Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F586D54AC19C11EF9C9C26B8762E951A.roa
File: F586D54AC19C11EF9C9C26B8762E951A.roa (raw, json)
Hash identifier: Y7vJJRhDYq1v7GPnvKV/y6WSVfFI2WTY9M6UyXH8w+U=
Subject key identifier: 01:01:B3:9A:DD:FF:5B:65:63:CE:12:4C:81:2F:B6:58:19:1B:0A:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012081
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F586D54AC19C11EF9C9C26B8762E951A.roa
Signing time: Tue 24 Dec 2024 02:15:35 +0000
ROA not before: Tue 24 Dec 2024 02:15:31 +0000
ROA not after: Wed 10 Dec 2025 02:15:31 +0000
asID: 984
IP address blocks: 154.90.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73857 (0x12081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:15:31 2024 GMT
Not After : Dec 10 02:15:31 2025 GMT
Subject: CN=676a1947-738b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:38:2d:6f:12:10:08:bb:75:fd:21:11:1f:
85:46:8b:87:84:f8:0b:ca:6d:d7:3d:76:f0:57:31:
3b:33:20:b2:d7:c4:bd:f9:75:d4:70:32:5b:e2:71:
e9:f6:a8:ed:5e:44:99:69:93:a0:1e:5f:93:b3:36:
b7:42:79:b2:ae:6c:ed:0d:7d:93:5d:d8:d4:54:d4:
ab:3e:12:af:5c:18:e9:88:dd:32:d6:0b:46:7c:00:
95:e9:a3:05:ee:4a:47:c3:f7:19:b2:ed:3c:7b:af:
d7:a7:b8:be:14:57:3a:0d:28:c1:8b:52:fd:87:f3:
cd:a2:6b:a5:72:8e:98:f0:d1:56:98:a3:a0:95:a2:
07:49:60:4a:46:76:e6:58:66:b4:7f:fd:dd:b8:c3:
2d:f1:24:5e:2f:f3:ac:8e:b0:54:55:4c:cb:12:2e:
3c:61:83:8d:3a:65:19:8a:8a:77:06:fd:86:ee:14:
b4:44:7d:0f:4f:62:c2:69:6c:02:8e:29:ce:0a:73:
f2:88:02:6b:32:e4:7a:8f:47:81:4d:43:a4:ef:fe:
a5:45:27:fc:7a:fe:c9:4b:64:77:28:88:a2:44:f4:
91:bd:1f:56:43:1a:0f:50:22:51:9c:3a:4a:ec:45:
a4:97:9a:3c:ce:69:f1:ab:2d:bb:d7:81:27:98:44:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:01:B3:9A:DD:FF:5B:65:63:CE:12:4C:81:2F:B6:58:19:1B:0A:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F586D54AC19C11EF9C9C26B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.220.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f7:f4:9f:2a:ff:de:73:fe:2e:eb:ca:54:f6:a8:be:05:48:
ef:a3:a2:6c:47:fe:d4:c7:6d:53:fd:a1:1c:e4:7e:5c:44:87:
32:ea:a8:d7:dc:08:63:b4:26:18:bf:65:13:54:b0:df:6f:86:
e8:ff:68:91:17:d4:14:02:ed:75:4a:7b:c9:85:ce:83:88:b8:
4e:8d:9e:5f:c7:cf:74:4c:57:84:3d:9d:97:04:0c:19:52:91:
98:a8:6e:4a:87:72:d9:43:6b:c9:8a:2a:ee:52:12:0b:15:4e:
a6:72:f8:da:a0:70:54:4b:0c:10:04:27:ec:e9:54:bc:2c:99:
37:f0:70:17:5b:bc:99:dd:62:cf:25:30:25:03:36:45:98:9e:
b2:ed:9c:1f:33:69:a3:19:43:88:60:2f:87:af:d9:f6:2b:36:
09:51:c4:0a:9f:be:b3:30:3b:54:b2:da:29:7f:40:bb:20:07:
fe:0c:00:fb:9b:66:42:ee:11:b5:37:23:29:af:38:76:5e:ab:
7c:60:28:10:84:4e:9e:71:9f:65:9e:90:52:d4:fc:15:0a:bc:
73:e4:88:ac:db:48:59:95:25:5a:89:80:a0:59:5e:88:2c:60:
5c:14:4f:00:ad:63:a1:2c:f1:f4:22:75:3f:c1:d1:b7:b7:f5:
54:d3:e5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:47 2025 by rpki-client