Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/704F64FAC0DE11EF8C50E78C762E951A.roa
File: 704F64FAC0DE11EF8C50E78C762E951A.roa (raw, json)
Hash identifier: /BwegK8pPr9inJwVtbRpTR0T8oGIS+oP2NcKzD8HAbw=
Subject key identifier: AD:8F:FA:1E:A8:44:7C:05:B2:95:16:9C:87:7E:D3:CE:6A:AC:3D:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011ECA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/704F64FAC0DE11EF8C50E78C762E951A.roa
Signing time: Mon 23 Dec 2024 03:31:47 +0000
ROA not before: Mon 23 Dec 2024 03:31:44 +0000
ROA not after: Wed 10 Dec 2025 03:31:44 +0000
asID: 984
IP address blocks: 154.89.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73418 (0x11eca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:31:44 2024 GMT
Not After : Dec 10 03:31:44 2025 GMT
Subject: CN=6768d9a3-0511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:84:41:1c:94:90:8f:24:4b:2c:73:93:2f:
1f:07:ef:02:b7:87:94:13:b5:a8:47:f4:1e:a6:6d:
ed:80:c9:24:e5:1f:92:83:5b:fd:18:e3:bf:ce:16:
f1:46:75:96:e7:1d:31:4d:91:bc:f2:e8:b1:f9:dc:
4c:b7:84:45:f8:bc:d0:24:bd:13:a1:ca:63:66:98:
1a:cc:a6:a1:7b:2d:6d:89:63:d1:15:19:7a:9b:d2:
88:33:6c:17:80:12:8f:a0:51:31:d7:48:27:d0:03:
a6:51:c6:db:1b:44:0e:35:ad:dc:74:cb:b5:94:d6:
72:dc:36:bb:ca:34:30:df:e1:74:9c:9b:5d:94:64:
fa:5e:c2:9a:68:8e:a4:cc:66:af:ca:53:7d:d8:b6:
a1:f7:c4:30:0f:6b:ff:ec:50:10:60:26:0a:ae:c4:
d1:78:79:45:32:11:1b:86:64:be:a0:80:8c:12:1f:
3d:ca:83:cd:53:6e:9f:e7:d8:31:3c:7e:ce:b2:91:
f9:cd:43:ab:b8:16:6e:a6:2c:18:4d:54:3f:ed:17:
a9:b0:25:a6:ca:da:47:db:37:56:9d:48:87:8a:6f:
0a:7c:13:75:59:23:9c:23:2b:8f:75:21:f3:59:10:
53:78:8c:78:b2:19:de:a4:02:60:a8:93:2b:74:45:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8F:FA:1E:A8:44:7C:05:B2:95:16:9C:87:7E:D3:CE:6A:AC:3D:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/704F64FAC0DE11EF8C50E78C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2e:3a:b5:88:8e:b9:9c:b9:fa:33:b5:1d:90:99:21:45:ce:
67:7d:74:a7:1c:6e:bf:c7:16:e6:77:82:90:4c:6a:5c:c9:71:
11:62:e9:21:9a:47:47:f6:46:da:5a:a1:f4:90:c7:9e:4d:59:
c6:7f:62:f5:a0:a8:8c:a6:52:04:2a:8f:86:67:41:0b:77:67:
14:28:69:f7:3c:fc:b9:7c:b0:76:58:46:c4:4f:dc:8b:7d:4c:
94:74:ae:49:ff:9b:6a:1a:ab:5a:05:2d:34:91:83:9d:4b:3b:
28:01:f2:84:55:5b:82:8d:69:5e:fb:98:2d:32:1e:d5:8b:cc:
a6:e2:c2:13:df:2f:1d:5d:69:4a:92:e0:33:d9:d7:8c:35:7a:
ed:ee:bb:da:c6:8c:3e:a9:f3:cb:26:9f:53:ee:fb:c7:b8:05:
3b:d9:04:2b:a2:81:ad:b1:0f:88:94:6e:6b:a3:ed:a9:f3:98:
bc:c4:d4:2a:b4:f9:d6:54:43:ca:6e:a8:8f:32:b0:35:f9:50:
19:39:63:4d:d2:fa:f1:99:69:e1:99:87:9b:eb:4d:78:db:81:
c0:99:82:a3:3f:ee:c6:88:21:8d:78:a3:77:76:f9:d7:86:ca:
16:65:a3:67:3d:08:be:70:10:b1:83:38:f3:a3:70:fc:12:01:
79:ec:59:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:49 2025 by rpki-client