Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85C53732C0E411EF9C76C6B6762E951A.roa
File: 85C53732C0E411EF9C76C6B6762E951A.roa (raw, json)
Hash identifier: wTa4m0vUV86LZlo+Obk6vncbF2hraedx1syKjNpHbas=
Subject key identifier: 3F:F3:29:3B:72:9F:84:23:14:3F:06:AD:12:0D:FE:44:6D:26:EC:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85C53732C0E411EF9C76C6B6762E951A.roa
Signing time: Mon 23 Dec 2024 04:15:20 +0000
ROA not before: Mon 23 Dec 2024 04:15:16 +0000
ROA not after: Wed 10 Dec 2025 04:15:16 +0000
asID: 984
IP address blocks: 154.89.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73496 (0x11f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 04:15:16 2024 GMT
Not After : Dec 10 04:15:16 2025 GMT
Subject: CN=6768e3d8-0798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:94:10:33:8c:d1:99:08:4e:6c:83:20:f3:
11:3c:eb:b3:46:ec:22:1c:4d:76:49:7f:b5:a6:79:
06:d9:2e:79:5d:ca:df:06:73:f0:37:85:4d:7d:b1:
c0:d1:e5:33:71:8b:fd:70:23:08:c3:64:4f:18:c1:
f5:d8:c2:3c:9f:f2:54:3d:28:bd:7d:12:77:7c:6b:
08:c9:f5:45:2b:7a:88:ff:a1:a9:ae:de:b2:00:ee:
1e:d5:e3:81:3c:4e:30:30:47:14:b6:54:33:60:29:
35:21:3e:e9:99:b2:5d:ff:8e:ad:21:26:e8:c0:fb:
23:e1:e9:81:ac:87:69:ff:aa:b3:eb:ea:0f:8e:7c:
5c:82:de:97:d6:d6:13:9c:30:60:36:6d:b6:d0:a4:
dc:ff:cb:5f:22:3e:d1:1b:c2:e2:c2:6d:03:90:21:
ce:ef:43:2d:e5:07:ee:1c:88:0c:98:c3:28:54:1d:
c8:36:d9:73:0d:60:fd:33:eb:f6:9d:f6:7a:55:4d:
9f:91:8e:a1:cc:73:ed:d8:f5:02:cd:0d:f5:1b:84:
ed:81:93:61:11:08:b8:16:ed:34:e2:ee:88:49:f2:
db:d7:68:b5:07:bb:56:e2:6e:2f:fb:01:33:ae:07:
13:bd:00:e7:2d:c5:9e:82:3a:63:fc:52:26:db:4c:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F3:29:3B:72:9F:84:23:14:3F:06:AD:12:0D:FE:44:6D:26:EC:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85C53732C0E411EF9C76C6B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.251.0/24
Signature Algorithm: sha256WithRSAEncryption
73:25:23:b7:96:6a:f2:dc:45:37:6b:0f:76:54:e8:2f:92:66:
48:94:31:52:60:f0:4f:e6:7c:83:75:a0:fc:e3:03:c7:bc:ad:
03:99:3c:90:83:c1:39:83:81:ab:14:4a:07:83:8b:14:c6:5d:
87:15:74:ca:e7:e9:80:27:10:25:03:e3:32:58:25:a5:ff:ed:
9f:1e:48:56:65:d3:a0:c6:86:98:07:3c:0e:cf:c6:d8:1e:9b:
1d:6a:c7:8c:7e:db:0d:16:54:f8:44:14:6b:49:ab:13:5a:e9:
23:4c:20:4d:89:47:3a:64:98:96:a9:61:26:60:9e:d9:e7:71:
39:71:11:18:ae:5e:45:d8:ac:c8:86:ec:2b:d6:8f:f6:a9:0d:
cf:22:62:4b:60:05:2e:fd:70:a0:18:fd:a3:82:91:b0:0a:0b:
4a:ac:bc:af:fb:ec:ad:74:a7:d0:0b:ac:47:77:22:22:f2:31:
1a:93:f2:bb:32:2a:65:fa:33:fc:d3:a1:47:df:4d:1a:bd:06:
04:6f:50:16:ce:cd:2e:de:b6:0c:b6:be:d1:52:6e:3a:38:ee:
84:72:bc:bd:dc:91:6a:1c:a3:bc:c7:e9:b4:44:50:1e:83:fc:
d0:93:e1:f2:47:36:05:6a:cc:07:cc:a7:b8:a2:cd:39:14:52:
67:1e:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:49 2025 by rpki-client