Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6397D9BCCDE611EF972CEC6A762E951A.roa
File: 6397D9BCCDE611EF972CEC6A762E951A.roa (raw, json)
Hash identifier: qYyta3JFP8SpmAgYhP0sMr25n0nZIdOiGkpTr3gyrBo=
Subject key identifier: 04:96:EF:7A:8B:CC:24:4A:39:4F:1D:13:A1:12:05:2E:74:BA:90:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6397D9BCCDE611EF972CEC6A762E951A.roa
Signing time: Wed 08 Jan 2025 17:31:27 +0000
ROA not before: Wed 08 Jan 2025 17:31:22 +0000
ROA not after: Sat 03 Jan 2026 17:31:22 +0000
asID: 984
IP address blocks: 154.89.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79845 (0x137e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:31:22 2025 GMT
Not After : Jan 3 17:31:22 2026 GMT
Subject: CN=677eb66f-446d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:4e:2d:a6:9a:e5:b5:56:d4:68:08:53:24:
e0:34:16:0c:e4:0f:d0:5b:bb:a2:97:84:a2:9d:5c:
67:58:88:86:b7:11:9b:18:8e:62:03:de:2b:f3:78:
d2:ff:57:60:76:71:e4:ac:8c:24:cf:83:7a:02:b7:
bd:7c:fa:ff:3e:8f:9b:7b:23:1f:e8:4d:c5:e5:2c:
52:e2:fd:76:78:f7:8f:10:ad:5c:78:18:ca:03:aa:
fb:2b:06:95:4e:fd:a1:fa:62:8e:3a:9f:9f:01:63:
f9:ea:f2:70:a3:35:44:f4:2b:2b:c8:cd:53:02:4e:
c4:75:6e:a2:40:b5:1d:15:f1:1a:a6:82:b3:49:73:
cc:d8:fb:55:f8:89:c6:d5:08:88:1c:ec:bb:02:f7:
50:80:17:e6:a9:21:1e:ec:04:49:ef:8a:42:61:06:
c0:55:ce:6a:23:68:86:98:84:28:f4:57:5d:37:1e:
69:9c:b0:59:a5:73:dc:2f:25:e1:66:97:22:6c:cb:
95:2a:97:9b:99:19:d7:26:f8:37:c8:49:a9:a0:d8:
23:b9:00:a8:9a:13:92:79:7c:be:dc:91:1d:cd:4f:
ec:6a:c6:7f:e8:b3:30:84:fe:8f:86:67:8a:58:8c:
a0:6f:1f:55:8f:28:7d:9b:34:8a:56:a9:21:09:b2:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:96:EF:7A:8B:CC:24:4A:39:4F:1D:13:A1:12:05:2E:74:BA:90:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6397D9BCCDE611EF972CEC6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.193.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:da:62:b2:70:2a:78:13:8a:ed:74:39:04:45:2a:93:26:8e:
e5:c1:f1:e7:33:56:ec:bf:d4:ff:a9:4b:0b:e4:56:e2:7d:46:
e4:1c:c8:7d:8c:22:57:86:a5:0b:75:01:37:a2:a6:83:d5:26:
0c:33:61:fe:41:9c:b8:ee:a1:a6:48:38:22:e8:3f:21:2e:bf:
6e:b1:00:c5:af:36:47:bf:b2:a2:5e:f4:6c:13:45:a5:63:76:
67:f5:71:af:12:47:64:47:95:cd:8d:aa:77:40:92:eb:10:bf:
dd:cd:ec:42:2c:b4:c4:84:78:d5:03:df:c8:f1:58:5c:6b:49:
95:c7:0f:68:2e:ee:ea:73:8d:15:0f:25:49:6f:22:10:da:d7:
61:08:5a:ad:03:5d:3a:3f:e4:9c:29:2e:0a:cd:ff:15:2b:69:
96:41:aa:54:6f:89:65:a7:c8:48:94:91:07:c7:41:0f:49:e4:
ec:d7:56:9f:89:05:44:50:c5:a8:2d:54:c5:c3:33:d0:b1:40:
23:38:41:cc:7e:49:a0:a2:63:23:98:2d:d4:94:93:64:3e:88:
6f:ac:20:7a:0d:79:41:e8:0d:47:d0:17:c7:0f:51:d8:c9:9f:
fd:e9:45:bf:e9:14:de:4e:9c:9e:5b:50:1e:37:52:69:73:25:
d2:7d:17:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:43 2025 by rpki-client