Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F90CA8C0DF11EFA2CF2793762E951A.roa
File: 83F90CA8C0DF11EFA2CF2793762E951A.roa (raw, json)
Hash identifier: ci+RMehsutlz3Q2tsLGDt+rWQeM0i0nYDLVvVDCW19c=
Subject key identifier: 52:AC:11:3D:2F:AB:67:EE:FA:3B:C6:45:7F:F4:76:E7:CF:DC:01:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011ED8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F90CA8C0DF11EFA2CF2793762E951A.roa
Signing time: Mon 23 Dec 2024 03:39:30 +0000
ROA not before: Mon 23 Dec 2024 03:39:26 +0000
ROA not after: Wed 10 Dec 2025 03:39:26 +0000
asID: 984
IP address blocks: 154.89.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73432 (0x11ed8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:39:26 2024 GMT
Not After : Dec 10 03:39:26 2025 GMT
Subject: CN=6768db71-fa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:df:b2:db:69:dc:5c:a2:85:a2:47:57:c9:
75:cb:9d:1b:3d:9d:e1:c7:a4:44:76:b9:4c:74:be:
b0:e7:e9:15:66:69:d1:3c:a8:3b:e9:49:b1:d2:f9:
00:91:d1:42:a7:c4:3c:b1:e3:6a:f5:77:1b:84:5f:
a1:7e:19:59:35:d8:e6:52:4c:6b:03:41:e7:0d:31:
76:26:27:b8:52:97:60:54:9c:cc:37:ae:57:60:eb:
c2:34:19:02:98:57:22:74:fe:fc:d9:de:88:cd:5b:
40:f0:b4:ca:d1:03:c0:4a:c1:01:52:f9:d5:78:e3:
0a:11:69:ee:9c:d4:86:d4:5d:f2:9b:fe:69:2b:5b:
16:0b:17:73:71:ae:45:f7:30:3f:5d:f9:f7:24:d2:
6f:62:e3:91:a2:64:15:9d:f4:b6:c3:9b:e7:a5:cd:
86:a4:79:1b:bf:7d:b2:ba:51:68:dd:78:3f:6d:09:
4e:3e:be:c7:c6:56:3c:5c:be:86:d8:ca:b5:0b:39:
0d:7e:ab:c9:21:83:c6:78:e7:6a:05:73:1b:05:6b:
9f:d4:c5:bd:cc:a3:1d:cb:c3:95:66:15:0b:e4:5f:
1c:ed:86:67:10:98:a5:9c:1b:36:5f:92:1a:66:a0:
87:48:55:aa:44:5a:0b:49:83:dd:a0:2e:60:7a:0c:
4c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:11:3D:2F:AB:67:EE:FA:3B:C6:45:7F:F4:76:E7:CF:DC:01:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F90CA8C0DF11EFA2CF2793762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.202.0/24
Signature Algorithm: sha256WithRSAEncryption
71:59:f6:b6:45:b6:8f:94:75:28:98:de:42:9b:e8:36:2d:e1:
54:ad:e9:bb:bc:d6:41:8a:9c:82:f7:59:b3:4c:28:6c:b9:ca:
d3:f1:94:9f:c9:ba:28:83:43:9c:83:d7:2a:d6:36:1a:75:bd:
fe:d5:74:f4:d0:6f:da:14:f5:59:90:3f:95:9e:c1:c8:70:cf:
a7:3a:e7:4f:4e:65:55:a5:7f:2b:4c:c3:c3:09:fe:b5:1a:e5:
b9:19:64:a3:db:d1:b4:1b:c8:86:b6:c4:9d:14:e6:3d:37:cb:
6f:44:41:0a:73:10:30:a2:92:fc:de:a7:5a:14:1c:32:5f:7e:
52:17:33:8a:99:92:57:c2:6a:ed:f4:02:e3:81:9c:07:86:0e:
95:7c:00:bc:e1:c1:24:1b:eb:47:ec:3f:84:09:9e:94:d6:d6:
31:44:21:f6:21:08:dd:d3:ce:79:d1:0d:d4:d6:c7:9f:32:23:
25:98:63:bc:89:c5:25:82:fb:a9:08:a1:72:6a:bb:cb:8b:dd:
9f:34:24:e5:b5:31:61:38:1e:2b:12:93:35:47:86:a1:1d:23:
d8:3b:61:61:e7:7c:c3:75:45:7c:68:f8:56:38:e2:e9:aa:d5:
9e:8b:72:ae:15:17:2e:2b:81:85:2c:7a:f9:4d:22:05:39:dc:
96:f8:9c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:37:21 2025 by rpki-client