20:4e:5f:85:7c:6a:df:35:19:41:
be:0d:3c:15:0f:ef:9c:ca:e5:3e:28:8a:58:81:75:
bf:47:96:dd:f0:1c:6b:af:20:7e:25:47:45:86:d1:
7c:e2:7e:29:43:02:94:a1:af:30:35:26:c4:b7:21:
96:c7:bf:65:96:59:c6:9b:35:62:e1:55:3d:ac:15:
f7:6f:be:05:7e:47:5f:02:04:09:ff:c7:7a:b8:96:
79:fe:3c:33:6d:48:e0:cb:84:6c:9d:d5:a2:be:4c:
fc:94:29:2f:3c:37:bb:37:b9:45:6c:1b:b4:99:d1:
0e:5f:5d:57:06:4e:f7:5e:83:d3:78:0c:11:97:7a:
0f:39:9a:0e:8d:b7:45:35:5b:a1:0e:f9:ee:c9:0c:
71:b9:3d:3a:a5:82:23:8f:ce:89:fa:54:0c:25:58:
46:34:90:aa:56:c8:8f:9b:1e:9a:db:70:b9:34:21:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:81:2E:CF:DD:E5:A6:44:87:A3:8D:5F:17:CE:12:6C:AC:BC:AF:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0D2F0F2C19E11EFAA47AB46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.231.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0c:c4:ed:34:55:2f:5e:8d:c8:46:9a:3f:ce:62:79:cc:a8:
72:e8:9e:c6:a1:1e:41:74:61:c6:66:61:69:5d:50:b1:86:65:
f0:d9:02:e9:7b:95:a8:ab:32:6a:d7:a8:b1:5d:cc:db:f4:84:
e6:ea:c9:0f:2e:42:a4:ae:8e:71:6d:5f:10:d6:c3:d1:df:96:
2b:26:4e:b3:d5:d1:91:77:37:f2:65:ca:69:4c:5d:d7:92:8c:
b2:fa:87:25:da:2b:ba:38:a5:f0:e9:03:35:73:0f:77:00:e0:
ed:95:cc:0f:59:18:2d:08:fe:d8:e7:ad:53:74:bf:49:2a:cf:
9a:4a:77:f2:3f:ab:78:39:7a:b6:8b:4b:9e:b9:0c:9a:6f:f0:
05:4f:49:4a:dc:31:dc:5c:67:c6:ab:ca:de:3e:dc:5b:ef:45:
81:de:97:8f:ab:43:83:bd:c1:8e:0f:4d:c6:2f:48:18:36:18:
66:d2:d7:eb:89:40:44:90:0b:4d:99:c6:49:6f:c0:f8:55:55:
62:19:5a:1e:93:b6:5c:52:54:37:39:07:43:99:a5:d7:68:56:
97:4a:d2:77:4b:f8:67:d0:60:6f:ee:e5:71:1c:ad:ba:ce:90:
89:b1:41:67:01:9c:81:73:a5:4a:06:38:37:f6:ab:1d:00:61:
38:fc:5e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:38 2025 by rpki-client