Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68C1247ECDA611EFB34B6758762E951A.roa
File: 68C1247ECDA611EFB34B6758762E951A.roa (raw, json)
Hash identifier: TlaFpKtfZQuYG1m2sWk3DzOwMNbtn/q/9Sh+498ZRZI=
Subject key identifier: 3D:DC:1D:F1:48:7B:D6:E3:19:EC:8F:25:82:3B:26:3F:C5:FA:AC:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01369C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68C1247ECDA611EFB34B6758762E951A.roa
Signing time: Wed 08 Jan 2025 09:53:28 +0000
ROA not before: Wed 08 Jan 2025 09:53:24 +0000
ROA not after: Thu 23 Dec 2027 09:53:24 +0000
asID: 17561
IP address blocks: 154.89.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79516 (0x1369c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 09:53:24 2025 GMT
Not After : Dec 23 09:53:24 2027 GMT
Subject: CN=677e4b18-9a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:37:d5:d0:65:2e:56:ea:45:8b:c1:84:92:69:
12:13:83:44:53:f4:a7:57:c5:b9:c9:66:24:48:b4:
1d:f4:18:12:d0:49:ae:ef:0c:23:5e:09:5a:5c:30:
a9:8b:66:70:91:e3:ae:91:d4:25:9e:9d:32:2c:b3:
07:a0:61:49:6b:18:d0:7e:59:53:c5:08:b2:a8:c0:
91:55:92:c0:a0:72:d9:f3:96:e5:3e:d4:4f:7b:70:
9d:d0:67:9c:77:c1:4a:5c:c9:ea:13:69:5f:c6:24:
d3:86:7a:8b:67:47:7f:7c:85:33:21:91:d1:05:ef:
6f:25:a4:e6:13:8c:1b:5b:41:d7:4f:a4:67:34:66:
21:51:6f:a1:f5:aa:a0:c6:13:88:34:e6:dc:d0:2b:
7b:42:1a:0a:d8:eb:a0:a8:54:84:f6:84:75:cc:a2:
02:93:ac:30:8b:1a:5d:2d:18:f4:3d:00:79:86:54:
28:d0:1c:ac:17:4e:db:5a:f1:f0:12:67:67:a6:1c:
85:48:51:32:d0:06:ab:60:fc:81:a3:ab:63:a7:4c:
ec:53:bb:de:56:d0:b9:24:e5:e4:62:51:2e:06:f0:
ae:d4:af:a4:10:4a:6b:04:fb:19:66:65:34:ef:93:
3e:33:5b:da:50:9b:9d:bd:20:89:3f:a8:8c:28:d5:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:1D:F1:48:7B:D6:E3:19:EC:8F:25:82:3B:26:3F:C5:FA:AC:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68C1247ECDA611EFB34B6758762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.18.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d8:f6:cf:64:18:80:54:f5:15:27:72:ec:20:71:f2:9e:e4:
ab:5b:29:c3:fc:2a:65:6f:d6:0f:5a:ee:cc:93:e6:f4:ea:a8:
69:c4:6d:0f:db:31:ed:fe:57:d8:59:98:f4:4f:cc:4c:de:6b:
d3:60:4f:ad:87:67:6b:a2:71:3b:0c:e8:cd:5d:2e:82:b9:69:
04:ce:1d:0c:e5:a1:12:50:c9:c3:4a:73:18:4a:83:a4:83:db:
d2:82:07:24:dc:66:d0:40:27:35:58:a1:b5:88:77:25:e9:16:
85:ae:75:02:30:f9:6e:44:20:49:f1:9b:55:61:39:15:46:a4:
ed:ba:dc:51:d2:8c:66:e8:52:56:69:3b:a9:87:5d:a0:f2:89:
c2:e0:a0:d8:09:31:27:4d:b0:ea:2c:e1:3f:98:6d:b2:41:a0:
de:a4:3b:13:e0:b9:4e:93:3b:5c:c2:d3:43:82:c8:fb:ef:8d:
da:51:4e:d9:ec:db:9b:a2:06:e4:c3:fe:47:40:01:15:62:8c:
d2:1f:22:5c:78:74:7d:ce:ed:2f:07:de:b3:04:e4:83:d5:72:
c5:2e:f1:e5:d0:03:50:0e:fd:83:0a:9c:42:53:78:b8:48:19:
1b:7b:2c:00:3b:f6:7d:0c:8b:d5:21:e7:11:44:d3:fb:e0:0d:
ee:47:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:47 2025 by rpki-client