Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FD10628C0E111EFBCC29AA0762E951A.roa
File: 3FD10628C0E111EFBCC29AA0762E951A.roa (raw, json)
Hash identifier: PYlLoHKHJe9I0b+Vz8r5+QMKdRABJqFI+oTsPdafVkE=
Subject key identifier: 8A:18:78:90:49:09:64:DA:1C:96:7E:C0:27:2A:F0:CC:A3:31:43:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FD10628C0E111EFBCC29AA0762E951A.roa
Signing time: Mon 23 Dec 2024 03:51:54 +0000
ROA not before: Mon 23 Dec 2024 03:51:51 +0000
ROA not after: Wed 10 Dec 2025 03:51:51 +0000
asID: 984
IP address blocks: 154.89.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73454 (0x11eee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:51:51 2024 GMT
Not After : Dec 10 03:51:51 2025 GMT
Subject: CN=6768de5a-df25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:83:ee:37:aa:f4:0b:ee:06:34:22:eb:1b:
bc:6b:c9:bf:61:3f:48:93:14:62:68:c2:d0:41:dc:
80:8e:3d:dc:53:e1:b3:41:c8:a2:be:6b:e4:99:87:
35:4f:61:37:1c:b8:0d:11:39:86:e6:c2:ec:2d:e7:
65:24:e9:bc:ff:d6:c9:c1:cd:48:28:0b:e2:66:6f:
4c:da:0f:37:46:9d:8d:c8:04:ec:67:c3:b5:31:9a:
90:67:01:85:d6:2c:28:b0:ba:d9:de:28:c9:05:54:
8d:2a:b6:90:ff:6b:91:38:c9:ed:f5:8d:2b:6f:ab:
6a:f6:4d:21:26:c3:c0:05:19:be:cc:84:03:c2:ea:
e7:b3:28:2c:09:51:1e:cc:bd:00:e7:b7:da:bb:8a:
2c:48:d4:f6:93:9f:33:55:ce:6a:95:b6:ef:b3:32:
00:7a:d8:55:a7:e9:0e:96:95:4a:b7:aa:32:60:ab:
6d:51:b0:ba:87:49:18:f0:14:e6:af:a2:86:32:f5:
48:c7:ab:93:b1:94:2b:b7:c9:40:e4:2b:90:4a:bd:
83:05:73:13:9f:1e:b9:da:65:a9:d8:30:8f:9b:be:
c9:91:53:a7:ed:6a:1d:30:98:b7:d3:ae:50:34:44:
99:94:b9:53:f1:91:1f:de:9c:64:da:6d:1c:df:01:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:18:78:90:49:09:64:DA:1C:96:7E:C0:27:2A:F0:CC:A3:31:43:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FD10628C0E111EFBCC29AA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:d7:18:33:37:f4:e2:3f:c3:a0:88:71:00:7a:80:2e:a6:a8:
19:d5:49:f5:4e:8d:8a:02:05:07:85:05:39:06:f8:60:b2:1e:
a8:e1:88:34:25:db:ec:2a:f2:29:0a:26:f0:0a:3f:c9:e2:5d:
cc:8b:30:e1:7c:93:65:ee:c1:e2:7b:42:00:b3:0f:3c:26:0e:
71:b6:12:52:4e:76:cb:bd:22:33:c5:5e:68:95:3b:82:7c:08:
a0:4e:64:37:88:18:ac:ce:1e:42:95:2b:1d:aa:41:fb:55:82:
79:1d:e0:cc:66:63:f1:d5:50:a1:56:e8:32:a5:f1:30:07:9a:
09:ec:c3:b2:f3:3a:7d:c2:e0:90:2d:f8:4b:80:23:88:54:f2:
46:ab:36:dd:e2:f5:8f:50:10:94:49:0c:3d:85:c2:81:26:49:
5f:af:a0:b4:e1:4b:68:d7:4f:f0:d5:51:a3:40:17:6b:76:c4:
5d:31:68:8a:f1:b9:86:87:db:c7:be:38:91:9f:bb:5d:26:69:
82:f8:e8:2a:0a:41:15:5c:c0:31:ae:50:9e:2a:59:e9:b3:c1:
e9:92:8a:fa:32:a8:5b:cd:19:65:97:44:5d:92:a6:cb:54:d7:
04:87:c3:9c:14:13:5e:38:55:3d:90:8f:93:de:2c:4f:97:89:
08:c7:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:38 2025 by rpki-client