Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6001EB6C19D11EFA0BA83BD762E951A.roa
File: C6001EB6C19D11EFA0BA83BD762E951A.roa (raw, json)
Hash identifier: gg69ilSu+VucjzQub6zUe69lwDMC7ItkvL1+fMF6ljE=
Subject key identifier: 9B:1A:0F:82:70:4A:3A:8C:78:76:AA:B5:2C:12:88:0D:B4:CE:0E:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01208B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6001EB6C19D11EFA0BA83BD762E951A.roa
Signing time: Tue 24 Dec 2024 02:21:25 +0000
ROA not before: Tue 24 Dec 2024 02:21:21 +0000
ROA not after: Wed 10 Dec 2025 02:21:21 +0000
asID: 984
IP address blocks: 154.90.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73867 (0x1208b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:21:21 2024 GMT
Not After : Dec 10 02:21:21 2025 GMT
Subject: CN=676a1aa5-5ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:45:a6:b7:c8:d0:d6:1a:5d:13:8d:36:92:
d4:a8:3f:c1:49:a9:36:ac:c8:02:61:f2:b1:63:c0:
0e:3b:4e:24:8d:8e:18:92:6b:fd:56:f1:0a:11:76:
60:06:8b:28:aa:6a:a5:1a:6a:e7:87:e0:0d:4f:17:
e3:0c:65:75:45:1a:06:cf:e2:3b:06:4d:8f:97:f8:
60:02:71:6d:d9:e6:19:33:0e:8c:b9:59:da:28:bb:
00:eb:a7:bc:71:b4:ea:05:8d:7f:52:02:48:ba:1e:
e0:db:5b:d6:11:bd:f1:88:c4:a1:38:1b:d3:92:86:
44:85:ff:82:bf:18:2a:2b:ce:b8:6c:c1:54:48:7f:
09:02:41:7d:e0:1e:5e:73:d6:fc:dd:28:94:b3:09:
69:cf:86:61:70:e9:b4:1b:96:56:27:ea:8b:ec:d6:
94:81:e8:5c:f4:b9:ea:ee:bc:14:b6:e0:5b:c0:a0:
a0:f6:e8:a0:01:08:ca:05:ab:14:e0:02:1a:df:37:
9b:98:58:1e:d0:65:33:25:4b:49:ea:df:17:c5:7a:
7c:da:eb:80:95:6a:08:2f:74:fa:14:1b:c9:bd:b1:
7a:ce:2d:62:ea:f0:74:dd:b0:33:26:29:68:bc:cd:
0c:3e:e9:10:7c:65:90:d3:bd:05:95:82:b3:d3:ef:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1A:0F:82:70:4A:3A:8C:78:76:AA:B5:2C:12:88:0D:B4:CE:0E:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6001EB6C19D11EFA0BA83BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9f:47:26:8b:ef:01:de:06:d3:db:ed:3f:7a:31:fb:ae:0c:
70:fb:08:b6:1b:3d:66:45:29:31:ca:c7:6c:44:6f:f1:0f:99:
32:97:72:b6:0d:46:a0:eb:f9:42:08:fd:e9:b5:75:4c:81:80:
5f:2e:50:1a:89:f0:4a:35:bf:12:75:89:5a:7f:57:4c:17:4b:
0b:21:d2:5d:7f:4a:fc:fb:63:0b:b7:7c:92:48:33:1f:95:b3:
92:c8:7d:b6:43:2c:a9:2f:75:37:5f:53:e3:bd:01:9f:34:ba:
3f:26:23:4d:42:b2:35:70:aa:55:06:a2:70:3c:bb:71:b8:5d:
1e:19:cc:6e:ea:5e:03:4e:9d:97:7c:e1:f2:ec:db:d5:d8:40:
4e:c8:82:72:e1:d2:cd:f4:7a:54:1d:22:73:16:89:4b:a5:94:
5c:7e:8f:29:88:2c:37:a4:d7:7e:6f:77:ed:41:08:73:c6:ce:
26:c9:ab:61:82:02:3a:c7:c4:17:f6:fe:81:5f:73:c4:b0:5a:
ab:4b:1e:86:fa:b8:5d:bd:bf:0d:43:a2:d2:1d:33:60:f2:80:
0f:b6:07:6f:97:ec:9b:5b:25:1a:ce:54:54:2c:fb:8f:01:70:
9b:cb:fe:b6:98:ff:4b:5e:96:74:c5:1d:d6:83:53:29:ea:b2:
be:9c:5a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:58 2025 by rpki-client