Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6D1FD8C0E111EFB40C81A2762E951A.roa
File: 8E6D1FD8C0E111EFB40C81A2762E951A.roa (raw, json)
Hash identifier: J9TteJADK76N+ASmUzHEVz1nQ9afnTOOYXFH0JwchPw=
Subject key identifier: 18:02:12:7E:E5:BF:C8:23:B9:B6:33:45:E0:D8:81:35:4B:36:23:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6D1FD8C0E111EFB40C81A2762E951A.roa
Signing time: Mon 23 Dec 2024 03:54:06 +0000
ROA not before: Mon 23 Dec 2024 03:54:03 +0000
ROA not after: Wed 10 Dec 2025 03:54:03 +0000
asID: 984
IP address blocks: 154.89.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73458 (0x11ef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:54:03 2024 GMT
Not After : Dec 10 03:54:03 2025 GMT
Subject: CN=6768dede-9824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:97:20:46:47:02:b4:88:4c:85:6a:45:e4:
20:3e:a7:91:da:bc:00:2f:36:c7:02:22:76:d0:3e:
96:fa:72:c3:0b:55:72:b0:04:ce:5c:8d:1d:cb:06:
ff:1a:e0:0c:c0:c8:ae:ef:4a:bb:fe:b7:95:46:6f:
01:d7:74:bc:37:63:dc:54:2b:b4:f1:6c:ab:62:d1:
d9:00:7a:05:8a:51:c2:94:ab:5c:51:c4:c9:ef:14:
6f:c3:69:4d:37:67:cf:24:9c:78:72:cc:53:5a:3f:
2a:81:d6:2e:2f:e5:0a:d3:42:ca:20:59:73:21:4c:
cb:24:4a:80:86:d2:a8:51:00:33:19:c2:69:d0:01:
5a:1c:bb:ff:dd:e7:25:33:fe:a7:59:3d:92:89:1b:
b4:50:7c:4c:de:88:12:37:17:c1:4d:0d:f7:7e:0b:
e2:41:34:eb:2f:81:89:8f:3f:74:6e:dd:a4:ee:90:
39:16:d3:34:7d:b9:2c:a8:08:eb:35:ee:22:5e:bb:
6a:9a:87:d3:dd:f1:8a:f1:53:78:6c:13:5e:f1:73:
f6:91:d8:b3:7c:fc:d3:59:e7:44:75:3c:d0:11:4d:
f9:24:93:8a:b1:f2:c2:b1:80:b3:ff:62:7f:45:5e:
71:d7:9c:db:4b:81:92:0e:5f:93:a4:b5:77:a2:d9:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:12:7E:E5:BF:C8:23:B9:B6:33:45:E0:D8:81:35:4B:36:23:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6D1FD8C0E111EFB40C81A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.215.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a3:85:27:19:90:02:bf:49:f3:11:b6:90:49:60:08:a6:4b:
63:f9:06:80:37:64:83:e4:35:7b:e1:fc:96:c4:21:c5:29:ea:
67:4a:4d:6c:85:b4:f7:a2:e2:1a:07:3e:34:62:c4:17:64:99:
01:ed:67:1d:37:f2:e0:33:2a:3d:d8:6d:b1:9c:01:d3:65:10:
a1:3d:3f:a0:57:24:c6:c4:d4:43:c1:c4:de:ad:04:4f:1d:aa:
c8:33:2d:62:54:7d:c8:2c:2e:ce:33:30:30:12:d1:a3:96:8d:
78:32:55:04:fa:57:8d:4d:11:aa:9b:87:72:58:a9:05:23:14:
48:7b:7f:40:6d:6a:c2:72:ea:63:c8:a9:0e:32:c5:34:53:d5:
ff:13:64:50:d5:78:7f:52:9c:80:fc:7b:8d:37:69:00:b6:f4:
ce:3c:f8:f0:53:b6:a5:f1:bc:eb:f0:d9:5d:10:87:aa:d6:19:
42:78:6f:cc:72:13:a1:75:ea:15:70:80:ce:17:5b:b1:e7:1e:
bd:f4:22:27:ac:ef:da:73:be:76:d4:33:af:78:9a:48:f4:c7:
2b:1a:84:c0:7c:6c:23:d4:c8:86:15:50:c7:a4:b2:3f:af:bb:
1d:47:3d:68:ab:72:c5:06:aa:0f:13:d1:2a:3c:34:37:78:d3:
d9:38:00:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:32 2025 by rpki-client