Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C647498AC0DA11EF96400077762E951A.roa
File: C647498AC0DA11EF96400077762E951A.roa (raw, json)
Hash identifier: XRp8y3vO7ZOjjkhfQLCaR2jaPNByi+ovbxFOEZmmrDE=
Subject key identifier: B2:77:F7:1E:86:A7:50:FE:EB:DC:D4:AA:86:E1:7D:00:18:42:DB:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C647498AC0DA11EF96400077762E951A.roa
Signing time: Mon 23 Dec 2024 03:05:33 +0000
ROA not before: Mon 23 Dec 2024 03:05:30 +0000
ROA not after: Wed 10 Dec 2025 03:05:30 +0000
asID: 984
IP address blocks: 154.89.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73370 (0x11e9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:05:30 2024 GMT
Not After : Dec 10 03:05:30 2025 GMT
Subject: CN=6768d37d-a26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:1f:fc:63:29:08:08:d6:f6:a1:08:20:e4:
aa:ca:ad:cc:dc:bc:9c:35:23:4e:a1:9d:0d:2e:a9:
9c:47:b0:a1:63:3e:b5:cf:c6:91:38:c8:fd:e9:da:
33:c6:0d:e1:ff:4c:7c:9c:d6:68:3b:91:a2:cb:59:
3d:8e:b7:d1:7b:5b:a3:73:e7:24:63:95:4b:c1:8a:
f0:fc:97:22:b3:66:87:11:58:fa:22:84:d4:34:09:
96:fe:cf:f0:2f:15:8b:48:5a:0c:13:93:0c:7e:e3:
7f:23:79:b9:23:4d:75:9c:98:11:50:4e:29:2e:dc:
a6:54:94:b8:29:d4:78:07:78:70:97:e2:48:b9:8d:
40:5f:c9:4c:8b:5d:46:66:62:37:9d:78:31:24:f5:
f2:fc:b9:e8:1a:66:ef:5b:74:8d:5e:77:28:53:fd:
38:3d:7f:a9:89:d0:44:53:6c:54:e7:a1:a3:d6:3c:
a7:da:dc:0d:cc:96:60:d6:0c:02:e8:aa:82:0c:09:
ac:a1:34:7c:04:17:ec:24:b4:54:3e:5a:77:8d:4b:
96:dd:3d:c3:d5:93:93:a2:a9:62:8a:5b:4a:4e:05:
fa:b3:c3:57:f6:61:f5:89:b5:2a:b0:82:bb:1b:f1:
d2:2d:00:5c:dc:15:b1:4c:b3:e7:68:e0:be:cf:62:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:77:F7:1E:86:A7:50:FE:EB:DC:D4:AA:86:E1:7D:00:18:42:DB:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C647498AC0DA11EF96400077762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.171.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:d2:b2:49:f5:a8:8c:38:6a:03:03:b2:10:42:f6:e2:fd:a3:
af:26:ee:da:bc:c5:04:2d:fe:9e:cb:d6:91:90:6c:12:e5:42:
31:47:74:8a:33:d3:ff:69:19:8a:fd:83:26:39:9a:c5:aa:d9:
4f:9b:ce:a1:0d:9a:73:df:52:28:96:cb:3b:2f:29:53:73:fa:
05:45:a5:90:6d:08:ad:39:d1:09:c3:bc:0b:07:10:a8:ec:ad:
d2:99:9b:1d:97:8f:c1:f0:78:db:4a:cb:ff:f9:6d:10:05:57:
74:32:a3:92:4e:97:3d:cc:bf:ec:bd:41:ca:eb:77:8f:c9:e9:
3b:33:96:87:b4:61:05:b4:13:06:eb:d2:7c:fb:9d:3b:bd:68:
a8:47:a5:af:2f:c5:1c:e2:13:60:a1:a2:2b:ee:06:f1:c9:1c:
37:65:06:e1:7e:54:66:99:c5:f8:06:aa:ba:37:cd:47:f8:2e:
3a:8b:7b:48:4d:90:0c:2b:f7:44:fc:94:f1:be:07:ca:3b:fd:
13:a8:9e:e3:04:04:c3:4e:4c:84:c5:29:1b:4c:78:1f:1d:eb:
0d:9e:e2:9a:20:11:b6:1d:37:87:cb:b8:66:09:92:39:d1:22:
93:59:26:07:f7:95:d7:59:38:82:05:27:d9:0d:52:70:3f:5b:
ff:bb:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:29:50 2025 by rpki-client