Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E99581CAC0DC11EF97530084762E951A.roa
File: E99581CAC0DC11EF97530084762E951A.roa (raw, json)
Hash identifier: IIYDK31RE2SfcaTcCP4ipGsigrb0KAOpoNVM3bGQbBE=
Subject key identifier: 0B:AA:99:74:51:B7:C3:07:FE:0D:0D:D9:77:8A:2F:DF:D2:DC:71:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E99581CAC0DC11EF97530084762E951A.roa
Signing time: Mon 23 Dec 2024 03:20:52 +0000
ROA not before: Mon 23 Dec 2024 03:20:48 +0000
ROA not after: Wed 10 Dec 2025 03:20:48 +0000
asID: 984
IP address blocks: 154.89.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73398 (0x11eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:20:48 2024 GMT
Not After : Dec 10 03:20:48 2025 GMT
Subject: CN=6768d713-8a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a9:f9:b8:b5:38:69:0c:02:94:ec:98:35:bc:
a6:c1:0f:d0:9d:e0:f4:83:f1:6a:4a:8c:56:c1:b1:
35:62:50:f1:f1:45:90:13:98:a6:65:96:3d:7b:e9:
b5:45:49:70:90:b2:9a:e8:fa:29:c3:11:86:e1:d4:
3e:24:6f:d1:9e:0f:13:d1:23:78:1c:71:3f:44:13:
56:a4:9d:4e:3c:b4:77:b2:7a:71:c9:e1:5c:03:71:
ca:fd:e1:ea:54:05:6c:bb:49:e6:5a:44:39:ce:19:
ff:35:8b:54:b8:8e:da:51:99:68:3b:14:d2:c2:32:
76:d8:15:84:76:53:e4:38:cd:37:5a:d3:81:11:3f:
87:7b:f9:62:d6:68:2c:2d:99:2e:e0:15:87:2a:55:
07:77:93:52:8f:b3:4a:60:fc:70:d2:b8:45:47:62:
ac:62:e6:df:9c:74:be:05:df:08:7e:e9:ad:51:6f:
a8:a4:7f:a7:5d:df:43:a9:a3:c4:18:6b:70:72:6c:
de:dd:37:b1:fb:6b:c7:8d:fd:df:0e:10:1e:6d:da:
f4:cf:a0:bf:06:9c:e2:8b:40:e1:8d:e5:77:5e:d3:
10:90:98:82:55:85:cb:dd:80:ee:81:7a:4a:8d:89:
0b:4d:90:b1:c0:a8:81:02:5b:f2:0f:e6:a0:58:0b:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AA:99:74:51:B7:C3:07:FE:0D:0D:D9:77:8A:2F:DF:D2:DC:71:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E99581CAC0DC11EF97530084762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.185.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:08:61:d8:43:f4:49:17:69:68:1b:e9:c3:dc:e4:df:a2:a3:
aa:8d:da:a5:4f:e5:8b:47:0c:75:7f:9f:99:36:c5:3f:5d:d1:
0f:9a:85:13:b7:b1:d1:ca:f7:8e:87:a6:27:12:15:d5:10:a1:
b6:63:51:f8:04:d6:e4:0d:5f:1f:4b:9e:ab:1c:a5:70:cb:6e:
3c:44:99:3d:20:ae:c4:cf:62:62:e1:c7:11:1c:b3:26:01:93:
0c:b3:b3:a9:de:65:72:bc:46:82:c3:eb:79:03:b8:32:07:81:
dc:e3:26:86:3b:48:c9:5a:b7:18:4b:dd:02:46:6d:11:60:23:
fc:fb:b7:c6:d7:68:fa:f5:31:94:09:57:b2:e5:fa:4e:29:f4:
2f:aa:1e:ec:74:54:2f:16:ea:3b:27:c2:57:39:c5:27:63:e3:
62:9a:91:9c:c1:76:38:55:85:48:b3:ed:1b:f4:ee:57:b1:ee:
8b:b1:24:2e:2e:a6:f3:a3:c1:10:94:b3:8f:a9:09:d7:e1:8a:
44:d2:a1:a7:96:a7:43:59:09:ba:58:7a:84:98:b6:6b:a5:94:
3c:42:97:25:05:1d:e4:c8:6c:72:17:1b:fc:4f:9e:8d:1d:27:
a1:de:84:89:f0:4d:56:33:7f:3a:f8:c7:f9:8c:5d:50:2d:00:
24:59:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:48:26 2025 by rpki-client