Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B850580CCDE711EF94C76F73762E951A.roa
File: B850580CCDE711EF94C76F73762E951A.roa (raw, json)
Hash identifier: qcXces2hraM6wCRJ3hFR6IvT5mbMatCFqt8SNgQKQ6Q=
Subject key identifier: 67:63:91:0C:E1:9E:C9:E2:56:DA:6D:2E:9B:E3:B2:F1:F1:7D:40:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B850580CCDE711EF94C76F73762E951A.roa
Signing time: Wed 08 Jan 2025 17:40:59 +0000
ROA not before: Wed 08 Jan 2025 17:40:54 +0000
ROA not after: Sat 03 Jan 2026 17:40:54 +0000
asID: 984
IP address blocks: 154.89.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79855 (0x137ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:40:54 2025 GMT
Not After : Jan 3 17:40:54 2026 GMT
Subject: CN=677eb8aa-6fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:27:50:74:2b:17:a2:bb:19:67:55:0e:62:
69:6a:ca:6b:4f:09:f1:6f:4d:31:98:f1:ac:b6:61:
cf:18:05:94:a9:88:47:0b:0e:57:5f:ce:8f:a5:b9:
d2:c1:84:a9:72:c3:7e:80:9a:7e:22:5d:31:3a:28:
65:de:8f:7b:aa:e0:ed:7b:05:ac:b0:fe:78:33:f6:
69:a5:bf:50:9c:88:ca:75:e0:49:b3:ba:a8:83:79:
61:9a:3c:2d:77:64:12:52:ae:05:d4:91:df:67:05:
2a:48:a4:f8:10:97:41:7d:02:a4:a4:91:8c:8f:01:
71:46:ef:6e:59:be:9c:64:ec:c6:d9:ee:17:c3:b1:
be:1a:87:91:8c:c2:ac:94:21:5d:b5:79:45:2a:67:
f7:28:91:6f:b9:4e:e1:37:4e:67:af:b4:34:b2:7d:
96:d0:2b:41:bb:8a:ae:df:b5:4d:a6:f6:f2:7f:0a:
d8:96:76:5b:a4:7d:e5:92:83:f8:a5:c3:70:b9:83:
8c:1a:a2:c9:8a:d7:2a:bf:4c:98:46:fa:e5:cb:bd:
d9:26:cc:3e:5b:f5:d6:e3:e7:5c:25:8b:fa:13:df:
48:e9:44:06:e5:52:a5:93:1a:c4:32:85:12:26:b8:
9b:ad:e4:53:7c:93:1e:b5:1c:f5:06:aa:05:f5:80:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:91:0C:E1:9E:C9:E2:56:DA:6D:2E:9B:E3:B2:F1:F1:7D:40:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B850580CCDE711EF94C76F73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.198.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c7:19:04:b2:a7:34:04:7e:af:45:c9:f9:f7:4d:a0:64:88:
7e:35:29:f2:ba:0e:d7:2a:2e:55:b9:ea:26:89:18:90:3d:6f:
10:ac:56:bb:74:22:a2:a4:0c:f4:52:57:ec:de:a6:1e:93:77:
60:f1:a9:26:1b:9b:cf:d7:87:0d:a9:b0:e4:86:ee:0c:51:93:
0e:e2:78:2a:6c:38:77:a4:45:07:09:cf:1b:c5:c5:a1:83:00:
2b:f2:f1:aa:b5:4a:56:6e:e0:46:9a:76:af:0f:de:e5:2b:b3:
17:f7:e3:c6:cc:c2:1f:85:af:f6:3b:37:8d:8b:7f:50:4e:c4:
e0:7c:32:14:73:77:b6:00:00:36:16:d1:bc:8e:ec:4d:96:ae:
22:bf:e3:cf:95:86:c4:70:98:6e:96:38:08:3b:63:6a:31:dd:
14:ba:d3:79:fa:f3:28:0f:60:6f:8c:63:0e:92:59:7b:9f:82:
ef:28:4e:f5:31:84:01:51:e4:05:27:f6:7d:9b:59:00:d7:c4:
be:de:ac:a8:2c:f6:ed:ad:58:ec:32:14:e0:82:3e:89:25:a0:
a6:00:2d:ae:18:07:ec:db:2a:89:56:57:7f:49:17:40:9c:33:
c0:1f:da:6b:e0:a8:7d:1c:95:b9:6a:d8:7e:be:37:3a:32:1e:
90:5d:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:04 2025 by rpki-client