Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5869210C19811EFB2771B99762E951A.roa
File: E5869210C19811EFB2771B99762E951A.roa (raw, json)
Hash identifier: QIXO9X7Nw8uT9Uk/ABpx/OXj4s5LPR2orL5PuZ2LkGE=
Subject key identifier: 9A:42:78:BD:60:84:0B:C4:51:A0:F6:74:21:2B:F6:27:B7:9C:56:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01204F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5869210C19811EFB2771B99762E951A.roa
Signing time: Tue 24 Dec 2024 01:46:30 +0000
ROA not before: Tue 24 Dec 2024 01:46:26 +0000
ROA not after: Wed 10 Dec 2025 01:46:26 +0000
asID: 984
IP address blocks: 154.90.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73807 (0x1204f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:46:26 2024 GMT
Not After : Dec 10 01:46:26 2025 GMT
Subject: CN=676a1276-2705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:ca:4e:a8:09:1f:7d:fd:d3:0f:60:cb:82:
90:9b:59:56:13:22:6f:40:0f:67:54:94:1f:0c:cd:
c5:b5:8f:79:f7:f9:38:c9:d7:3e:fb:85:53:96:59:
b2:c3:01:7c:6c:1c:01:67:bc:9b:99:7d:98:94:73:
61:11:98:a0:00:6a:a3:df:85:08:ee:92:79:97:8a:
6d:a1:84:e6:e1:65:16:9d:f3:77:53:b5:3a:73:e7:
8a:74:ac:6f:67:bf:96:c2:23:9d:2a:a8:dc:a0:be:
99:78:d5:a0:17:00:f2:d0:d8:2f:62:90:c8:f3:bf:
1b:e4:d6:10:22:9d:af:45:14:41:64:1d:91:45:1c:
17:d5:b0:50:d4:c1:05:ab:c9:4d:2b:f5:5e:62:57:
29:16:5e:bd:19:5b:74:01:cb:88:d7:55:a7:bd:f3:
16:bf:ef:12:d2:ce:b2:d7:ff:56:f8:36:46:07:26:
a8:91:49:c3:54:8a:ed:cc:04:dc:21:69:c2:7b:aa:
37:e5:2c:d8:1b:fb:17:d8:41:3a:cf:f4:1f:51:d2:
54:de:96:94:41:f6:9a:d3:e3:6f:4d:c6:fc:9e:5a:
7e:66:d1:58:4e:3d:2b:34:3e:0c:90:8c:6a:cd:a5:
c4:ac:77:57:f0:5b:f7:9f:aa:83:5c:54:f6:c3:b4:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:42:78:BD:60:84:0B:C4:51:A0:F6:74:21:2B:F6:27:B7:9C:56:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5869210C19811EFB2771B99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.195.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d0:dc:ec:dc:9b:57:93:91:f9:82:f1:36:30:28:eb:f8:8b:
a1:a8:77:8e:9b:3a:27:2d:b4:cb:c6:66:f5:3f:1a:87:e0:b2:
ea:01:60:38:35:b4:47:97:d5:c8:91:9d:d7:08:57:36:f8:91:
0e:32:d2:2d:ea:3c:6b:be:70:91:dd:22:3b:cf:98:0c:5f:c9:
a2:e2:85:21:69:ad:37:6a:2c:d9:f0:96:70:d6:40:76:83:c1:
95:8c:1d:27:fb:14:76:a4:ff:45:fb:ee:79:74:36:81:22:84:
3d:f8:49:1a:c1:1c:28:fa:79:9b:e5:b1:e0:19:80:3f:cc:bb:
d8:e4:51:81:31:7c:b7:14:dc:14:e8:2a:24:aa:85:1c:f2:e9:
94:f4:2b:00:a5:a0:fc:17:8f:8f:84:77:31:02:97:66:88:d3:
95:12:3d:fd:ea:b9:f4:ba:66:14:8e:4d:8f:2e:88:10:75:51:
6f:1e:e0:76:45:16:00:02:cf:f8:a0:98:e7:05:2a:dd:d5:f6:
98:a8:b0:b0:70:b0:81:7a:ba:8e:14:63:70:ea:ba:8f:31:40:
d7:4a:25:5c:b2:83:1a:b6:96:b3:da:91:af:ed:9e:13:60:43:
f9:62:9c:df:a0:49:dc:74:09:d1:24:16:9a:60:88:7f:4d:c5:
1e:26:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:54 2025 by rpki-client