Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B81ACF1CCDE111EFA613F44E762E951A.roa
File: B81ACF1CCDE111EFA613F44E762E951A.roa (raw, json)
Hash identifier: qASeI9Kw5GwCEVbmuR1OxC2d6606Mu99LKMbRJPacBo=
Subject key identifier: 75:B9:A2:A2:D9:BD:3E:AB:9F:E1:8F:9B:73:DA:C1:CD:AA:59:BE:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B81ACF1CCDE111EFA613F44E762E951A.roa
Signing time: Wed 08 Jan 2025 16:58:01 +0000
ROA not before: Wed 08 Jan 2025 16:57:57 +0000
ROA not after: Sat 03 Jan 2026 16:57:57 +0000
asID: 984
IP address blocks: 154.89.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79813 (0x137c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:57:57 2025 GMT
Not After : Jan 3 16:57:57 2026 GMT
Subject: CN=677eae99-f1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:dc:51:94:f3:5a:95:ad:90:44:10:90:35:
b3:34:16:49:4f:cc:7e:d4:7f:9b:99:4c:86:ae:6b:
48:eb:cb:a0:e5:11:77:e5:86:4d:ef:9d:33:28:5c:
4e:ef:60:d2:b1:6e:03:15:f7:0e:fb:ed:c8:f4:17:
d3:cc:7c:8d:f3:07:2c:dd:81:fb:56:33:fe:78:a2:
67:fd:3d:b8:ee:f2:69:6e:b6:94:54:c0:8d:0c:63:
30:0a:82:93:a7:c2:3f:e2:c1:b6:2c:b4:38:f6:a2:
b3:00:e6:42:c8:b0:0c:6c:20:6b:59:28:dd:79:d3:
6f:a4:45:0f:c7:3c:08:f6:70:5a:16:14:63:9b:41:
7a:85:2c:f9:40:bd:9d:09:38:b9:9b:98:7f:52:b7:
dd:6a:7a:d6:97:37:ba:87:18:6c:5d:55:2d:b2:06:
4e:25:8c:6e:47:ac:4d:e4:07:40:79:c7:19:a4:f2:
be:fc:4e:cd:62:2f:6b:d7:c1:1b:6c:37:88:e8:28:
68:59:c1:e9:ee:f1:4e:4b:68:2f:d6:91:25:8c:f1:
7e:56:9f:05:9b:1a:91:3d:29:62:69:0e:9d:ec:30:
e9:74:18:34:22:6c:23:b2:5e:92:ea:c2:5a:c7:44:
f8:c6:e2:4f:eb:1b:15:25:48:39:6d:3a:85:9f:da:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B9:A2:A2:D9:BD:3E:AB:9F:E1:8F:9B:73:DA:C1:CD:AA:59:BE:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B81ACF1CCDE111EFA613F44E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.177.0/24
Signature Algorithm: sha256WithRSAEncryption
43:69:e2:5d:e5:5e:72:c6:b7:6b:e9:c9:31:32:90:5b:4d:37:
21:a0:a5:78:1c:0e:c8:ef:67:17:a5:f4:21:15:d2:b5:e1:ec:
10:05:04:ed:19:a6:a9:81:8c:1a:ec:d8:51:9a:19:54:80:af:
8f:4c:af:b2:f1:c9:03:48:36:72:8d:90:92:41:65:10:c6:a6:
f0:31:26:9a:8a:97:10:9a:4b:ee:ed:c6:ee:1d:83:22:f2:93:
f6:92:43:78:ce:9d:b3:c5:e2:38:66:46:fd:3b:4d:a0:25:c9:
27:e0:0b:67:66:98:b6:d8:08:e6:9b:cc:50:c7:d7:df:a7:f0:
84:d7:42:03:39:1c:33:a8:44:c5:02:4c:95:76:61:32:09:0f:
79:3c:2c:aa:87:a7:13:d2:4f:d5:ef:74:b1:38:86:4b:39:23:
eb:25:40:11:86:b2:a1:56:e4:69:e4:c2:62:1e:48:a8:d5:9e:
5a:63:e8:7c:c7:17:d2:80:3e:2b:90:0a:93:56:74:cc:4f:9d:
7f:a2:52:19:53:ec:13:e9:18:21:f4:47:3d:33:f7:68:8a:08:
29:63:c3:ff:27:a2:39:51:5a:3b:1d:88:55:3b:f4:ae:c0:a7:
54:36:22:b9:c6:ac:a4:64:6c:13:73:5a:27:92:06:2b:7e:f1:
80:9f:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:26 2025 by rpki-client