Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64CE5CE2CDD811EF9DA63993762E951A.roa
File: 64CE5CE2CDD811EF9DA63993762E951A.roa (raw, json)
Hash identifier: dskSapWhl2gZGDfdJeeIB2MeAxR7FKLQT6YfWmq5PFk=
Subject key identifier: 82:14:76:62:8E:13:1A:88:C5:2F:EB:0E:78:FC:7B:BA:18:6D:CB:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01377D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64CE5CE2CDD811EF9DA63993762E951A.roa
Signing time: Wed 08 Jan 2025 15:51:16 +0000
ROA not before: Wed 08 Jan 2025 15:51:12 +0000
ROA not after: Sat 03 Jan 2026 15:51:12 +0000
asID: 984
IP address blocks: 154.89.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79741 (0x1377d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:51:12 2025 GMT
Not After : Jan 3 15:51:12 2026 GMT
Subject: CN=677e9ef4-af19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:ea:3c:54:e8:75:ff:36:47:9d:95:7c:30:
89:3a:80:fc:02:b9:65:4b:d2:3a:33:bf:d6:78:c9:
5a:59:43:ad:96:d6:98:13:a8:72:c0:5a:f0:0f:96:
5a:cc:ad:62:c5:c1:aa:6c:76:61:d5:3e:b4:fe:82:
87:9e:93:d7:27:7f:62:c2:03:a8:7c:22:54:8b:b5:
fa:4b:d4:96:52:52:61:9e:7d:60:25:e6:1f:c1:47:
3c:91:34:d3:b7:8b:f2:82:f7:96:df:cd:a7:92:98:
a2:89:8e:cf:39:ac:f2:f2:87:bc:b0:95:4e:69:78:
8e:7e:13:6b:34:7a:ad:a7:34:f0:a7:cc:b5:fc:55:
82:6e:22:f5:a7:d8:f3:f8:ab:a4:d4:4a:ee:a7:91:
6d:6d:e3:96:4c:e9:47:ef:4e:4f:8e:a6:37:ea:6b:
7f:e5:8c:12:a2:95:c5:a0:26:a7:ad:49:49:24:36:
60:35:05:91:1c:2a:22:90:fc:1c:64:4b:32:1f:06:
56:c6:de:fd:43:b0:99:50:d2:15:7f:16:89:f9:12:
e5:b7:e8:7b:3c:96:27:67:a7:7a:07:df:ff:cb:f5:
54:c7:4e:7b:07:52:52:fc:0a:37:8d:81:6e:89:f1:
e6:3f:10:6f:b1:97:40:2c:ad:0a:a9:98:ac:fa:7d:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:14:76:62:8E:13:1A:88:C5:2F:EB:0E:78:FC:7B:BA:18:6D:CB:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64CE5CE2CDD811EF9DA63993762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.141.0/24
Signature Algorithm: sha256WithRSAEncryption
32:51:8a:00:ec:b7:51:74:74:e2:5f:16:f8:3a:a2:11:db:09:
40:82:d4:f2:bf:11:bd:5a:c1:bf:1b:25:4a:0e:09:43:8f:13:
71:2b:c6:be:9a:8f:43:40:32:d3:87:e3:ca:d4:52:dc:3b:40:
8c:5e:e2:5f:e3:3f:89:5e:bb:a0:a0:68:fd:90:fe:38:40:70:
29:04:8d:e3:30:7c:25:08:ef:54:55:6c:47:95:a5:db:1c:1d:
06:79:c8:56:11:c9:08:99:16:f2:af:95:5d:ce:47:8d:65:7d:
82:07:7c:cf:50:db:94:b1:0f:94:d6:11:f3:71:28:6c:eb:fb:
0d:01:c9:24:20:55:ec:05:6c:ef:ea:0b:fa:1b:74:82:fa:c0:
c0:76:0d:ec:2d:97:d1:54:9c:8a:bb:95:79:07:e0:c8:7e:30:
d6:af:d3:c8:c7:1c:31:93:ad:36:cb:ad:5f:1f:db:de:5a:78:
86:bc:3b:ea:3c:f7:59:5a:2a:a4:cb:59:78:46:f1:1d:8a:35:
56:00:21:be:f3:7b:1e:68:a8:9f:fd:a5:62:6e:50:45:ca:4e:
58:33:ec:33:01:5a:bc:94:a6:60:13:10:18:62:f8:6a:2d:1e:
72:c2:eb:ea:06:2c:98:3a:fe:5b:48:b9:09:db:eb:da:a0:f6:
b3:e4:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:44:30 2025 by rpki-client