Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A466413EC0D211EF92111FB9762E951A.roa
File: A466413EC0D211EF92111FB9762E951A.roa (raw, json)
Hash identifier: Z3FYKI4Z18169uqEvxOT8rR6ztBlyaMXYQUouFiDyL4=
Subject key identifier: C4:9E:F9:BA:62:C0:9E:99:2A:69:B9:80:16:2A:84:3A:4D:43:FA:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A466413EC0D211EF92111FB9762E951A.roa
Signing time: Mon 23 Dec 2024 02:07:21 +0000
ROA not before: Mon 23 Dec 2024 02:07:17 +0000
ROA not after: Wed 10 Dec 2025 02:07:17 +0000
asID: 984
IP address blocks: 154.89.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73290 (0x11e4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:07:17 2024 GMT
Not After : Dec 10 02:07:17 2025 GMT
Subject: CN=6768c5d8-bd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:34:bb:30:75:54:44:4d:9f:a3:6c:8d:1a:
dc:4f:d5:a0:c8:f9:10:3b:7c:df:c6:b3:b6:f4:fb:
21:72:a8:99:22:ba:c1:5e:54:26:96:d3:3b:18:63:
a3:af:38:cf:5f:8b:53:4b:10:45:3c:0b:77:81:ba:
55:05:33:ab:90:f6:4d:8b:d4:d9:d6:18:45:3d:cb:
d1:80:9e:3e:d2:11:af:e7:c4:55:e9:00:b7:04:68:
71:b7:68:8f:23:03:66:30:33:d8:09:d5:cc:d3:ee:
bd:97:4e:8b:10:75:b0:9c:a3:87:ab:e9:b9:6c:d7:
71:d0:20:fe:43:90:33:1b:9c:8d:ea:06:b2:fd:cd:
5c:99:5d:01:c5:b1:cb:e3:eb:69:07:41:d4:85:5f:
94:f0:16:12:2e:43:6d:f9:a4:7a:93:1f:1f:52:1f:
7f:5a:ed:a3:24:3d:be:9c:17:ad:09:0b:8f:41:80:
9c:53:06:8e:a7:46:77:75:bf:e5:c0:39:c4:21:12:
ef:36:7b:8d:c7:e3:5f:9b:3b:83:96:59:d2:44:fc:
3b:31:b9:73:b2:71:75:fe:25:56:55:b6:67:53:29:
9e:7f:b0:1f:b9:05:59:bd:72:26:51:46:7e:08:4a:
40:a9:8d:0d:99:4c:d4:5a:2c:e9:7b:9d:ed:dd:f6:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9E:F9:BA:62:C0:9E:99:2A:69:B9:80:16:2A:84:3A:4D:43:FA:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A466413EC0D211EF92111FB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:5d:dc:32:5d:91:2b:63:3f:19:3b:7f:48:87:be:5e:06:df:
a1:ac:80:e1:5e:54:00:c7:6e:56:68:da:9e:81:fa:9d:8a:0a:
46:5f:16:99:24:56:b0:9c:34:75:fa:9f:ff:67:0a:75:fb:16:
ae:f5:ce:a2:99:9b:60:c4:1d:b2:a7:1d:0c:1e:24:8a:7a:80:
1e:1b:de:a0:d5:6b:d9:18:84:a8:85:25:5f:f9:8f:94:30:7c:
f5:bf:17:46:26:ca:81:65:0c:93:95:e5:c4:9c:b2:de:3c:9e:
a3:75:47:05:a1:73:63:2c:33:8e:1c:16:0f:ed:52:38:53:31:
92:47:b7:ed:7e:10:e0:d8:f1:82:2b:5e:09:a7:d7:45:93:d4:
f8:41:d1:16:e4:71:1d:3d:43:31:36:24:3a:7f:70:54:57:2b:
f6:6a:4a:89:79:e6:31:99:81:cf:de:33:7d:f2:68:af:72:14:
3c:c1:31:b0:7b:cd:53:74:3a:c6:c8:be:33:f6:0c:97:a2:4d:
8c:8d:c5:60:42:8d:2f:66:ae:2b:8b:82:76:1d:29:77:9c:78:
b3:0d:1c:71:be:f7:53:a8:cb:98:a9:6d:a8:69:c3:63:b4:b4:
a7:bc:af:85:ce:a8:ce:d5:eb:87:51:2a:81:88:d6:b7:9c:aa:
5a:9f:d1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:43 2025 by rpki-client