Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F556C04AC19611EF8CAF748A762E951A.roa
File: F556C04AC19611EF8CAF748A762E951A.roa (raw, json)
Hash identifier: rGKKWoILVD0vj3nrcRHIz9S/SMPt5+A6bCBV38KtqtU=
Subject key identifier: 2F:53:9F:20:2D:FF:2F:94:D0:7C:BC:DE:B0:41:EC:4B:80:B0:73:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012037
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F556C04AC19611EF8CAF748A762E951A.roa
Signing time: Tue 24 Dec 2024 01:32:38 +0000
ROA not before: Tue 24 Dec 2024 01:32:34 +0000
ROA not after: Wed 10 Dec 2025 01:32:34 +0000
asID: 984
IP address blocks: 154.90.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73783 (0x12037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:32:34 2024 GMT
Not After : Dec 10 01:32:34 2025 GMT
Subject: CN=676a0f36-a60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ea:a1:7c:04:fe:5a:3c:19:95:ec:5a:a5:cf:
bf:57:10:59:11:10:cd:cc:c2:fb:c1:c0:eb:f0:7f:
6e:7c:c7:f8:45:fb:f0:5c:b4:b2:14:74:16:c7:d1:
48:b1:14:3d:ba:2c:97:87:d3:05:e9:49:e7:a6:3e:
75:57:eb:71:bb:ab:af:d7:09:a8:2c:b9:86:f3:3e:
cf:53:fc:a9:fe:9d:55:9b:d1:27:8e:cd:b9:d8:7d:
72:76:c3:34:3a:f5:c8:f9:da:bf:d7:73:cf:c6:3b:
e5:74:20:80:5f:8d:15:f4:39:ee:e8:f3:f7:17:bd:
a3:4f:e7:e8:c5:9c:cd:68:10:6b:fa:9a:60:93:93:
3c:06:42:88:fc:e6:92:a1:b8:a7:c1:51:ee:a4:1c:
db:4d:88:92:9c:ea:69:3e:46:5f:7a:5c:8b:ce:29:
ca:29:cf:2e:0c:e1:d1:04:b2:ad:55:b1:e9:17:b9:
d4:d5:1e:36:51:eb:fb:74:a2:54:c7:44:d8:d9:5c:
72:46:6f:58:6c:f8:28:97:39:f4:67:ef:7a:05:91:
40:43:00:24:ca:0b:51:f3:fb:f1:22:27:cd:cc:ca:
b3:bb:23:c9:29:ea:11:1b:e1:5f:1f:6c:61:ef:66:
87:c1:da:13:e2:67:d4:61:63:0d:e3:2e:56:5c:49:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:53:9F:20:2D:FF:2F:94:D0:7C:BC:DE:B0:41:EC:4B:80:B0:73:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F556C04AC19611EF8CAF748A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.179.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a9:63:06:8f:69:c7:8c:4f:f7:74:ad:96:7c:3a:97:ae:dc:
d7:4b:e3:a3:0e:42:10:24:c3:35:4f:da:a6:4a:31:3f:ac:cf:
b0:a1:af:5a:d1:6c:15:c6:85:66:47:e6:27:61:5b:67:80:45:
cf:b9:a8:48:fc:5a:fd:ce:19:a0:a7:fb:cd:15:66:ed:43:ea:
52:07:5a:0f:d7:58:86:03:b7:c1:5e:ad:20:f7:e7:18:c5:70:
9c:05:8c:85:4d:0d:de:f7:e4:89:1b:9d:e3:66:ab:8b:10:eb:
dd:ed:95:22:0a:72:ee:7b:29:af:a7:ed:9b:1a:2f:1b:ae:2e:
06:2c:f5:97:b7:c1:db:db:3e:82:c6:ef:50:70:2b:6f:96:b9:
de:4f:4f:3a:c3:09:4f:5e:af:f3:f5:2f:19:1f:49:86:c9:70:
33:b8:f1:05:b2:54:92:04:2a:30:fe:a5:e2:f0:b1:5b:ab:5a:
11:64:05:1f:03:fb:e7:48:23:e3:0c:76:09:ba:54:8c:45:39:
97:c3:f8:ef:24:db:8f:65:18:f0:a9:25:b8:7a:e9:36:69:56:
e0:d1:45:d3:5f:54:82:86:e0:14:b8:cb:f1:31:ea:63:70:17:
b2:77:40:ab:88:b0:45:a3:4e:22:7b:b4:4d:34:cd:23:09:5c:
db:b7:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:40 2025 by rpki-client