Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB90EDEAC19411EFA540537B762E951A.roa
File: DB90EDEAC19411EFA540537B762E951A.roa (raw, json)
Hash identifier: a9dAEOeKNOdFSHWhI6ziNAFMwF06T3qGoi/QFK3Xbg4=
Subject key identifier: 37:DA:AF:1E:38:A1:F9:71:49:E4:F2:51:E0:A8:10:42:68:A8:09:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01201D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB90EDEAC19411EFA540537B762E951A.roa
Signing time: Tue 24 Dec 2024 01:17:35 +0000
ROA not before: Tue 24 Dec 2024 01:17:31 +0000
ROA not after: Wed 10 Dec 2025 01:17:31 +0000
asID: 984
IP address blocks: 154.90.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73757 (0x1201d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:17:31 2024 GMT
Not After : Dec 10 01:17:31 2025 GMT
Subject: CN=676a0baf-ca4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:0b:af:63:7e:ca:df:1f:74:65:e5:26:e5:
34:68:af:e8:a3:f8:a6:1c:55:5a:52:ad:7d:97:ab:
3c:7f:80:2c:e7:26:ab:6e:99:a2:0c:27:b1:a3:2c:
cf:af:9f:56:d5:72:22:24:f6:07:7d:b5:5f:5e:d2:
55:01:96:00:14:50:ec:b1:95:f4:5a:d4:7a:e4:b6:
91:99:af:15:c7:f8:d9:fa:fd:db:c0:c5:d3:76:4b:
3b:a8:52:47:4f:f9:a2:d5:2b:ac:7e:31:3c:65:df:
58:30:b2:6c:a9:b4:67:15:8e:8e:39:0e:f9:b2:c0:
f9:93:02:0d:f2:66:0c:3d:98:bb:1a:2b:47:ed:79:
99:45:d0:91:de:50:f9:4e:8b:62:17:9a:69:ab:6e:
9b:55:cd:fb:17:95:11:f9:be:fc:e7:3b:1a:a9:f0:
7c:4f:b8:4d:fd:7b:ad:6a:36:8b:94:2a:26:f7:1c:
98:41:67:f8:59:b6:39:0c:c0:f1:a6:a7:56:36:10:
c3:1f:d0:44:c5:5a:1d:33:4f:e6:a7:62:86:a7:71:
3e:e8:16:72:51:9c:5c:a3:ce:6e:c0:9c:ec:2b:f1:
b9:93:e9:08:b8:31:0e:7d:14:dc:15:fb:cc:e8:7f:
8d:49:c3:99:63:ed:ee:81:91:b1:ea:16:2a:28:76:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DA:AF:1E:38:A1:F9:71:49:E4:F2:51:E0:A8:10:42:68:A8:09:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB90EDEAC19411EFA540537B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.166.0/24
Signature Algorithm: sha256WithRSAEncryption
54:70:87:21:ec:b7:4a:40:64:fa:af:e6:18:af:13:99:be:b0:
7a:c4:14:04:49:75:3f:12:cb:fd:25:ad:8e:f6:80:57:f6:5e:
c5:5c:7b:2d:01:e6:dc:75:87:f5:59:67:0c:46:8e:ae:7d:63:
93:95:8e:98:26:26:c6:84:72:fe:ff:66:4b:0c:58:78:c6:d0:
4f:3b:36:6b:53:89:ea:82:97:23:62:84:2e:04:85:51:ab:7d:
ea:55:9a:ee:4c:27:12:f4:74:e7:63:ec:cb:b5:80:f7:01:d7:
bb:d6:a5:30:d6:0f:23:47:32:f2:d5:f1:ea:a5:83:0c:d6:70:
95:aa:3e:06:47:6c:c5:ea:b1:e4:d3:46:94:e4:3d:7d:c2:78:
de:29:9b:fc:15:c7:08:76:e5:b6:3f:a2:c9:30:6b:7b:82:89:
d3:87:c4:fb:03:06:49:89:f5:93:ac:f3:61:bc:23:a3:11:07:
4f:25:3a:1b:3d:04:23:4e:da:cb:1b:28:a1:cd:f8:bc:b9:bb:
55:62:10:d9:f4:76:9c:12:10:70:41:c4:66:fd:d3:7f:89:82:
f4:dd:34:eb:da:a5:75:8c:16:60:21:2d:73:1a:40:05:ed:9e:
62:ef:a6:83:7e:9b:b0:a8:23:a8:59:49:8a:c0:2f:29:6a:5d:
95:48:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:22:30 2025 by rpki-client