Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03E0C936CDE911EFB7FFF57B762E951A.roa
File: 03E0C936CDE911EFB7FFF57B762E951A.roa (raw, json)
Hash identifier: r4rZUNofP+gwDcZpz3Osqd0viJeUtUpGOlNkzepR9bA=
Subject key identifier: 42:A8:1F:C7:0C:7B:E3:7D:2C:34:3E:C2:9E:A5:2E:4D:AE:DD:98:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03E0C936CDE911EFB7FFF57B762E951A.roa
Signing time: Wed 08 Jan 2025 17:50:15 +0000
ROA not before: Wed 08 Jan 2025 17:50:11 +0000
ROA not after: Sat 03 Jan 2026 17:50:11 +0000
asID: 984
IP address blocks: 154.89.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79865 (0x137f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:50:11 2025 GMT
Not After : Jan 3 17:50:11 2026 GMT
Subject: CN=677ebad7-830b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:80:10:e9:3b:76:d3:64:43:58:65:fb:21:
40:7c:51:29:95:a2:3e:77:37:c0:d6:d5:b1:04:f5:
46:c2:14:cc:1b:d4:77:67:1e:88:0f:43:d3:08:2a:
25:3d:f7:95:50:f5:be:8c:7c:63:35:de:28:d2:0d:
9c:8f:9a:d6:1a:a9:c5:79:b0:ed:dc:25:4e:fa:a7:
0a:c6:ac:0c:37:88:6b:f0:b9:53:b9:5d:af:55:88:
a6:ec:d2:31:56:91:32:98:96:9c:5f:7b:e3:5d:21:
2b:16:18:96:35:3b:62:7b:57:ac:71:7b:1f:99:22:
88:cc:5d:1f:b5:54:d5:d8:ee:5b:4a:e2:11:14:8c:
44:4b:73:07:e0:b1:cc:07:90:7e:63:94:ca:6a:fa:
f5:2f:b7:a1:8f:8e:7d:16:e0:4e:69:7f:fe:de:b1:
7f:3b:73:8d:cb:55:aa:b7:8b:f9:db:24:4c:63:3d:
ca:27:29:4f:f6:67:da:bd:b4:63:1f:4d:65:f6:5c:
69:08:50:b4:5b:53:df:58:fb:de:9d:08:21:82:2d:
98:03:a3:d9:50:fa:99:d1:f2:1f:7f:50:19:9c:c9:
45:62:a7:33:50:1a:b3:53:85:7b:ae:9b:af:ef:95:
7b:93:61:5f:fa:20:a8:4b:7f:6d:0b:15:ab:5b:95:
33:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A8:1F:C7:0C:7B:E3:7D:2C:34:3E:C2:9E:A5:2E:4D:AE:DD:98:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03E0C936CDE911EFB7FFF57B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.203.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1d:49:0d:de:e5:24:a7:4f:29:00:a8:26:4f:d1:91:99:9a:
f8:06:63:e2:b1:36:2c:89:e5:e1:23:dc:94:34:c3:11:41:b9:
77:96:6e:28:a0:10:da:74:7a:c9:f0:7b:7d:51:13:40:62:07:
5c:62:22:93:e8:87:26:72:b4:16:b2:5c:db:4c:ad:2e:ed:1a:
6b:5c:ab:75:65:b6:55:62:3b:10:bc:c1:39:34:85:60:c7:25:
3e:5b:4a:e9:f4:13:99:43:37:33:3f:58:e2:ef:7e:47:26:e1:
fa:e7:cd:23:ba:62:d3:64:16:a7:57:b8:1d:e9:81:e1:e2:67:
c8:6b:aa:b3:eb:ed:a0:0a:80:1f:2a:ac:02:4a:3b:28:1d:8b:
55:35:4b:1b:29:ed:a8:0e:8e:4f:8f:6e:00:ea:22:fc:cb:12:
ed:89:f4:b1:36:54:19:39:f6:6b:e3:b0:c9:d6:a6:af:38:8b:
e5:71:76:2d:17:22:32:7a:a7:64:03:ff:0f:cb:21:54:2d:99:
a6:3b:04:9d:25:d3:46:0e:43:1a:d7:3e:e9:42:32:75:13:ec:
fd:0d:ba:3e:2f:21:38:5b:17:df:d3:3b:bc:89:a4:fe:5a:5a:
c1:93:bc:26:bb:48:69:bd:47:7c:5d:6b:b3:a5:21:32:33:3b:
93:95:25:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:32 2025 by rpki-client