Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2407A56CDEC11EFBD069492762E951A.roa
File: A2407A56CDEC11EFBD069492762E951A.roa (raw, json)
Hash identifier: rz7+ke/2B2gS+0jeY7M+uwrXD7/vKE9Bbw/HZfRmViw=
Subject key identifier: 4C:1E:A0:E3:00:12:1C:57:DA:AC:1E:71:62:30:B2:84:C9:0E:29:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013815
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2407A56CDEC11EFBD069492762E951A.roa
Signing time: Wed 08 Jan 2025 18:16:09 +0000
ROA not before: Wed 08 Jan 2025 18:16:05 +0000
ROA not after: Sat 03 Jan 2026 18:16:05 +0000
asID: 984
IP address blocks: 154.89.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79893 (0x13815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:16:05 2025 GMT
Not After : Jan 3 18:16:05 2026 GMT
Subject: CN=677ec0e9-6c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:bb:c3:1c:a1:d8:4e:8f:00:95:61:6e:ee:
04:f1:6b:64:1e:5d:30:14:bf:9b:0c:54:e5:f4:b6:
a3:44:fb:5d:ce:07:bc:13:32:e3:1e:52:32:59:67:
8a:49:d9:bf:97:ac:de:f6:8e:54:1c:34:14:d3:19:
78:6f:21:88:6d:31:ce:a1:fe:60:1c:d5:2b:13:ec:
e0:cb:e7:67:b3:3c:f5:4c:2d:d7:f6:9b:cf:a9:bb:
c8:0e:bb:0d:5b:a2:5f:fd:39:79:83:eb:d8:06:22:
c8:d6:b5:35:80:53:04:00:e9:f1:a6:ac:fd:ae:88:
b5:cf:b1:3a:3c:bc:95:19:e6:db:cc:21:fd:b4:df:
67:8d:65:ac:ee:fe:47:24:77:a7:94:25:98:fd:19:
b2:c6:65:98:2c:77:fd:d0:69:b5:b8:9a:7b:4d:42:
e8:19:19:3b:47:ee:f3:73:9a:4e:e6:02:18:1e:b5:
fa:d3:4f:2e:48:f6:57:d3:7a:2e:4c:c6:1d:6d:28:
63:db:94:b6:4c:e0:ad:9c:ef:93:a0:95:32:31:d1:
50:20:b3:fb:54:2d:a5:9c:17:1d:a9:6e:82:c0:24:
38:9e:d7:3a:36:83:f7:5c:da:c4:79:35:5e:1a:bb:
52:67:2b:bc:96:83:a6:eb:33:eb:e8:0c:f4:e7:56:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1E:A0:E3:00:12:1C:57:DA:AC:1E:71:62:30:B2:84:C9:0E:29:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2407A56CDEC11EFBD069492762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.217.0/24
Signature Algorithm: sha256WithRSAEncryption
77:cf:cd:20:d9:b4:2e:51:8d:bb:9e:9f:fa:5f:2c:a6:d3:b7:
34:65:4d:e1:03:33:d9:54:fb:cd:5a:0b:1b:a0:b8:42:05:34:
91:71:18:d2:1b:7a:f9:04:de:e4:b7:20:ad:1f:73:32:d5:40:
9e:bc:e0:19:29:c7:a7:25:49:af:3d:c8:4c:c9:7d:4b:be:b8:
de:c2:1d:4c:58:a7:32:f8:cd:e3:3c:f4:62:b2:ae:74:63:36:
75:5b:bf:39:03:a6:b1:08:04:c8:4a:51:50:10:64:b7:55:86:
94:16:b2:97:82:59:93:07:90:4a:2b:52:c3:0d:18:87:c5:7a:
6a:82:d3:eb:ce:f9:8d:48:03:be:d9:44:4a:10:a9:30:4c:ff:
2a:2a:48:7f:fe:2a:1e:14:a0:9b:a8:2d:9e:19:2a:d6:b0:40:
0e:1f:60:bf:2a:f3:91:1c:9e:7b:a2:ab:f9:d1:35:20:e5:e2:
09:cc:fc:57:c1:c2:f9:5e:f9:4b:4a:5c:6b:dd:ab:b6:7f:1b:
34:20:aa:ba:2c:64:7a:bf:54:63:78:89:9d:27:83:60:b9:b1:
40:a5:fc:2c:f5:14:37:61:ec:2a:ed:32:65:35:a6:fc:23:8d:
ca:b0:28:1a:6b:02:f0:54:d4:45:fa:4b:3d:57:58:70:44:06:
2c:40:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:58 2025 by rpki-client