Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89DCEFFAD2E511EFA0359C96762E951A.roa
File: 89DCEFFAD2E511EFA0359C96762E951A.roa (raw, json)
Hash identifier: zfepsjnlEQ+f/xXE3h7/6fPusvpK0ervRD28M/Pf6ZI=
Subject key identifier: 03:10:89:9B:9B:E2:70:1A:C5:00:D1:BC:C3:CA:20:AE:13:72:A4:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89DCEFFAD2E511EFA0359C96762E951A.roa
Signing time: Wed 15 Jan 2025 02:07:57 +0000
ROA not before: Wed 15 Jan 2025 02:07:54 +0000
ROA not after: Sat 03 Jan 2026 02:07:54 +0000
asID: 984
IP address blocks: 154.222.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80782 (0x13b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 02:07:54 2025 GMT
Not After : Jan 3 02:07:54 2026 GMT
Subject: CN=6787187d-5910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:7d:c1:72:20:53:97:bf:1a:17:2b:9d:08:
0b:1d:a2:35:6f:13:ad:23:14:3e:e6:b3:45:4f:7c:
83:8a:0c:88:d3:06:4a:fb:34:db:b3:60:ae:a4:5c:
49:a0:a7:b1:1d:67:00:d4:5d:5d:72:10:cb:f3:c8:
f2:1d:91:58:14:93:e8:30:d5:3b:2f:b5:ef:6a:1c:
99:7d:5e:dc:8d:89:5b:8c:b4:bc:38:3d:01:ba:61:
55:59:c6:91:cc:ca:ae:50:11:26:e0:cc:28:e6:84:
2d:e4:a4:f8:a9:57:3f:aa:7d:2c:30:c0:b6:27:6e:
3a:c5:dd:97:21:79:6d:19:0e:b8:59:e3:3a:c6:df:
8d:17:30:db:6f:4b:be:47:ef:5d:3d:01:38:4d:49:
7f:d2:f5:b2:0d:6b:fa:d6:4c:8b:12:cf:5f:31:e1:
2a:c5:6f:9d:c2:16:48:d1:c6:dc:a1:71:a6:52:66:
ec:98:69:a8:e3:27:25:d0:2d:82:66:da:d8:d1:6a:
18:f8:5b:5c:be:df:f0:18:20:78:18:10:af:1a:32:
3c:e1:07:86:47:a8:be:d0:41:16:44:36:a0:d6:ca:
c1:2b:a6:84:8c:91:6e:18:48:57:73:df:3d:e6:88:
e5:4a:bd:4d:57:7d:5e:c2:d3:88:f2:7a:99:85:89:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:10:89:9B:9B:E2:70:1A:C5:00:D1:BC:C3:CA:20:AE:13:72:A4:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89DCEFFAD2E511EFA0359C96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.112.0/24
Signature Algorithm: sha256WithRSAEncryption
35:99:16:7a:f3:dc:6e:51:5d:c2:bd:f5:a0:d2:1e:c1:b1:94:
09:ff:1b:3d:ee:58:a7:90:e4:64:e1:b8:05:e1:52:cf:02:6c:
10:fc:e0:49:49:50:4e:23:8f:ab:a4:18:74:8f:8d:7c:f9:de:
0b:d0:f8:41:81:4d:21:b1:ee:51:31:99:d3:1e:2f:c1:0e:c7:
38:43:7f:ef:c0:97:41:b6:84:7d:7c:be:43:a6:1b:a1:1d:9a:
1a:eb:84:0f:de:3d:bd:56:bc:77:f2:60:16:d5:90:d8:bd:b2:
08:30:0c:e1:31:01:70:47:a6:ed:95:18:50:41:fa:46:2c:66:
84:9c:75:35:2b:1a:4a:5d:8e:f9:b5:94:57:47:c7:70:2d:41:
07:ec:6d:63:58:22:3b:39:5d:cf:3e:6e:9a:9f:b3:aa:e5:be:
8e:20:0f:90:8a:c3:f2:87:f7:53:a4:c3:96:fa:f8:50:83:01:
a8:46:ee:a4:97:ac:32:48:84:ed:fb:97:a1:37:f1:f5:f9:c2:
2e:3b:48:77:10:b7:c6:76:2a:93:92:d7:76:49:ad:fe:b3:77:
20:ac:69:d7:24:be:5c:8a:19:aa:e4:9b:39:ab:bf:65:85:67:
41:2d:61:5a:56:c8:00:05:e0:4e:0f:0f:8d:0a:07:b9:7b:8d:
5f:01:39:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:35:17 2025 by rpki-client