Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3900316C25E11EF89965391762E951A.roa
File: F3900316C25E11EF89965391762E951A.roa (raw, json)
Hash identifier: qQZNbMMX/O5o2nITClSlyA03/WbtqzaBAsREsaYs0Ho=
Subject key identifier: A2:70:FE:2C:75:64:FA:41:5D:3B:4C:39:03:9D:3B:8E:F9:57:26:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01239A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3900316C25E11EF89965391762E951A.roa
Signing time: Wed 25 Dec 2024 01:24:14 +0000
ROA not before: Wed 25 Dec 2024 01:24:10 +0000
ROA not after: Wed 10 Dec 2025 01:24:10 +0000
asID: 984
IP address blocks: 154.199.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74650 (0x1239a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:24:10 2024 GMT
Not After : Dec 10 01:24:10 2025 GMT
Subject: CN=676b5ebe-43a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:04:cd:5b:11:2b:31:22:98:53:1c:2a:82:fd:
dc:cb:75:9f:a2:36:52:48:8a:57:3f:9e:07:37:89:
5c:68:7a:60:fb:da:3c:83:8d:01:08:af:a9:94:ae:
63:40:37:1b:fb:21:ee:a9:4a:36:e6:3f:cf:00:7f:
80:b6:c5:da:ad:e2:e7:f9:96:1c:87:fc:ed:8d:56:
fb:61:34:a6:66:87:73:c9:d7:8b:eb:56:bd:8d:c2:
b3:1c:f3:6a:ff:ef:d7:93:3b:9c:bd:37:4a:2d:42:
01:0b:6f:49:59:a9:01:24:d3:5c:5d:1f:e6:02:67:
3f:b6:b6:16:a9:d8:91:30:97:b2:56:b9:ed:e1:4d:
93:62:fe:49:9d:57:8a:7c:f1:5a:e2:42:fd:b8:56:
71:ad:72:39:06:bb:dc:3a:b6:a8:c2:1f:56:5f:44:
6d:1f:10:73:c5:56:a3:ef:36:98:cf:f0:ad:c6:d9:
6d:d6:e7:aa:bf:32:9a:0d:e9:47:67:1d:b9:26:df:
38:5a:8e:f5:d4:56:6a:ed:54:e6:10:e0:26:ec:4c:
ab:76:53:46:4c:fa:3d:fa:d1:ad:69:8c:61:05:9b:
1b:97:9e:5f:61:75:81:2a:72:b8:62:6a:4a:17:d6:
80:82:8d:e8:c2:23:2d:a0:32:70:e6:dd:4a:20:50:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:70:FE:2C:75:64:FA:41:5D:3B:4C:39:03:9D:3B:8E:F9:57:26:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3900316C25E11EF89965391762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.90.0/24
Signature Algorithm: sha256WithRSAEncryption
08:39:ff:d6:fb:72:e6:16:e5:05:67:c7:64:6a:a5:ec:20:7e:
91:4d:ec:b7:7c:13:93:71:18:98:0c:69:43:68:43:de:b5:a2:
f1:0e:c7:cd:e8:7f:40:32:c7:fe:66:d4:90:58:91:76:41:c2:
bd:aa:80:55:0c:15:05:5c:cc:d2:07:a3:69:2d:98:37:75:17:
07:60:42:6f:1e:0c:59:e7:9a:5b:d9:d8:6b:3c:40:39:27:b6:
d0:d7:94:ea:8e:e5:d0:7b:ed:64:32:2e:c5:1e:2e:b7:35:3c:
00:1c:d2:19:35:ac:1e:9d:0f:be:de:a8:6d:db:b1:4e:ed:91:
ce:b0:8f:82:cb:71:6d:93:5a:b1:c4:4d:c1:07:8b:e0:8d:5a:
59:40:a4:9b:45:9f:c0:cd:54:ca:de:de:d9:ac:51:2d:6a:60:
d0:02:fc:be:5b:eb:1e:98:1b:31:7b:ee:1f:26:b6:01:ba:2d:
45:a3:09:f8:09:dc:6e:89:5a:af:0a:fd:87:45:1f:e7:50:91:
fd:9d:49:1a:e2:50:d5:c5:50:67:3b:fe:09:00:87:86:da:f3:
ec:07:b2:9d:5e:a5:ff:6f:34:f8:9f:99:bc:a8:6e:57:a9:51:
32:58:2a:4b:21:5f:ad:a8:3c:85:33:75:f5:9b:a7:ba:a9:49:
be:62:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:32 2025 by rpki-client