Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/001DB6DEC0DC11EF9A82A97D762E951A.roa
File: 001DB6DEC0DC11EF9A82A97D762E951A.roa (raw, json)
Hash identifier: Istd9CVg4uAS1rfs1AF6B/tDdaVwaQ3PE0hG3dI6WcE=
Subject key identifier: 1C:86:55:C3:F6:84:26:EF:F5:01:91:DC:B2:62:42:01:BD:DA:DC:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/001DB6DEC0DC11EF9A82A97D762E951A.roa
Signing time: Mon 23 Dec 2024 03:14:20 +0000
ROA not before: Mon 23 Dec 2024 03:14:16 +0000
ROA not after: Wed 10 Dec 2025 03:14:16 +0000
asID: 984
IP address blocks: 154.89.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73386 (0x11eaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:14:16 2024 GMT
Not After : Dec 10 03:14:16 2025 GMT
Subject: CN=6768d58c-5f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:14:a0:ff:2b:c8:c3:06:85:35:07:0d:15:
5d:e7:0c:d1:92:c6:ec:bf:4f:2b:53:19:04:84:1a:
97:bb:96:e1:10:c7:d6:d0:35:64:7b:f5:a2:dc:cb:
ec:08:07:87:ec:fc:e4:f9:69:b2:e5:b9:a9:25:1e:
58:c6:31:b1:92:af:1e:c0:cd:df:7d:59:8d:33:03:
b1:09:04:8e:66:1d:25:86:d1:92:8c:ed:ae:1d:2e:
e8:22:f7:84:23:11:39:14:44:27:d7:95:b3:c4:29:
68:26:d9:39:5c:3a:3a:7b:43:01:f4:fa:f6:25:ca:
2b:56:64:a0:69:21:b8:97:a2:53:4d:e2:15:aa:dc:
46:53:41:6d:5d:db:6f:ab:d2:56:5b:bf:c4:d9:fe:
9b:56:d0:58:68:19:2a:98:7d:59:d4:6e:e8:79:11:
67:97:a7:dd:f4:65:cc:eb:79:b2:3c:a3:eb:a9:a6:
4a:2a:96:e5:af:fe:93:23:93:00:39:79:eb:0c:14:
17:80:e5:33:0e:e2:91:ac:45:33:fe:a5:b3:09:c5:
58:36:66:c9:8e:d2:35:b0:0f:8a:b7:41:a0:c0:e9:
35:89:6b:7a:6a:bf:f8:41:5c:72:bc:e1:2d:05:6c:
3d:78:2a:e2:18:27:df:54:c8:ec:77:55:05:40:5e:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:86:55:C3:F6:84:26:EF:F5:01:91:DC:B2:62:42:01:BD:DA:DC:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/001DB6DEC0DC11EF9A82A97D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.179.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:96:16:94:4d:78:4b:bf:13:84:ad:bb:8e:e2:cc:f7:e7:ac:
43:c0:75:48:1e:ca:1b:09:32:ed:2b:3a:9f:ea:9d:4d:87:f6:
3a:c7:9e:f9:e4:5a:2b:fd:1b:aa:3a:62:96:a4:63:b2:30:96:
5b:88:d8:b1:57:dc:76:08:78:18:6b:6b:3c:04:fc:e3:34:d9:
97:bd:e9:ab:28:e7:93:64:0d:e4:d3:46:bc:b0:b9:64:d9:e0:
2b:b1:1c:11:b0:c5:73:88:de:10:69:e3:e9:a3:51:62:5c:f7:
2a:be:de:f3:7e:66:64:37:f8:40:b4:e7:11:dd:3a:46:ff:4e:
bc:88:8c:70:8c:10:ec:f1:8f:c7:bf:dd:01:cf:ca:7a:90:a5:
f7:7c:1f:71:7b:d4:55:c8:d3:95:c1:5d:8f:49:6c:43:13:d2:
84:ff:5b:5b:e7:c1:8b:54:92:a6:e6:d9:83:8b:d3:bf:ae:f4:
5d:52:e8:c1:02:af:e8:e6:4b:3d:e7:34:01:61:90:81:b5:78:
6e:47:5d:03:d0:68:38:b2:72:45:28:d7:a7:3f:86:03:d1:f0:
3c:50:26:b4:1d:d7:88:58:d2:bd:f4:78:17:f5:dc:89:1f:92:
8b:f4:40:74:33:a6:0f:7b:7f:16:17:d2:ce:91:96:1a:2d:2b:
d5:1b:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:31 2025 by rpki-client