Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE5F1F16C0ED11EF81610E70762E951A.roa
File: EE5F1F16C0ED11EF81610E70762E951A.roa (raw, json)
Hash identifier: kr1l/xlGh5v+iJ4D/euWR9HwOOfVcXqMUXGzi3VMdyM=
Subject key identifier: BC:07:59:F1:7E:84:7C:AC:51:99:F2:9F:55:8D:DA:34:9E:83:2F:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE5F1F16C0ED11EF81610E70762E951A.roa
Signing time: Mon 23 Dec 2024 05:22:41 +0000
ROA not before: Mon 23 Dec 2024 05:22:37 +0000
ROA not after: Wed 10 Dec 2025 05:22:37 +0000
asID: 984
IP address blocks: 154.90.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73536 (0x11f40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:22:37 2024 GMT
Not After : Dec 10 05:22:37 2025 GMT
Subject: CN=6768f3a1-2922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:7f:d2:2f:db:44:47:87:3f:c8:0a:62:47:
1f:6e:28:56:81:0d:fd:47:8e:2e:8d:31:b7:3d:99:
d1:18:77:df:12:fa:dd:77:42:bd:91:14:41:c6:21:
36:3d:00:bc:9a:2d:b3:d7:bb:76:71:d5:8c:3c:50:
85:3f:e1:c6:a5:e9:f5:47:fe:a2:98:f5:31:a5:3e:
9c:41:b1:2e:64:95:74:07:13:12:ea:c0:e8:75:75:
1a:ca:38:b2:9c:ac:58:55:e0:33:c3:8c:4f:04:e7:
2c:05:7a:87:d5:bc:7f:cd:c0:9b:32:af:21:a7:a7:
a2:2c:8a:ae:54:bf:9e:82:3f:e7:51:de:3e:08:eb:
8a:66:c3:bf:92:fb:a6:6e:7d:56:e2:01:75:85:11:
bf:0a:1c:4c:cb:f1:57:08:30:77:5c:bc:27:37:84:
6a:26:5b:d1:49:d3:99:23:11:e0:35:c2:68:a5:9c:
63:64:58:06:b8:22:c2:e0:4d:61:e2:06:84:01:af:
5f:29:c6:1b:06:e1:2a:52:8d:6a:18:20:00:40:cb:
e8:d5:15:db:ad:5a:ab:b6:26:9e:72:db:78:af:4e:
0d:e7:47:7a:09:6a:73:8b:c7:63:84:af:99:67:8d:
66:64:53:57:66:fe:82:36:c3:c1:27:dc:fd:c7:26:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:59:F1:7E:84:7C:AC:51:99:F2:9F:55:8D:DA:34:9E:83:2F:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE5F1F16C0ED11EF81610E70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.86.0/24
Signature Algorithm: sha256WithRSAEncryption
89:36:3c:fd:75:ba:d1:e6:8d:14:27:3c:89:7a:1d:60:e4:ea:
af:33:ec:03:b2:7b:07:d8:06:5e:97:7a:60:4f:40:c4:83:b5:
ee:a5:3e:9b:99:3f:b4:63:35:1f:94:5e:75:11:e1:cd:04:27:
f0:10:b0:43:84:9e:11:bc:7c:ef:8e:c4:f4:b9:6a:c8:18:fe:
bc:6f:b2:ab:d7:69:83:57:c7:ec:0d:fb:59:59:78:f9:cf:7a:
28:a7:00:84:68:27:b1:f9:1e:ce:b8:4c:1e:59:a0:f5:8f:85:
a8:b0:54:c8:34:75:b5:1b:68:86:91:1b:c5:b2:ea:1f:41:99:
db:08:17:73:3c:00:de:3f:51:3b:23:09:80:2a:f4:49:f3:e8:
d9:d5:2f:dd:95:71:bb:1e:e4:7d:78:6d:d3:c3:eb:42:17:02:
60:52:d3:6e:69:eb:92:a8:c0:7f:ac:91:a8:1e:e8:14:20:96:
0b:26:7f:9e:24:35:0e:13:41:98:d4:7a:62:e7:ab:f0:20:c3:
c7:ed:b4:36:8a:95:68:a7:2b:3c:80:f9:2f:f8:27:4f:b0:e3:
28:4e:29:8d:0e:87:a1:fd:23:b2:10:7a:bb:40:ae:be:d3:6c:
96:40:6d:13:9d:5d:cc:05:cd:04:09:30:09:f4:bd:d8:ae:45:
83:37:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:56 2025 by rpki-client