Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE3439BCCDC611EFAD2E1AA4762E951A.roa
File: BE3439BCCDC611EFAD2E1AA4762E951A.roa (raw, json)
Hash identifier: Oi8/fL5EqI5YNBVNX8iY26r91REvj+N+neZyeethAuI=
Subject key identifier: 03:A3:AA:29:75:FF:CF:42:01:96:21:7D:E1:19:43:B1:0E:F3:A7:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013742
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE3439BCCDC611EFAD2E1AA4762E951A.roa
Signing time: Wed 08 Jan 2025 13:44:55 +0000
ROA not before: Wed 08 Jan 2025 13:44:51 +0000
ROA not after: Thu 23 Dec 2027 13:44:51 +0000
asID: 17561
IP address blocks: 154.89.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79682 (0x13742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:44:51 2025 GMT
Not After : Dec 23 13:44:51 2027 GMT
Subject: CN=677e8157-1671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e4:c6:8d:e2:0c:49:63:db:43:1f:87:22:60:
25:1b:6c:d5:ba:75:b2:5d:6d:83:36:58:32:cc:05:
49:6d:1e:10:b6:bf:79:e0:6a:bd:8a:bd:cf:85:ea:
fa:2e:84:a0:e7:2f:79:60:86:b7:9d:f8:50:32:6d:
ac:12:79:25:16:ec:2d:67:26:6e:1e:8a:69:dc:1b:
0b:0d:64:d0:46:85:c1:82:d5:44:b1:d1:4e:bb:e3:
53:af:58:30:19:de:0a:f1:a8:b3:e6:45:be:6f:84:
45:50:8d:fe:65:e4:f9:2f:db:50:ad:e7:5b:89:84:
64:54:37:a4:0a:c9:07:fb:bc:b6:d8:1f:cd:4b:d8:
52:3a:5a:d9:b2:d6:12:99:7a:2e:47:79:81:38:9a:
c2:60:ef:92:46:8f:9d:88:9e:29:d9:93:27:90:e9:
b3:92:e5:36:2c:3d:ed:62:45:8d:a8:b6:6b:b4:d3:
64:6f:dc:20:e4:6e:7a:82:d1:8f:6b:6e:12:80:92:
ed:c5:e1:e1:dc:ad:83:ae:a5:a7:e9:cc:00:dc:94:
f7:4a:4f:d5:cf:34:d8:25:72:6e:45:94:4f:df:26:
e4:09:d5:2f:f1:4b:f6:9b:3a:40:99:f8:47:61:16:
09:01:41:0f:79:b2:87:3f:4d:44:cb:bb:b2:ad:d6:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A3:AA:29:75:FF:CF:42:01:96:21:7D:E1:19:43:B1:0E:F3:A7:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE3439BCCDC611EFAD2E1AA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.26.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:65:1f:0e:8e:48:a6:cc:5e:4a:91:ff:a0:3a:a6:03:10:1f:
25:b7:db:f1:82:72:0a:a7:1a:df:da:e5:57:0d:fe:11:89:63:
ee:1f:e4:21:fb:6e:5b:6b:23:d7:1d:f9:94:cd:b5:d2:62:fc:
02:8c:36:22:28:cc:36:3c:a8:10:b0:34:c7:60:a0:34:76:12:
f0:1b:15:d6:c1:9f:91:e4:ce:6d:63:5f:6b:4f:53:66:9a:97:
7a:82:1f:27:22:17:56:a0:b5:0e:f3:e3:2f:27:3f:a8:ec:e0:
8b:ff:fe:b5:0c:d1:ea:66:e6:20:f1:55:df:51:53:5d:ee:5f:
2c:b8:d6:10:8c:4d:d0:86:5e:9f:d9:fc:58:24:5a:90:08:3f:
b1:82:55:7f:07:db:ec:c0:eb:65:c5:b2:0c:df:70:0e:bf:f3:
81:60:5c:67:4b:fb:6c:57:53:eb:42:9d:55:3a:1d:28:25:91:
dc:03:99:f6:58:0b:1e:e0:63:f2:df:b7:59:0b:ec:4d:03:f8:
bc:68:1d:8c:86:1a:1b:57:d0:0a:06:d5:fe:30:17:6a:46:a3:
c2:4f:9f:b7:80:db:a7:4e:47:d0:94:79:64:e2:4e:4d:cd:f3:
8a:76:a4:15:6f:cc:6b:88:6f:86:3b:97:64:63:4f:88:98:6a:
dd:fa:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:59 2025 by rpki-client