Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67341880CDDF11EFA2E029BE762E951A.roa
File: 67341880CDDF11EFA2E029BE762E951A.roa (raw, json)
Hash identifier: qBbybMTEOjA1GKZMzK9sUEaVF/aoGSO+R88serU9jlU=
Subject key identifier: 51:6A:28:74:D4:7F:1B:37:B6:E4:F7:DF:7C:F8:E0:F0:7A:B0:AF:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67341880CDDF11EFA2E029BE762E951A.roa
Signing time: Wed 08 Jan 2025 16:41:26 +0000
ROA not before: Wed 08 Jan 2025 16:41:23 +0000
ROA not after: Sat 03 Jan 2026 16:41:23 +0000
asID: 984
IP address blocks: 154.89.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79795 (0x137b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:41:23 2025 GMT
Not After : Jan 3 16:41:23 2026 GMT
Subject: CN=677eaab6-41fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:aa:38:88:56:2a:ed:70:ec:27:4f:d2:52:
48:08:e1:dd:93:a6:2e:87:52:ab:8a:38:27:01:0a:
c1:2c:14:32:54:5d:1b:d2:e3:3e:67:e5:e4:0c:9b:
c2:59:b8:70:5f:15:54:02:d3:62:87:fe:b2:5f:53:
cd:d4:bf:95:54:65:ca:d5:9e:e1:4c:4d:d9:a3:a2:
7d:ba:4a:d1:cc:b7:27:59:69:56:eb:48:c1:25:6e:
80:7d:a8:be:6a:62:57:be:6f:7e:93:1a:7f:5f:98:
72:8f:84:b6:87:2a:ad:1e:ae:89:0a:4a:32:2d:29:
32:60:1e:87:6d:3d:66:2d:8b:f0:b5:2a:e8:4f:7a:
8f:84:f4:ee:57:28:d0:a7:8e:ab:a4:fb:f4:00:80:
78:fb:0c:0f:c2:ba:80:87:9b:57:09:59:01:e2:36:
cb:dd:e7:03:a4:93:dc:2f:e4:c5:b0:b3:cf:9e:5a:
51:56:d0:62:6c:2a:f3:57:f6:f7:4c:b1:15:1b:17:
3e:c4:d9:cd:6a:37:c4:e4:a0:65:f1:d4:ce:37:ab:
45:26:02:29:f1:b8:3f:36:2a:45:98:63:42:4e:c0:
f0:5f:05:30:e6:4b:a8:dc:46:64:1b:6d:55:dc:ca:
58:38:82:61:b2:c0:a3:09:14:6b:ca:c8:2c:2c:3a:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6A:28:74:D4:7F:1B:37:B6:E4:F7:DF:7C:F8:E0:F0:7A:B0:AF:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67341880CDDF11EFA2E029BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.168.0/24
Signature Algorithm: sha256WithRSAEncryption
88:33:19:a5:4f:ca:0f:36:e0:df:84:79:db:d5:c1:c8:1c:98:
c7:18:fb:ae:fe:f2:67:32:4c:48:03:b4:2e:fd:ba:d8:10:3f:
dc:f7:81:86:4b:56:72:51:7a:40:f9:3e:38:d4:44:88:d7:fc:
77:0b:a0:1a:a6:b4:da:ee:6e:7d:1b:31:2d:e6:74:19:53:33:
e3:7b:f9:12:22:13:21:5a:f8:b3:bf:4f:40:47:d3:9d:ef:1b:
53:a1:27:b8:8e:99:a9:31:60:3f:62:1d:2d:d4:d1:72:6b:a9:
3c:4f:96:1f:39:5e:b4:32:59:31:7e:a9:fc:7c:6a:75:d9:a4:
7b:41:a8:f6:f6:35:8b:da:51:87:ec:3e:f1:cc:49:c6:9f:43:
e5:9f:87:6f:2e:27:12:b4:12:0c:3b:3e:0a:20:a7:85:26:de:
36:bb:58:5a:1f:fd:d7:1c:aa:0c:38:af:bd:af:7e:7c:f6:0f:
b0:97:ec:a2:e1:19:12:eb:01:5a:f5:4f:3f:b9:61:f1:5c:11:
f7:ec:b4:0e:93:dd:b7:37:8d:66:dc:f0:18:e1:01:48:c9:77:
cb:09:4f:08:18:95:06:6c:a4:3e:69:1b:db:b6:32:7e:61:70:
3e:e8:5e:91:1b:73:72:d2:28:d8:34:76:99:28:97:75:13:30:
e1:a2:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:58:13 2025 by rpki-client