Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7FBDE94C0F211EF861CDF8D762E951A.roa
File: D7FBDE94C0F211EF861CDF8D762E951A.roa (raw, json)
Hash identifier: 4k1IRmTW4Ya/cFIfitTMIpTiZAwYOAgoakAWLQqepx0=
Subject key identifier: B0:44:77:9C:79:14:53:48:03:10:FB:2D:1B:9E:A4:05:28:5B:CF:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7FBDE94C0F211EF861CDF8D762E951A.roa
Signing time: Mon 23 Dec 2024 05:57:51 +0000
ROA not before: Mon 23 Dec 2024 05:57:47 +0000
ROA not after: Wed 10 Dec 2025 05:57:47 +0000
asID: 984
IP address blocks: 154.90.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73580 (0x11f6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:57:47 2024 GMT
Not After : Dec 10 05:57:47 2025 GMT
Subject: CN=6768fbdf-9c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:22:26:26:e1:f6:fb:b2:35:f7:8f:0a:46:
11:ba:ea:e3:da:84:70:d3:07:aa:6e:e4:47:67:a7:
b5:22:1e:87:f8:2f:b7:03:6d:ac:dd:38:9f:0d:4d:
91:cf:23:d0:e8:4e:6a:c5:ed:01:a8:66:d4:70:05:
1b:0d:d8:b6:1f:6f:40:b8:58:85:b0:56:0b:27:7b:
64:eb:e6:e7:21:1b:12:47:91:10:90:75:ec:ad:b8:
44:ee:11:62:6f:fd:36:ec:67:4d:08:12:2f:fb:e2:
ba:de:ff:1b:0f:78:63:9a:26:e3:ed:e8:b0:78:a8:
cf:9c:a6:e1:41:30:cd:58:82:5b:94:9b:fc:f3:7d:
d5:ba:24:5f:38:44:9b:f4:89:04:62:f1:5f:80:69:
8b:e7:0e:94:c8:8d:69:05:d4:fc:8b:cc:95:ed:58:
6f:08:0c:30:76:a5:f5:fb:ad:5c:1a:9a:79:69:65:
c9:4d:a9:4f:34:dc:da:53:c5:7b:da:1b:95:bf:22:
b4:61:c9:1f:8c:40:ac:8f:70:89:da:3a:42:08:fc:
cb:45:02:56:96:1b:56:64:71:f7:78:d0:a9:5a:77:
02:15:3a:51:e7:da:53:bd:f3:e9:93:ba:23:d7:b8:
fa:61:7e:d3:61:86:a5:b2:41:c7:d8:93:af:c1:e5:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:44:77:9C:79:14:53:48:03:10:FB:2D:1B:9E:A4:05:28:5B:CF:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7FBDE94C0F211EF861CDF8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.108.0/24
Signature Algorithm: sha256WithRSAEncryption
45:bf:4c:4e:ce:8c:c5:00:f6:59:5e:46:89:f0:44:7f:8f:91:
9b:83:35:9a:af:b5:ac:f1:9f:e4:3f:f0:52:91:39:ad:9c:54:
b5:27:55:b3:4b:e5:22:5b:1d:ad:5c:25:f9:23:df:e9:c6:9f:
b3:ce:96:86:fc:4c:9f:2f:83:1a:04:90:f6:36:dc:b7:f0:49:
f4:52:78:42:f2:7c:7f:5d:fc:c8:e2:11:f4:4e:25:9f:d9:fd:
1b:de:72:ac:62:87:13:09:08:89:48:42:f9:7f:eb:e7:b9:8c:
b2:6a:46:86:09:6d:e6:2a:73:cd:47:2d:8f:75:b5:64:13:5d:
c9:82:b6:e8:cb:7c:2d:60:ae:fb:b7:f9:74:56:50:04:85:0c:
30:bb:7d:c5:52:9b:d5:71:d2:d2:6d:c3:b5:f9:c6:06:a7:bf:
a6:bd:f0:ce:bc:79:9a:06:3c:cc:c9:07:50:d2:3a:2b:64:cf:
e7:2a:56:ff:da:1b:4a:7d:e3:d2:ab:14:9d:e0:d9:d3:af:01:
a7:67:65:2a:da:86:56:81:59:5b:1e:14:e3:b6:bb:4f:2d:da:
18:bc:02:fd:33:fc:30:a0:48:e3:29:90:81:6e:b4:8d:98:40:
74:36:3b:b9:da:ad:36:39:ba:4a:c7:81:07:3f:75:87:a0:06:
44:c2:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:43 2025 by rpki-client