Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689D8A26C91B11EFBE83CB69762E951A.roa
File: 689D8A26C91B11EFBE83CB69762E951A.roa (raw, json)
Hash identifier: HQUO/vzGZALcdFomHxEpHT8AZmMeJsxSju5hVfRT1RI=
Subject key identifier: 77:41:D2:8B:A0:D2:D3:47:4D:90:9B:68:59:08:9D:37:13:71:E5:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689D8A26C91B11EFBE83CB69762E951A.roa
Signing time: Thu 02 Jan 2025 15:08:23 +0000
ROA not before: Thu 02 Jan 2025 15:08:19 +0000
ROA not after: Mon 13 Dec 2027 15:08:19 +0000
asID: 17561
IP address blocks: 154.222.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78589 (0x132fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:08:19 2025 GMT
Not After : Dec 13 15:08:19 2027 GMT
Subject: CN=6776abe7-cc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:c2:b2:b2:82:4a:a6:ff:8d:4b:9b:8c:b1:
49:08:7e:c2:f0:12:f6:dc:4a:57:5c:49:46:db:fe:
40:39:6c:8c:2d:9c:33:10:0f:e1:8e:d9:48:bb:67:
61:a0:42:93:ce:f4:d0:a2:6d:a6:68:fc:c1:6e:2d:
b2:49:28:27:c4:cf:d5:82:53:53:15:00:8f:2d:fa:
75:18:06:e8:d4:61:13:79:7e:1d:7b:fe:36:42:03:
08:08:8a:78:94:59:b5:6b:af:b2:7a:82:70:4b:01:
b7:80:54:ad:62:90:14:7d:a6:da:c4:ef:46:ef:06:
75:ff:da:ab:1f:cb:e2:25:c8:36:12:4d:1e:38:c4:
bd:ea:f6:ad:bc:e0:5e:ee:a2:6b:91:40:3b:d7:6d:
16:d6:91:07:a3:b7:a2:cd:e2:1f:e2:31:a4:5b:bb:
b7:d3:8d:00:84:8b:bb:28:cc:f1:92:f1:5c:98:3a:
0b:0f:49:7c:32:4b:a7:87:76:14:7d:ab:7d:a7:81:
7b:30:34:d1:74:a3:f6:0d:1e:fc:97:ca:28:29:50:
ab:c0:03:bc:eb:3c:82:2b:78:39:b8:71:ad:d3:bc:
6f:77:cb:e6:62:47:1e:33:df:48:1e:e1:fc:e2:5e:
99:8d:49:77:88:88:e8:22:1f:24:f3:5b:7c:21:92:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:41:D2:8B:A0:D2:D3:47:4D:90:9B:68:59:08:9D:37:13:71:E5:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689D8A26C91B11EFBE83CB69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.67.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6e:18:62:83:11:5c:d1:c4:a5:37:d2:49:e4:e0:9a:5a:97:
9f:12:9f:78:5e:3c:c5:f1:12:3f:13:19:8c:45:d6:81:c3:ae:
f4:bf:48:cc:27:31:58:be:c3:be:62:98:2d:5f:1b:83:ed:ab:
57:55:63:2f:4c:8c:a2:99:78:17:e1:d2:b5:9e:f8:fb:a4:71:
86:bc:c7:b3:19:35:9e:31:24:dc:c4:56:a5:5c:4e:b8:3e:1d:
b8:4d:c5:a2:be:55:11:73:2c:c8:c1:f8:35:59:38:c0:ab:26:
2b:1f:b2:48:11:77:f4:1e:15:d8:02:85:9e:00:e2:c3:4f:ef:
6c:4d:24:bb:3a:27:d5:3d:b6:21:8a:8e:c7:fa:e1:ed:18:f5:
d3:cd:e3:9e:7d:40:e3:7a:58:c4:a0:21:7c:0a:74:52:41:41:
43:61:d1:51:51:05:cf:7c:f9:12:2f:fa:cb:2a:16:9e:96:33:
70:51:14:d6:98:a2:b5:d7:61:5c:07:46:0f:e5:6a:99:43:60:
f9:d4:07:9e:8b:e7:ef:1a:ac:eb:ca:3a:14:c2:1a:f9:ba:d0:
6c:c1:32:4c:64:dc:d8:84:0a:c7:48:ff:9b:7d:ed:31:45:38:
4a:41:8f:b8:ad:70:39:b9:6d:df:5d:99:07:57:96:e2:75:f0:
10:f3:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:41 2025 by rpki-client