Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFEE8F2CC0DF11EF91B92F95762E951A.roa
File: AFEE8F2CC0DF11EF91B92F95762E951A.roa (raw, json)
Hash identifier: 07YJz0nbmeRgSY7evaDKGDExmESwjwdulTKhdHpHZGQ=
Subject key identifier: C9:37:FA:9F:A3:19:5C:14:DB:33:C1:98:BC:91:65:A8:B3:FA:22:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFEE8F2CC0DF11EF91B92F95762E951A.roa
Signing time: Mon 23 Dec 2024 03:40:43 +0000
ROA not before: Mon 23 Dec 2024 03:40:40 +0000
ROA not after: Wed 10 Dec 2025 03:40:40 +0000
asID: 984
IP address blocks: 154.89.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73434 (0x11eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:40:40 2024 GMT
Not After : Dec 10 03:40:40 2025 GMT
Subject: CN=6768dbbb-c8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:0b:5d:19:a4:b7:c6:c7:94:73:fb:77:20:
06:8b:7e:6e:ad:65:45:70:36:55:4e:2e:de:3c:9c:
41:1b:52:b1:63:65:ab:ba:61:7e:ec:f4:52:86:6b:
9e:ae:46:b0:fa:0c:4b:bf:c1:c9:7d:af:01:c4:9d:
60:71:79:e5:0d:26:71:83:1a:0c:6d:b9:0f:ab:48:
71:65:8a:56:62:bf:a3:4a:16:a3:b1:cf:32:74:5f:
8c:1f:25:71:88:1a:55:5f:68:d6:bd:45:19:df:40:
33:45:06:9d:9f:71:6c:78:ca:ee:03:f5:6d:55:91:
75:23:d0:28:c7:3b:37:65:a6:87:ae:40:d5:21:5a:
74:ff:93:69:de:26:b6:3d:74:6a:2f:35:3a:f8:51:
a2:0e:4d:93:77:2f:3a:35:a0:9f:66:75:b4:4a:51:
15:e3:49:6c:ce:ad:93:79:0b:5d:39:6c:e4:54:b6:
72:d8:f5:88:65:dc:61:3d:11:79:0c:80:32:8a:5f:
b6:5f:f7:a1:2f:f7:80:b6:2b:d7:f4:a6:a5:6c:26:
a2:9a:03:6e:18:f9:d4:5e:4b:fd:de:49:96:51:b3:
6b:f8:5f:3d:a4:b8:a7:99:5f:eb:1d:1a:18:65:14:
f8:b6:10:82:75:a2:39:61:72:9c:68:9b:3b:07:7f:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:37:FA:9F:A3:19:5C:14:DB:33:C1:98:BC:91:65:A8:B3:FA:22:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFEE8F2CC0DF11EF91B92F95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.203.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:92:2d:23:fd:34:d2:31:e7:eb:77:e1:95:0b:27:3f:60:78:
77:35:dd:7d:57:46:e9:32:6d:46:f6:1f:29:20:f2:b9:68:bb:
0c:65:bb:b2:28:39:d7:4f:bd:c2:e8:b4:9c:4b:1c:52:d2:e4:
de:d5:c8:01:72:94:e6:03:22:c8:0b:67:c3:1c:63:4c:10:02:
c1:7a:09:ca:58:0e:26:11:f6:43:4d:f2:78:7a:9a:03:88:a1:
9a:86:a3:64:fe:71:32:27:86:52:13:ee:1f:17:04:84:dc:83:
16:6f:1c:7e:6a:6f:b3:d6:77:fd:12:f1:01:26:e2:59:37:43:
f0:d7:fd:cb:1c:80:91:9b:86:41:d8:db:e0:c9:5e:7c:49:5e:
1d:f4:b6:c5:f6:d4:05:71:a2:c1:59:ad:c9:cc:32:e5:e8:04:
69:89:c0:2f:af:45:b1:88:95:36:fd:f7:ca:da:a6:a2:bc:16:
b4:c2:10:0a:52:d6:11:72:c0:54:9f:46:57:0c:ed:fe:b8:14:
26:dd:29:f3:68:b0:36:0d:f9:8c:b0:ee:70:75:ee:ec:83:75:
73:0c:14:13:d3:a3:9c:b9:c4:c8:47:02:83:ee:76:77:ec:a5:
4a:fb:d8:e5:d9:26:48:ca:5b:ba:9b:1c:b0:1a:79:af:08:b7:
48:21:ee:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:06:34 2025 by rpki-client