Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D07B4174C0F611EF9C7E57A7762E951A.roa
File: D07B4174C0F611EF9C7E57A7762E951A.roa (raw, json)
Hash identifier: 7bL8J9E9QNxXh8wIlz/KSQhe3E4iw+bmDvqS7At0vx8=
Subject key identifier: 6C:45:DA:67:ED:E1:92:6D:25:70:89:03:5C:9F:26:23:42:1F:F6:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D07B4174C0F611EF9C7E57A7762E951A.roa
Signing time: Mon 23 Dec 2024 06:26:16 +0000
ROA not before: Mon 23 Dec 2024 06:26:13 +0000
ROA not after: Wed 10 Dec 2025 06:26:13 +0000
asID: 984
IP address blocks: 154.90.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73624 (0x11f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:26:13 2024 GMT
Not After : Dec 10 06:26:13 2025 GMT
Subject: CN=67690288-1354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:69:a6:a0:e9:18:86:33:51:78:dc:61:4b:
f2:0f:cd:27:d7:36:8a:a6:e3:0a:5d:3f:69:97:4e:
f5:e0:b7:36:70:e1:c5:3c:eb:dc:67:12:ca:91:84:
38:30:23:8f:09:cb:1d:a8:b6:f7:48:d0:d2:49:ab:
b9:77:1e:82:10:b2:5c:9f:44:22:f6:3b:bd:60:ba:
ba:53:02:0e:51:53:32:cf:e5:ee:db:20:e8:cc:c6:
c0:75:95:d1:45:de:f4:57:e0:fe:04:16:b3:e8:9f:
2a:0a:5c:09:f5:fc:ae:05:d0:05:4b:eb:40:6b:30:
cb:53:83:bd:c0:d9:6c:a2:83:ef:32:e3:11:ee:6b:
df:9f:31:2a:9b:71:91:9e:19:6f:8b:fc:27:18:5f:
76:e7:de:5e:a6:30:9c:6c:24:d5:ef:35:91:9c:fa:
3e:25:da:7b:01:09:26:37:6c:17:bd:e6:0b:9a:3d:
82:1c:3f:bd:33:16:57:63:52:a8:1f:da:19:c8:af:
14:4a:fb:9e:e6:a2:95:41:eb:6c:50:54:b5:f4:34:
be:8e:04:86:e8:ad:e2:2b:23:51:52:6f:60:0e:f6:
51:6a:00:ff:ed:4a:fe:ab:64:ac:bb:ef:a9:17:7e:
20:88:0f:4c:21:1a:05:77:71:2e:1b:b9:ac:cf:e8:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:45:DA:67:ED:E1:92:6D:25:70:89:03:5C:9F:26:23:42:1F:F6:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D07B4174C0F611EF9C7E57A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.144.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:49:64:60:d8:5d:6c:2a:b2:4b:81:76:a2:f4:1a:0f:2d:41:
01:8c:8e:62:b7:3c:73:e6:7e:9a:74:50:ee:f3:8b:6c:66:70:
79:a6:e7:92:01:d5:8b:68:cc:79:3b:a6:77:7d:e7:49:ea:18:
82:05:7d:9c:ab:23:e6:00:06:6a:e3:e5:13:36:e1:43:59:26:
6f:7f:31:5f:4a:7e:d9:83:5f:c8:da:37:54:90:41:dc:34:6f:
82:48:9f:81:1f:ea:8c:99:0a:49:95:c9:9d:b6:23:cc:a7:31:
a5:6a:38:a3:e4:cd:1c:10:bf:e9:fe:d6:94:38:24:a4:bc:6a:
51:86:10:98:c6:3d:37:0c:df:69:ea:50:7b:ce:79:a3:3c:5c:
19:71:71:35:5e:46:a0:f2:0b:26:b1:b6:e6:d3:9e:ba:75:79:
8f:b6:72:8c:0e:fe:2b:d9:78:09:06:a9:13:aa:79:3f:55:c5:
13:c3:19:a7:8e:c1:ef:f1:70:34:23:ab:c1:cb:4a:41:e8:98:
2f:c7:fc:ae:dc:0f:a8:d9:33:d8:85:03:66:52:bf:10:c4:10:
46:06:29:42:80:c8:78:3c:df:16:c2:eb:cb:2b:a4:1e:3c:8b:
bc:25:48:81:c6:89:59:8b:13:2c:da:f5:48:9a:7a:84:af:e2:
82:2b:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:38 2025 by rpki-client