Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA76E24C19311EFAFDBDB75762E951A.roa
File: FCA76E24C19311EFAFDBDB75762E951A.roa (raw, json)
Hash identifier: OBNF4P0h1+W29oNZdzQBaQfVAQJ/eNeDNgrZhftzCg8=
Subject key identifier: D3:0D:5F:90:B4:B5:09:E8:F4:45:41:A2:6E:DC:84:A3:E4:18:06:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012013
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA76E24C19311EFAFDBDB75762E951A.roa
Signing time: Tue 24 Dec 2024 01:11:21 +0000
ROA not before: Tue 24 Dec 2024 01:11:18 +0000
ROA not after: Wed 10 Dec 2025 01:11:18 +0000
asID: 984
IP address blocks: 154.90.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73747 (0x12013)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:11:18 2024 GMT
Not After : Dec 10 01:11:18 2025 GMT
Subject: CN=676a0a39-bbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:20:11:17:28:af:04:07:61:bd:6c:ab:06:
1a:d8:6b:f2:32:26:18:c5:04:5e:0e:4b:3e:35:6d:
08:f6:cb:31:a1:75:ed:a3:85:63:4b:35:76:73:a0:
4d:50:b8:95:82:02:48:6d:be:31:59:23:05:95:1f:
f3:b7:cf:cd:8f:97:44:cc:79:36:94:be:b2:cd:fd:
14:95:09:73:3a:7f:9d:06:24:3f:64:65:26:a9:68:
66:9e:9a:12:48:b9:74:94:29:4b:21:2c:e1:72:48:
db:d6:a0:43:ea:df:fd:ac:e7:36:ee:e9:46:33:18:
ea:26:a3:56:bc:3c:39:41:cc:04:00:77:d3:13:37:
f6:62:f0:54:66:2b:c3:4c:6c:f4:e6:ca:89:04:18:
88:03:6a:f2:1c:b9:f3:55:8b:6b:b8:da:8b:d4:b2:
63:e5:a2:c8:e8:c9:42:70:7f:aa:cb:91:1f:4b:cb:
a2:5a:3c:16:42:6d:ae:b8:a9:a5:98:3a:18:5d:ea:
de:9b:11:48:fb:ad:ca:a2:45:8b:b7:24:c5:41:ae:
83:2f:6e:a1:bd:63:0f:a0:31:0c:97:02:4a:69:95:
13:41:bc:7d:6e:ae:47:7d:63:c5:27:ba:33:2a:71:
ab:a0:9a:2e:57:a4:90:39:6b:58:c6:f3:48:63:db:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0D:5F:90:B4:B5:09:E8:F4:45:41:A2:6E:DC:84:A3:E4:18:06:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA76E24C19311EFAFDBDB75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.160.0/24
Signature Algorithm: sha256WithRSAEncryption
51:18:c6:5d:45:a6:d3:b4:96:4e:d1:56:2d:36:7e:1c:d0:52:
fa:ef:89:fe:d3:a0:bb:12:49:9f:4f:01:77:8c:d6:48:c8:12:
16:8d:e3:53:25:2b:f9:c4:4d:98:75:67:4d:ae:66:0d:11:53:
95:90:36:bf:3a:c8:6c:3c:2e:ac:e5:f4:ef:42:23:3d:1b:11:
e1:8c:2d:43:f2:bf:38:08:27:38:24:cb:27:c4:aa:5f:85:a0:
3c:05:36:ce:36:ca:13:4d:62:13:1b:2b:5d:ba:b7:0a:15:3a:
37:e1:b7:2f:9e:9f:d7:52:9b:fe:d7:3a:23:8f:e1:fe:26:23:
63:8d:8b:d2:7a:d9:fd:00:a5:ae:b7:60:a5:e8:03:f8:27:a4:
2b:95:b7:62:30:ab:f1:da:af:19:b2:f8:cf:1b:87:bd:db:83:
30:e7:b6:60:9d:29:5d:08:97:b8:6f:b7:2c:d5:98:22:68:d6:
e3:01:30:ea:44:5b:a5:67:76:69:32:17:bf:ea:fb:f6:a2:61:
47:49:00:47:a5:8a:fb:be:55:bd:2f:1c:a0:fe:92:22:c5:80:
27:43:91:86:64:0f:c4:2f:8e:09:43:6d:aa:8a:64:bc:ca:62:
13:ee:23:68:28:c6:04:93:05:8b:85:27:59:13:b9:74:b2:a3:
40:3a:b1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:49 2025 by rpki-client