Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD0946CEC19511EFAFCEBE84762E951A.roa
File: FD0946CEC19511EFAFCEBE84762E951A.roa (raw, json)
Hash identifier: Z/qDVGUVwB6Cxv5L61dnenm1dysK9K3+VnSJgwqQ0Ek=
Subject key identifier: 55:53:1F:7D:E7:E5:42:DF:B3:81:1A:CA:44:75:8F:0A:F3:6F:8A:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01202B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD0946CEC19511EFAFCEBE84762E951A.roa
Signing time: Tue 24 Dec 2024 01:25:41 +0000
ROA not before: Tue 24 Dec 2024 01:25:37 +0000
ROA not after: Wed 10 Dec 2025 01:25:37 +0000
asID: 984
IP address blocks: 154.90.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73771 (0x1202b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:25:37 2024 GMT
Not After : Dec 10 01:25:37 2025 GMT
Subject: CN=676a0d95-768c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:c9:88:81:27:b4:af:75:f8:f2:8c:d7:f8:
db:a9:1a:c1:7d:01:37:a2:01:38:4b:8e:d9:64:f5:
bb:c4:15:9c:57:7c:90:b5:ad:22:6d:e7:a6:6e:4c:
6d:4e:28:a5:4c:2b:62:5e:d3:a5:cb:c6:7c:d5:30:
60:d7:55:44:0a:85:a8:4f:cf:e0:7b:8f:e5:89:89:
0b:dc:0c:31:43:92:8f:5a:a6:ba:43:de:ef:44:f5:
ab:f9:b2:b9:3d:56:14:87:0a:53:1f:68:70:65:51:
77:16:35:1e:ad:8b:1f:7b:35:fd:f0:e6:6c:68:4f:
07:98:62:3c:cc:79:ac:46:c2:0c:4a:4e:90:09:c5:
7a:d3:4d:55:94:d2:47:93:90:18:2c:ae:5c:bb:5f:
e8:c6:5d:57:8f:f2:08:3b:75:66:1b:d7:d4:f5:33:
a7:b4:32:c7:4e:56:47:a4:56:a3:5b:50:61:a2:97:
bd:de:6e:31:ea:fb:65:8c:4b:2f:eb:9d:78:c2:3b:
c4:00:a4:90:bd:2d:92:6f:89:ab:83:d5:85:e8:37:
de:1a:3d:c8:ed:4e:ef:3a:a8:bb:52:87:67:15:cc:
66:c6:88:c4:e4:f0:bf:ef:81:13:ff:ba:89:6f:5d:
7c:7f:4c:91:9a:83:23:5d:f2:94:cf:a0:14:5f:3c:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:53:1F:7D:E7:E5:42:DF:B3:81:1A:CA:44:75:8F:0A:F3:6F:8A:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD0946CEC19511EFAFCEBE84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.173.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:10:ba:6d:cc:04:dc:b6:86:4d:26:9d:5e:a9:88:58:10:c6:
4e:92:e2:5a:c2:8b:b0:11:09:fa:4e:b8:89:26:85:89:f1:ac:
22:68:fa:2f:02:55:ae:39:07:a9:03:fe:82:b9:98:b8:d3:a6:
55:89:42:4f:df:9e:33:2b:dc:32:fa:91:a8:61:24:89:6c:99:
da:66:ea:f4:a2:6f:39:1b:eb:46:63:e5:6e:95:84:32:3c:c1:
e0:9c:1d:74:c0:80:84:6b:2d:6d:4b:c9:69:9d:85:47:4b:64:
b3:97:3b:d3:0c:3c:f2:ea:6e:b6:1f:e9:be:83:36:e7:35:fc:
f3:42:c8:8c:32:23:68:6b:3e:cd:d9:8e:af:ab:45:eb:6a:aa:
c9:2b:f7:2b:4f:93:01:97:8c:db:ec:54:9a:1c:4a:17:23:d3:
bf:05:e4:13:7e:bd:1b:1f:21:50:d2:56:36:d1:74:e5:48:9d:
de:62:60:2b:06:d6:b7:f3:3a:d1:fa:bd:ca:08:3c:e0:d6:91:
6c:1d:cc:c4:dc:37:4c:ff:59:ad:e7:be:28:c2:a9:ab:55:a9:
9e:60:d1:cf:4c:af:50:92:ee:0c:aa:e1:30:62:36:da:b7:86:
2a:aa:b1:1e:6a:d4:1a:09:b7:6e:6d:b2:5f:dc:9f:97:5c:3f:
03:23:7d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:23 2025 by rpki-client