Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89986FACC3DA11EF93EB3580762E951A.roa
File: 89986FACC3DA11EF93EB3580762E951A.roa (raw, json)
Hash identifier: 8ynmXgMiCuML37gB6j+pq4z0DNprllILYdAYXro96Cs=
Subject key identifier: 42:62:7B:A1:8E:CF:E6:CA:63:D7:13:65:89:3B:86:D0:54:8C:B9:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89986FACC3DA11EF93EB3580762E951A.roa
Signing time: Thu 26 Dec 2024 22:41:25 +0000
ROA not before: Thu 26 Dec 2024 22:41:21 +0000
ROA not after: Sun 12 Dec 2027 22:41:21 +0000
asID: 17561
IP address blocks: 154.85.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75936 (0x128a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:41:21 2024 GMT
Not After : Dec 12 22:41:21 2027 GMT
Subject: CN=676ddb95-9bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:fd:1d:3f:dd:4f:fc:18:f2:46:f0:87:b2:
b7:e6:c9:43:a5:ec:69:d7:d7:eb:4b:17:50:23:e3:
48:c6:50:16:74:3a:5d:ac:15:63:11:cf:e9:a7:cc:
fc:b1:fe:6b:c6:a5:08:39:48:ca:05:b0:45:b3:a1:
e6:41:24:ae:3a:03:0d:20:46:03:c3:09:42:9e:f6:
dd:4a:9d:1d:d7:e6:11:f1:eb:9b:09:14:d0:e4:51:
67:ee:3a:cc:b0:e3:73:45:99:1b:2c:a9:07:17:01:
cf:37:8d:3a:93:3a:ca:f1:48:ab:08:a0:3d:17:a1:
b6:82:2a:70:cf:55:36:d3:22:a0:aa:5f:1b:eb:bb:
4e:6d:4d:c3:ab:a7:d5:e7:15:76:a7:57:65:53:15:
82:4a:ce:e9:9e:14:93:93:6b:ff:ca:1f:8b:0e:42:
05:56:fd:44:19:90:13:62:50:42:be:6a:4e:7a:7d:
dc:61:a1:8e:0b:d4:72:e4:e3:43:3a:da:f3:5d:29:
39:0d:08:b7:03:ce:1f:39:13:69:fa:33:90:24:5e:
00:56:f7:95:f3:77:1d:8d:2e:69:d7:60:78:a3:9a:
71:e8:4d:32:50:39:86:c8:50:db:6d:10:e0:f0:63:
49:a4:b5:80:15:7d:04:eb:bd:dd:85:63:41:43:af:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:62:7B:A1:8E:CF:E6:CA:63:D7:13:65:89:3B:86:D0:54:8C:B9:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89986FACC3DA11EF93EB3580762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.26.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c7:19:a4:63:34:ed:6c:8d:20:9d:df:a0:db:80:32:68:54:
48:a6:8d:5c:84:04:f8:8b:53:99:a8:96:58:51:dd:6a:ad:0a:
59:00:a8:ec:40:66:ae:86:22:da:5e:85:52:b5:8c:74:89:63:
8c:6a:73:fa:35:d8:58:8d:9c:34:97:dc:03:47:ef:43:da:69:
d3:51:a0:da:a1:d9:70:8f:13:1b:7b:f9:d7:21:d9:6d:c5:60:
03:2a:e9:78:44:93:a7:80:53:b7:22:06:ad:e0:63:1b:42:41:
0a:be:b5:2d:d2:b5:c0:6c:b1:a8:29:f3:04:5b:ef:25:ed:75:
1e:95:e4:bc:11:61:de:59:bf:84:57:74:90:56:08:b0:83:6f:
29:f3:7b:ea:b7:81:0d:43:aa:2f:3a:c1:58:69:4d:b1:da:2d:
9d:5e:1d:69:e2:ca:e8:c4:d4:1d:99:44:18:ad:e8:39:2c:e9:
18:1c:4b:0c:12:c5:73:be:78:de:4b:9d:a3:61:c9:ad:e0:7f:
fa:14:10:e3:6a:b8:82:22:52:d7:3e:45:32:6b:bb:45:c8:24:
8b:76:a7:68:b7:a3:53:f3:67:88:5a:6e:8d:e0:8e:ea:78:4e:
54:99:ee:f0:e4:0e:4c:32:c1:3c:67:a6:b9:25:f1:bc:f8:86:
fb:58:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:30:02 2025 by rpki-client