Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCE9A4A6C52F11EF8DCA047E762E951A.roa
File: BCE9A4A6C52F11EF8DCA047E762E951A.roa (raw, json)
Hash identifier: 7IWc/DDakZIHmN21SIp5CeUbxJ3iF3u5Xy7rdUxv+to=
Subject key identifier: E8:9F:B2:B5:E1:A9:1C:D8:D3:08:29:2A:B5:B5:3B:5C:21:6B:F5:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCE9A4A6C52F11EF8DCA047E762E951A.roa
Signing time: Sat 28 Dec 2024 15:23:50 +0000
ROA not before: Sat 28 Dec 2024 15:23:46 +0000
ROA not after: Sun 12 Dec 2027 15:23:46 +0000
asID: 17561
IP address blocks: 154.204.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76769 (0x12be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:23:46 2024 GMT
Not After : Dec 12 15:23:46 2027 GMT
Subject: CN=67701805-8500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:6c:ea:23:f1:17:c9:06:35:be:0b:f9:c3:
5f:ab:86:67:53:b1:1b:a6:fe:60:e9:d0:4e:e1:21:
02:2e:2c:67:06:9f:e4:77:49:67:e1:3f:2f:46:53:
b1:02:59:b0:ab:a0:82:66:b0:ce:10:b3:3e:b9:8e:
aa:73:04:37:c8:9f:5d:0d:d2:4e:bc:9e:4b:0a:fc:
37:89:05:51:2a:2f:1a:8f:db:c4:84:2c:36:10:7e:
1d:fa:ea:2d:89:b4:81:7e:a7:7d:d9:f5:b2:b0:f9:
a1:3f:d4:53:6d:da:4f:78:86:2c:06:ca:d2:52:3b:
eb:1f:51:78:68:33:da:52:10:d1:38:a0:c8:57:05:
0b:8f:d8:82:65:b0:f8:66:7d:d7:57:c0:73:a3:92:
79:94:0c:90:e2:92:3f:5d:4b:80:96:92:a0:a6:f1:
b8:8c:1c:7a:0a:21:37:eb:8c:99:4a:91:45:2b:2f:
fb:5e:20:cb:b3:45:43:ae:b4:42:10:49:68:c5:f0:
4e:55:05:4d:0f:25:67:4a:89:d3:70:e1:5e:60:40:
ae:b0:02:ee:e3:85:1e:69:6a:ff:51:87:07:8d:1c:
4b:09:e6:00:74:43:f1:dc:98:93:58:9e:b9:48:33:
86:d9:d6:3e:0c:d5:57:47:17:f8:88:f3:93:d6:0b:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9F:B2:B5:E1:A9:1C:D8:D3:08:29:2A:B5:B5:3B:5C:21:6B:F5:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCE9A4A6C52F11EF8DCA047E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.89.0/24
Signature Algorithm: sha256WithRSAEncryption
04:61:77:e9:54:ff:e7:cd:3b:cd:ef:af:ee:af:76:4a:e9:cb:
07:57:62:78:22:71:8c:c5:3b:6e:3d:22:e0:de:90:1e:a7:c3:
ed:ed:71:03:5f:ff:50:aa:e3:91:f5:80:23:1a:4e:11:5e:90:
7d:23:d7:a7:c0:f0:0a:aa:69:9a:0f:0c:c6:bb:10:88:41:ec:
04:cd:ed:8d:5d:3c:43:d4:84:b2:de:1c:5c:97:a2:96:e2:04:
de:5f:af:23:cc:49:d0:bb:f4:44:65:c7:ea:2d:c1:74:6a:07:
70:75:03:09:5d:d4:30:ea:8d:99:0d:3e:4c:62:d5:68:1f:75:
44:0d:0d:9d:cc:f8:a4:8d:ca:f3:31:26:9a:39:b9:82:90:4d:
a5:0c:12:d6:54:34:db:7b:0d:25:47:58:93:4b:c0:dc:8f:92:
22:cd:7a:5d:10:68:3e:a1:f3:56:8c:19:b2:27:d3:56:cf:c6:
91:bb:30:c3:e8:88:9a:0c:f8:ff:95:b5:30:bf:44:b0:7f:ac:
a6:43:c1:15:36:aa:62:bd:38:f5:7d:ca:ae:82:b9:73:b3:c6:
be:b0:2c:6c:6f:d0:31:7a:8f:53:01:a1:e2:83:80:7e:ee:bd:
fc:2f:9d:19:83:22:58:da:16:20:5d:e8:45:82:26:96:ca:4e:
74:4c:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:41 2025 by rpki-client