Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BC502EC0D711EFBFAC2960762E951A.roa
File: B3BC502EC0D711EFBFAC2960762E951A.roa (raw, json)
Hash identifier: 5yiAI2HCeecByuLEiMFymVRWOQrwFkM/y2LdY0yDBWQ=
Subject key identifier: D2:5C:16:74:B9:06:8C:A5:D2:B6:16:EE:08:0D:B7:DB:87:23:7B:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BC502EC0D711EFBFAC2960762E951A.roa
Signing time: Mon 23 Dec 2024 02:43:34 +0000
ROA not before: Mon 23 Dec 2024 02:43:30 +0000
ROA not after: Wed 10 Dec 2025 02:43:30 +0000
asID: 984
IP address blocks: 154.89.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73330 (0x11e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:43:30 2024 GMT
Not After : Dec 10 02:43:30 2025 GMT
Subject: CN=6768ce56-8d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:e7:42:77:0d:27:9a:2c:a5:1f:7f:a6:b2:
5e:93:4d:ec:ba:56:a1:75:28:f3:50:65:68:b8:92:
a4:13:cd:de:e7:2b:5c:60:31:01:97:40:1e:77:a4:
87:3d:aa:24:c7:ce:82:95:c8:dc:73:9c:0d:a7:76:
65:4a:93:57:2c:9c:0e:02:08:42:78:6f:22:b3:1b:
c4:d4:93:db:c9:ac:8f:29:5d:d2:30:85:7a:ba:02:
66:60:f9:a4:77:79:f8:61:18:63:4c:2c:5c:31:73:
a3:83:df:e8:cd:4f:e9:32:9a:e8:56:0d:dc:63:c0:
68:ee:a8:ea:e6:6e:c2:2e:dc:90:89:01:dd:c5:1a:
ec:64:65:3d:07:e5:41:67:ae:c1:f2:14:a8:85:78:
a7:ce:f4:6b:ec:32:69:59:45:29:47:a3:bc:cb:63:
4f:0b:93:24:bb:f8:67:07:70:1b:69:d4:9e:08:ad:
6a:ce:6f:92:ef:5d:a5:22:11:28:b3:d3:5a:75:e3:
54:7d:82:a1:22:3a:62:8e:d2:f9:b3:1f:c7:ac:48:
fe:fe:5d:5f:7b:4c:ef:53:84:68:e5:74:57:33:cf:
be:9f:c7:62:58:04:6e:eb:ee:68:e6:1c:1a:f6:2f:
2a:80:bb:28:3b:9f:6a:ca:a6:08:ba:7e:59:f9:59:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5C:16:74:B9:06:8C:A5:D2:B6:16:EE:08:0D:B7:DB:87:23:7B:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BC502EC0D711EFBFAC2960762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f8:41:3f:08:4d:27:98:bb:6a:68:f0:f5:ed:37:2e:88:95:
14:4c:a9:b7:ce:14:b5:38:68:73:d5:fa:4f:c8:0b:de:84:af:
ef:2a:62:4b:d8:a9:d0:76:b1:dc:aa:73:3a:c1:26:e3:24:21:
da:04:dd:c9:7d:d4:e7:ab:a6:5d:67:8c:5e:fe:e2:f4:c6:33:
6c:b2:df:4b:79:e5:d5:55:3e:90:8d:0f:db:26:45:29:b1:fd:
96:a1:03:95:8b:00:17:3f:e3:8f:8d:db:75:56:bb:0f:74:7d:
82:fd:15:6c:f1:d0:97:10:52:42:cd:b5:85:52:ba:d3:44:87:
71:4c:b9:61:2f:73:7d:b2:aa:15:ba:02:4a:1f:4d:2e:5c:d1:
0a:79:ff:83:55:1c:0f:e0:c3:d0:43:24:3a:2f:78:05:53:2b:
a1:6f:b4:c3:6b:bb:62:5d:ab:e2:3a:a9:cb:19:56:ad:ff:d1:
03:ec:96:70:08:35:63:d0:5f:a8:f7:b8:f1:65:28:be:ba:c6:
38:4f:0f:0d:b2:f7:64:c9:a5:b1:f9:8a:4e:4b:fb:93:bc:e7:
98:07:6f:a6:5c:da:c5:a4:ed:ad:33:ee:b6:c1:bb:ce:a3:e6:
bf:0b:80:81:68:90:93:c3:66:04:49:ce:3d:7e:9a:97:0b:43:
ae:69:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:14 2025 by rpki-client