Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DD7FA0C0DA11EFB46C8B74762E951A.roa
File: 75DD7FA0C0DA11EFB46C8B74762E951A.roa (raw, json)
Hash identifier: KKqZjxxMfKK70cnHSrGEdUaySgAKOz/Qxj159ge3B+k=
Subject key identifier: 19:C5:AD:D9:32:30:ED:F8:10:29:34:A3:B5:06:F5:8C:D1:2E:1C:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DD7FA0C0DA11EFB46C8B74762E951A.roa
Signing time: Mon 23 Dec 2024 03:03:18 +0000
ROA not before: Mon 23 Dec 2024 03:03:15 +0000
ROA not after: Wed 10 Dec 2025 03:03:15 +0000
asID: 984
IP address blocks: 154.89.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73366 (0x11e96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:03:15 2024 GMT
Not After : Dec 10 03:03:15 2025 GMT
Subject: CN=6768d2f6-43ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:6c:4e:b6:ce:c9:28:c7:d5:64:6f:76:79:
2a:83:dd:db:8d:c7:4d:fb:54:0d:5a:6a:07:cc:25:
22:bb:3a:ab:64:e6:ec:f9:2b:c6:3f:94:15:ac:64:
65:d0:e5:2f:fd:52:0d:af:0f:1b:15:52:20:41:75:
e3:2c:d7:63:7c:58:49:7c:e6:41:50:14:a6:19:64:
6b:2b:e4:de:82:d4:96:c2:ba:98:4b:ba:96:d9:c3:
72:bf:e6:75:e7:90:74:af:c5:51:de:96:a7:cb:f6:
3f:54:a6:62:98:15:8f:d1:8c:9a:cb:88:41:86:1e:
a7:d3:c6:48:2c:be:23:01:3f:a5:7a:98:1d:c2:4c:
eb:62:1d:d3:c7:7b:e6:9d:59:f6:5b:11:da:10:17:
5a:d3:30:d6:6b:c3:36:b7:77:7c:ea:78:85:67:df:
89:5c:8c:be:75:60:73:f6:b9:a9:ed:c1:cf:11:61:
93:b9:40:6a:37:35:3d:f0:1c:1e:82:e8:17:c1:0d:
62:eb:f8:c2:e5:8c:e8:02:a4:6f:9b:e6:dd:7c:be:
dc:d2:49:90:d9:ef:20:30:ce:56:47:a1:6d:13:3b:
a6:52:6a:1e:0e:84:7a:42:af:a8:af:b2:20:27:79:
45:1c:2d:bf:0c:f3:ab:96:13:83:f0:60:16:ed:5c:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:AD:D9:32:30:ED:F8:10:29:34:A3:B5:06:F5:8C:D1:2E:1C:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DD7FA0C0DA11EFB46C8B74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.169.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b7:a5:df:25:b5:ca:fd:56:51:a4:34:ba:b5:98:a7:fc:5e:
a2:3e:24:5f:a3:15:e2:dc:dc:a8:e3:e7:ac:d8:fd:c2:3f:92:
ab:70:c6:20:d2:1c:f3:b9:dc:a1:6a:1a:fe:98:f8:d2:2e:4a:
be:0d:fe:53:18:0b:2f:7b:bd:54:a0:2b:22:41:14:27:f4:c0:
0f:ca:1a:b1:d4:fc:42:73:9a:46:4a:26:6a:3d:a0:e0:b0:62:
ca:49:94:de:65:09:6d:2b:ee:a6:3f:d3:dc:81:9b:f0:93:4e:
e7:ec:42:cb:01:f0:d7:2c:79:99:07:d9:a5:a6:9d:82:f8:07:
4e:59:9a:61:f0:e9:a0:fb:64:02:21:2d:54:3e:04:92:82:e3:
f8:fd:aa:9b:ee:dd:c2:5c:8b:bc:03:f6:a7:2e:dd:d7:0f:cd:
14:9b:19:b7:87:01:aa:ee:47:26:fe:35:3f:99:5b:47:3b:08:
9c:20:08:b3:f7:ef:f2:4a:9f:a5:93:cc:f2:59:ba:06:de:74:
18:ca:b6:99:96:c3:f6:54:9d:58:56:e9:99:57:cf:b8:ae:ee:
6b:01:65:ea:ee:d2:d7:87:4e:54:53:cd:dd:fb:88:8f:de:7d:
29:96:c2:f4:85:ff:3b:a3:e8:25:54:5e:3e:04:fc:d9:c5:d7:
e3:2b:0b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:21 2025 by rpki-client