Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/303CAE18CDE511EF940F6964762E951A.roa
File: 303CAE18CDE511EF940F6964762E951A.roa (raw, json)
Hash identifier: 6sWupDM4AZPXEPdo4mdj6hwIHmmgcw7h0KP2odceKHk=
Subject key identifier: 53:1F:78:60:94:F9:2E:4D:FA:44:DF:87:26:13:D1:83:E7:C6:9D:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/303CAE18CDE511EF940F6964762E951A.roa
Signing time: Wed 08 Jan 2025 17:22:52 +0000
ROA not before: Wed 08 Jan 2025 17:22:44 +0000
ROA not after: Sat 03 Jan 2026 17:22:44 +0000
asID: 984
IP address blocks: 154.89.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79837 (0x137dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:22:44 2025 GMT
Not After : Jan 3 17:22:44 2026 GMT
Subject: CN=677eb46b-5953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:27:3b:3f:b5:60:1f:06:66:31:35:a2:a9:
d8:d1:4c:b4:1d:2c:91:c7:66:8b:34:9f:46:c6:db:
6a:12:6c:8f:45:da:5a:8f:19:dc:76:32:43:49:4d:
ae:bb:1b:0b:8d:60:83:2f:f8:e2:f3:71:31:a7:db:
81:d6:cc:3c:7f:62:1a:fb:95:78:09:28:b8:64:d1:
eb:14:d5:d3:99:b6:aa:b9:e7:c5:b1:61:e2:83:83:
28:37:b9:ea:3b:c8:aa:27:75:f3:07:6d:eb:b3:ac:
46:59:db:29:00:fd:f8:9b:af:be:5b:9e:88:41:3b:
fd:03:0b:47:f4:4a:ca:a7:71:c1:87:03:63:ad:4d:
7d:f3:85:ef:bd:b9:b5:4f:31:44:87:b2:f8:85:bd:
7a:78:0e:88:f4:a9:6c:2b:f7:83:d6:f5:77:03:fe:
3a:af:99:07:2f:ac:5d:c7:dd:fe:11:ff:a8:00:91:
97:75:67:c7:bd:a4:cd:8e:38:85:86:e2:c6:ba:e9:
7f:8a:56:83:a3:c2:63:55:e8:9f:79:f1:80:b4:de:
59:06:fc:ba:51:a6:47:47:9b:56:ac:7d:32:12:2d:
49:6d:c6:74:a4:d1:72:1e:0d:d8:48:78:a0:f2:0c:
f4:48:a6:96:98:a1:22:09:c7:ba:23:af:e0:e4:62:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1F:78:60:94:F9:2E:4D:FA:44:DF:87:26:13:D1:83:E7:C6:9D:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/303CAE18CDE511EF940F6964762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.189.0/24
Signature Algorithm: sha256WithRSAEncryption
48:30:62:3d:b4:f0:14:76:05:56:7d:0f:d3:94:18:c3:f3:78:
71:80:8a:da:7a:74:26:d1:3d:b1:bf:2c:39:6c:dc:86:8f:85:
a3:c4:3b:33:61:37:9e:6b:b4:71:27:9f:d5:82:1e:9f:c4:e7:
1b:08:2d:af:24:89:6f:c0:dc:1d:c2:7e:7d:5f:00:a9:af:f4:
17:27:6f:cc:b0:91:51:99:d3:49:93:3d:ec:5d:f7:8c:f0:85:
db:f0:91:cd:09:00:bf:79:27:19:c8:09:92:56:41:6a:70:43:
c1:1b:cc:cd:d3:9a:db:41:8b:37:fc:2e:48:86:01:3b:22:5b:
f4:47:f5:1e:e1:2c:03:94:d6:61:05:cc:93:b7:d5:e9:50:b8:
dd:67:c6:c9:93:15:2e:f4:c7:d2:a4:60:3e:78:75:8e:16:6a:
1a:72:9f:19:ee:38:64:be:29:24:bf:4f:9e:41:4f:ef:77:36:
31:7c:d1:6d:ea:dd:80:a8:88:04:f4:28:4e:24:86:d2:36:cb:
e8:97:a9:a4:67:8c:e7:ca:e1:db:ae:19:f6:7f:52:b4:9d:59:
65:01:05:8e:de:47:05:e0:52:92:ed:f5:39:91:cd:84:c9:c5:
9b:39:9e:0f:7d:09:7c:50:f9:af:1e:c7:5c:f4:5c:ff:2c:c1:
5a:c7:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:39 2025 by rpki-client