Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBC817F8C19711EF82B69A91762E951A.roa
File: EBC817F8C19711EF82B69A91762E951A.roa (raw, json)
Hash identifier: hlrRSCvcxuLXyyodWB8Hjevn+5R8ItPhukqiozet6a4=
Subject key identifier: C5:16:0F:89:6F:AE:1C:E6:05:B0:B8:2C:AE:8E:7F:EB:ED:13:4B:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012043
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBC817F8C19711EF82B69A91762E951A.roa
Signing time: Tue 24 Dec 2024 01:39:31 +0000
ROA not before: Tue 24 Dec 2024 01:39:28 +0000
ROA not after: Wed 10 Dec 2025 01:39:28 +0000
asID: 984
IP address blocks: 154.90.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73795 (0x12043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:39:28 2024 GMT
Not After : Dec 10 01:39:28 2025 GMT
Subject: CN=676a10d3-4e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:b1:03:45:82:3e:fa:c2:06:49:b6:c2:26:
5a:56:85:2e:5e:a3:da:9b:90:70:28:85:d3:60:94:
fd:ea:48:1e:f3:7b:91:a2:a2:2b:57:46:7f:3f:9e:
7d:9e:2f:bd:37:91:2b:3d:78:f3:14:c7:80:00:25:
25:46:b2:5c:58:84:60:3e:4b:47:af:58:a5:6f:89:
4b:b2:03:cc:5f:19:b2:ec:e3:16:c8:15:58:eb:a3:
c0:6f:f3:7f:65:d9:e8:c0:57:ab:a1:75:23:1d:02:
11:81:a9:ad:51:de:02:a3:f8:f0:a5:ca:6c:e8:ce:
8f:31:cf:83:4f:29:7e:ef:41:75:d8:58:f1:35:c5:
2c:bb:a2:e4:aa:ce:fb:46:54:a9:fe:34:28:50:1b:
c7:a3:cf:2b:fc:e6:e1:63:75:44:5e:f9:65:b3:f3:
61:ac:dc:d5:df:d1:87:aa:6e:25:80:3a:8f:31:7e:
0a:3d:56:e2:b9:6d:5e:3c:40:cd:93:0b:c5:98:4f:
1e:ae:98:9b:a6:f2:87:e0:75:f3:52:cf:d6:9c:10:
a1:57:5e:f7:02:0d:e4:b4:03:79:c6:71:f0:ca:b3:
c2:0b:47:f8:4b:91:9e:8d:ec:3c:a1:b5:be:1f:72:
0c:54:10:92:d6:52:ea:38:8d:28:be:bc:4b:9a:90:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:16:0F:89:6F:AE:1C:E6:05:B0:B8:2C:AE:8E:7F:EB:ED:13:4B:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBC817F8C19711EF82B69A91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.185.0/24
Signature Algorithm: sha256WithRSAEncryption
40:07:b2:00:13:6d:22:c7:96:74:06:69:e1:fe:a6:97:9a:37:
a5:1e:fb:11:25:6f:bd:23:74:64:eb:fb:2d:40:b8:28:ef:5e:
45:90:bd:32:ea:14:2e:8a:4d:5a:55:05:f6:a1:61:51:ef:96:
20:d9:ed:ae:2a:67:f1:56:32:83:72:9e:0e:75:40:28:60:59:
28:fe:8d:07:d2:02:2b:14:e3:92:a5:2f:27:e8:6a:73:f8:95:
36:31:ff:bd:90:0c:49:fb:80:ed:31:b8:14:64:7e:28:de:57:
28:d4:b4:3a:8b:c8:57:40:49:fa:b0:ae:df:2d:3c:b6:30:c5:
6c:40:d7:3d:41:a3:95:bf:3b:d8:08:4f:e2:89:1a:49:c9:42:
0d:86:05:8c:dd:1c:3a:ea:e4:cb:47:1f:a8:ae:b5:00:79:e4:
1f:ea:9d:b2:a3:03:1d:ae:68:6a:78:8f:9d:2e:7c:67:ff:82:
a5:ba:b5:57:1c:01:d6:5a:18:d1:d7:a5:2c:cd:55:48:02:05:
b1:15:1f:1c:cf:62:e3:7f:e0:5b:1a:a9:b5:11:23:b2:f6:22:
8f:64:b9:2f:2d:73:31:43:68:6f:17:4d:9c:f2:d6:6e:b7:07:
38:70:a0:4d:b9:1e:63:a6:c7:56:ce:58:14:7f:c3:d0:d8:98:
45:fa:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:49 2025 by rpki-client