Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/210CED5EC0DE11EF9AC08A8A762E951A.roa
File: 210CED5EC0DE11EF9AC08A8A762E951A.roa (raw, json)
Hash identifier: paX37Va7IBT1lZw8HJkEcDZ22OvOEBZqdP0r7AjWazM=
Subject key identifier: 87:95:BB:61:F0:17:DD:25:E0:5C:FB:65:64:6E:B9:2B:F9:54:15:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/210CED5EC0DE11EF9AC08A8A762E951A.roa
Signing time: Mon 23 Dec 2024 03:29:34 +0000
ROA not before: Mon 23 Dec 2024 03:29:30 +0000
ROA not after: Wed 10 Dec 2025 03:29:30 +0000
asID: 984
IP address blocks: 154.89.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73414 (0x11ec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:29:30 2024 GMT
Not After : Dec 10 03:29:30 2025 GMT
Subject: CN=6768d91e-9962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2f:8f:9c:c7:e2:14:13:7c:4b:a4:c7:03:01:
9f:b7:46:97:e7:24:d1:fb:d4:51:75:9d:d3:1a:1b:
9f:70:b3:ae:72:37:4a:60:19:c6:ae:29:14:b7:71:
24:29:2f:cc:8f:dd:c4:f0:dd:c1:53:d3:65:70:52:
4b:68:6b:22:2a:4d:5a:2d:dc:a8:a3:0b:9c:62:ed:
eb:56:22:1d:54:a9:94:ec:94:ac:cd:0f:70:8f:f9:
2f:94:c4:40:74:89:0a:a8:8a:bf:f9:7f:56:9b:98:
26:30:af:11:75:30:c4:70:f1:49:25:79:a6:96:ef:
c0:b2:e9:df:20:50:10:71:ad:c0:67:66:41:ba:c8:
09:7a:6b:bc:7a:6a:ef:00:eb:04:6b:98:5d:70:ab:
e0:2b:da:0c:01:54:d6:c5:2f:31:1d:db:ee:66:e9:
03:cf:aa:4e:70:3b:ff:03:fd:ff:5e:4b:5a:4f:54:
41:a2:d7:c6:e7:d8:07:db:fa:ab:da:39:53:3e:1c:
da:be:df:ae:65:e5:1e:85:5d:81:16:79:df:23:2a:
94:41:70:c0:e0:95:61:ac:92:13:35:98:c7:00:24:
42:83:3b:86:3a:6c:de:e5:e1:dc:8d:60:1b:1d:51:
31:70:b1:6a:5b:47:bc:be:9a:8b:9d:b4:2d:28:08:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:95:BB:61:F0:17:DD:25:E0:5C:FB:65:64:6E:B9:2B:F9:54:15:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/210CED5EC0DE11EF9AC08A8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.193.0/24
Signature Algorithm: sha256WithRSAEncryption
25:71:f2:a9:49:73:d8:78:eb:4d:1c:88:cc:99:5e:a1:41:55:
cf:1d:ae:a5:fe:0e:bd:7d:0a:c3:26:05:f7:ac:04:66:45:5c:
c4:77:91:08:ce:e5:4b:bc:e7:93:6b:8c:7d:01:b9:2e:44:34:
1e:0b:5c:63:b4:49:39:c1:f3:3c:3b:f0:ed:ad:84:1e:09:21:
98:68:e6:ef:83:cc:40:5e:53:3d:a1:6c:ed:48:da:33:e4:7f:
ab:68:a9:85:c4:10:32:f1:0f:b9:70:36:fa:ae:4d:04:45:9c:
b8:3c:6e:82:55:18:b6:65:6d:e0:c8:97:43:85:bf:7b:26:98:
87:da:05:3a:21:f2:93:82:60:3b:99:25:b8:d3:fe:0f:42:88:
97:83:13:6d:a9:ad:49:5a:c8:22:ef:ac:93:86:62:37:4a:3f:
08:dc:02:d9:f1:53:20:d2:85:5a:27:4a:55:1c:d4:c6:fa:e6:
a9:cc:17:f0:2e:5a:c5:d8:6a:73:fd:f5:c1:2e:9f:53:20:0d:
25:97:5c:70:1e:54:ae:fb:4b:43:be:fb:08:9a:da:d0:1a:4a:
a4:89:2a:d6:c8:73:68:18:b8:30:88:47:58:8f:f8:9e:19:ed:
4c:b5:1d:8e:ec:25:d5:9a:1e:d0:1a:22:dc:d4:d2:4c:28:a1:
99:34:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:46 2025 by rpki-client