Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DC67CE6C0D711EFAAEF755D762E951A.roa
File: 3DC67CE6C0D711EFAAEF755D762E951A.roa (raw, json)
Hash identifier: Do5743k26/cZL7VTRFhx0JjsPIAL0w621EmjJPQ3HBU=
Subject key identifier: C4:29:BE:1B:14:F4:A9:BE:2A:9C:0B:B7:80:BC:62:99:3E:C7:91:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DC67CE6C0D711EFAAEF755D762E951A.roa
Signing time: Mon 23 Dec 2024 02:40:16 +0000
ROA not before: Mon 23 Dec 2024 02:40:12 +0000
ROA not after: Wed 10 Dec 2025 02:40:12 +0000
asID: 984
IP address blocks: 154.89.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73324 (0x11e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:40:12 2024 GMT
Not After : Dec 10 02:40:12 2025 GMT
Subject: CN=6768cd90-4715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:ba:17:05:c9:53:9d:05:bb:6d:99:17:01:
25:dd:7b:0a:60:0e:1c:0f:6f:d2:e4:d9:92:82:03:
32:22:72:46:0f:e3:e8:3a:f4:26:ea:4b:14:74:f1:
bf:b8:dd:94:03:43:fa:1b:69:2c:13:e8:7a:b1:27:
21:47:77:27:d6:9e:31:96:f6:9c:6a:0e:20:4f:40:
0a:5b:4c:37:6a:83:5c:97:cc:fe:fd:d6:d1:e1:9d:
43:77:48:ca:8a:25:2f:23:12:39:b6:6c:3c:76:36:
88:11:d3:50:62:46:44:d9:6c:22:cf:6a:25:94:1c:
15:2c:f0:f4:51:ee:20:5a:50:7a:9f:ba:95:d3:f3:
35:ef:e6:79:98:34:4b:ca:ce:74:a0:ee:99:c8:54:
e5:ef:83:9f:c4:be:65:fc:10:ab:4c:18:04:ea:f7:
9d:e0:38:eb:0b:58:22:c7:de:31:2c:89:f6:b1:87:
bc:67:72:42:a0:39:9e:1e:41:69:a3:0e:14:74:e2:
d8:f5:5b:9b:07:18:26:9a:74:57:f4:82:e7:5f:8b:
da:91:5c:27:06:19:5b:e8:6b:24:42:ff:ca:9b:37:
e7:fd:c6:5c:27:d5:8f:0a:40:76:dc:b1:6d:29:2c:
46:f8:4c:40:fc:11:ce:b9:56:e1:2e:3c:fa:e5:79:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:29:BE:1B:14:F4:A9:BE:2A:9C:0B:B7:80:BC:62:99:3E:C7:91:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DC67CE6C0D711EFAAEF755D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.148.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ca:4b:15:1a:91:b4:3f:b9:07:d0:e3:10:08:b8:62:c3:14:
95:d3:f7:50:05:5f:87:cb:9c:ff:79:75:76:0d:8e:83:a7:03:
e9:c8:a8:09:81:da:4b:89:fd:27:37:1c:0b:9f:db:87:8f:47:
85:b7:ac:b7:b1:20:b7:7b:dd:07:72:50:4f:ab:d7:10:7c:50:
b9:ec:89:c4:8b:22:e4:f8:6b:f0:96:3e:e9:21:39:e3:6f:bb:
dc:9e:7c:ef:48:20:e1:b4:d8:aa:87:f4:3e:d1:5d:47:36:cb:
84:56:b2:4a:1c:d1:ab:c1:76:b8:1e:fa:49:1e:f0:90:14:d0:
9b:54:f0:e3:43:f9:d2:38:d1:c9:b3:32:84:8e:5e:56:8e:28:
28:3a:34:ec:7b:b0:6c:e8:ba:b9:1d:ee:55:37:ac:98:88:a8:
b4:3d:18:77:ac:51:b4:7e:41:ae:4d:9a:fa:48:45:94:9a:bd:
8b:16:35:aa:ab:80:af:0c:76:07:5a:24:15:0a:78:17:b0:90:
79:1d:fb:d0:a1:61:b0:f2:81:d9:0b:83:1b:39:53:2c:4f:eb:
76:25:de:29:b5:b9:6f:e1:f0:06:12:81:22:90:ff:4c:df:57:
55:66:bb:48:7d:93:0c:24:8f:f9:72:01:9d:2f:60:51:17:aa:
5b:14:38:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:23:59 2025 by rpki-client