Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA735E56C0EF11EF939BBF7C762E951A.roa
File: EA735E56C0EF11EF939BBF7C762E951A.roa (raw, json)
Hash identifier: 0yidf6A5OMFsvROa8htH60WmBpdqKp8YQdgri4OL6Gs=
Subject key identifier: 41:0E:E6:E4:30:58:94:C4:39:A1:63:62:45:E9:17:95:1A:46:E2:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA735E56C0EF11EF939BBF7C762E951A.roa
Signing time: Mon 23 Dec 2024 05:36:53 +0000
ROA not before: Mon 23 Dec 2024 05:36:50 +0000
ROA not after: Wed 10 Dec 2025 05:36:50 +0000
asID: 984
IP address blocks: 154.90.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73550 (0x11f4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:36:50 2024 GMT
Not After : Dec 10 05:36:50 2025 GMT
Subject: CN=6768f6f5-432c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:7b:13:54:1d:d7:8b:2f:d8:39:72:3f:4a:
33:7f:56:e4:f9:a9:1a:49:72:8f:3c:37:75:6f:71:
d5:e3:b4:62:f3:49:0d:e5:f8:d0:e0:97:d9:48:9b:
44:3b:c1:c5:86:b3:5a:f1:a2:1d:e9:11:42:1c:f2:
76:6d:81:2b:fc:f1:80:d9:e2:68:fe:ee:18:76:ed:
5b:c1:d7:c2:53:e3:06:7e:5c:a4:1d:23:75:86:0e:
4c:95:41:e3:95:84:9a:6b:6c:d1:59:6d:ca:68:44:
2b:0f:b4:8f:88:31:5e:53:63:cc:89:9a:28:91:49:
68:02:14:ad:e0:4c:43:ea:28:02:7b:91:c7:e0:08:
51:1c:2b:d0:86:f3:39:83:7e:8b:d5:87:db:be:42:
b9:2e:e2:79:ff:8e:92:74:b3:2a:e1:03:cc:a9:ee:
6e:b6:69:92:3b:64:4e:b2:51:1a:44:c9:8e:cc:a9:
43:5a:50:73:b9:31:68:ee:3c:dd:2f:59:c5:c3:ee:
d2:a4:4c:f9:ed:30:9e:29:a1:78:27:22:dc:3c:7c:
01:be:d5:a5:96:2b:dd:d3:ff:0d:a3:94:45:46:02:
ba:ad:c5:27:7e:a8:dd:18:3d:0c:02:f1:94:07:40:
3b:4e:22:37:5b:8d:14:0e:c0:6a:b1:54:0d:d9:14:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:E6:E4:30:58:94:C4:39:A1:63:62:45:E9:17:95:1A:46:E2:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA735E56C0EF11EF939BBF7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.93.0/24
Signature Algorithm: sha256WithRSAEncryption
65:45:1a:a5:8d:19:50:79:6a:a5:31:23:8e:ae:8c:ea:fe:7f:
f5:0c:9f:62:df:31:b6:3d:1d:70:a8:4f:1a:05:26:4c:ce:7d:
92:c3:1c:2a:0f:f7:ff:27:3d:66:41:94:8a:0d:eb:d1:12:93:
50:b8:1e:e7:b8:6e:04:6d:d0:c5:0e:46:dc:87:82:24:85:c0:
9e:0b:61:88:ef:7e:00:92:8b:e3:b3:9b:dd:f0:e8:1d:82:7a:
d3:00:2c:52:1a:62:c6:e1:8c:ff:52:76:d9:a8:4f:41:53:d1:
e6:dc:0c:e3:46:f7:88:97:9a:6b:cf:61:f7:c6:20:37:fd:82:
fe:93:27:92:63:3e:a5:45:7e:bb:fd:ee:4d:a9:fb:2f:d8:8f:
67:14:95:26:b9:b0:ba:17:bb:c2:36:e4:f4:87:f9:85:87:cb:
ea:91:87:e4:af:34:8d:c5:2b:1f:20:3d:dd:84:a1:84:80:42:
29:96:bc:0b:d4:84:4e:bc:e0:19:3b:79:de:3b:53:fc:a5:fe:
d5:a2:79:3c:ea:74:a5:e4:6a:86:ac:e8:07:f0:12:3d:4b:c0:
6c:3d:65:08:7f:56:62:cc:0c:9a:f1:ed:d8:35:95:9c:cb:ba:
29:98:e0:7e:9d:ef:a9:b2:43:46:e3:d9:59:bf:74:1f:03:21:
ea:78:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:43 2025 by rpki-client