Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED256192C19111EF9DB8B866762E951A.roa
File: ED256192C19111EF9DB8B866762E951A.roa (raw, json)
Hash identifier: rzN3M7NvZ9D9q6A8ZB14ZS+lmOd6BFOmGVguzTfPr2I=
Subject key identifier: 86:D7:86:4E:34:BE:99:C6:A0:48:2C:D8:12:AD:3B:3F:66:53:1F:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011FF9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED256192C19111EF9DB8B866762E951A.roa
Signing time: Tue 24 Dec 2024 00:56:36 +0000
ROA not before: Tue 24 Dec 2024 00:00:33 +0000
ROA not after: Wed 10 Dec 2025 00:00:33 +0000
asID: 984
IP address blocks: 154.90.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73721 (0x11ff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 00:00:33 2024 GMT
Not After : Dec 10 00:00:33 2025 GMT
Subject: CN=676a06c4-c4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:44:02:6b:f2:b8:f7:f7:c4:bf:ea:4d:84:
7a:67:f1:67:3b:49:a8:2e:99:58:05:49:a9:71:a4:
2b:19:99:36:63:1f:17:e0:bf:bd:91:5c:c2:59:74:
8b:88:e8:53:6a:c1:2a:2f:aa:3d:72:d6:f2:e8:35:
01:82:4b:46:12:7f:29:38:a4:de:58:ed:95:6e:27:
48:de:f0:f1:55:c8:1d:2c:9c:14:df:82:fd:1d:52:
ce:e3:92:a5:15:d1:d1:0b:52:67:71:0d:e5:67:8f:
b3:7a:bc:36:2d:97:9c:2b:42:49:83:a6:b6:4c:0c:
cd:87:50:94:86:9d:76:50:77:aa:b4:dc:a5:af:6d:
77:ef:e4:69:c2:4c:f3:e4:9c:8d:15:b5:6d:e0:e9:
00:96:54:ce:e1:2f:e1:71:7a:45:8e:f4:db:40:fa:
56:0c:33:c5:5c:6d:8c:c2:80:ad:b8:b5:4c:78:01:
7f:74:91:9a:d3:a7:6c:c3:b5:f8:5f:22:ca:57:91:
29:98:4c:0b:c5:60:98:1a:7a:1d:ad:93:e6:e1:6d:
d9:e7:c7:62:d6:67:93:29:f4:d4:12:a1:67:6a:d1:
c4:d3:b7:2b:dd:95:1f:8b:0d:46:d0:40:50:bc:86:
14:9c:f5:af:d4:c0:41:3f:25:7f:d5:4a:d6:59:17:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D7:86:4E:34:BE:99:C6:A0:48:2C:D8:12:AD:3B:3F:66:53:1F:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED256192C19111EF9DB8B866762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.147.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ed:e0:a7:e9:61:7b:20:73:28:bd:be:bb:fb:a8:70:70:ca:
1f:6f:14:82:01:8c:31:d0:89:0e:9b:df:0c:69:4c:26:ea:e7:
9c:e8:7a:cb:6f:60:98:60:82:ca:03:6c:64:4d:42:ab:3c:f6:
9c:3f:ac:75:0f:6d:d3:fe:59:2f:4c:59:63:64:25:6d:42:fa:
5e:22:10:8f:8e:e2:0b:52:d7:a8:d8:03:0e:8d:fd:28:b6:56:
69:dc:21:33:95:b1:8e:74:59:49:6b:b9:64:0a:23:25:57:ea:
61:d0:8c:89:a3:f0:27:d7:85:5c:c7:43:c4:68:17:ea:6d:45:
f2:56:48:de:09:8f:5d:56:63:da:95:8c:84:0e:f9:5f:e9:1e:
a8:00:47:21:e7:6d:b3:4a:29:fb:0d:9f:e5:72:af:57:69:8b:
7f:0e:03:25:44:92:78:34:d7:e5:14:f5:db:3a:9b:1c:9e:bc:
16:bf:2d:0d:e9:22:2c:35:31:8e:27:ca:ce:90:5b:e8:93:f4:
2f:bc:39:54:dd:75:dc:14:85:49:17:4a:99:0e:82:35:ab:fa:
72:33:33:c2:fc:7f:57:ea:f0:1a:3e:5d:79:2f:43:8c:f1:56:
0f:da:35:ab:3f:8a:86:bd:c9:16:d6:d9:d9:da:b3:54:a4:35:
49:4f:e4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:08 2025 by rpki-client