Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECAD806CC0DA11EFAB4B4E77762E951A.roa
File: ECAD806CC0DA11EFAB4B4E77762E951A.roa (raw, json)
Hash identifier: qh/GlcEsVnS8DM3UW9BKlYdOYJGVDaSbjVEjmKn5YAo=
Subject key identifier: 9C:DF:01:48:94:EF:89:E1:57:46:A6:84:D3:16:30:80:40:9B:9E:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECAD806CC0DA11EFAB4B4E77762E951A.roa
Signing time: Mon 23 Dec 2024 03:06:38 +0000
ROA not before: Mon 23 Dec 2024 03:06:34 +0000
ROA not after: Wed 10 Dec 2025 03:06:34 +0000
asID: 984
IP address blocks: 154.89.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73372 (0x11e9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:06:34 2024 GMT
Not After : Dec 10 03:06:34 2025 GMT
Subject: CN=6768d3be-c42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:24:1f:c2:a7:9f:08:16:da:81:12:65:b3:
1e:e0:9f:07:9d:95:46:ae:41:8c:e7:3b:c6:ea:7e:
16:21:6c:d8:0b:c7:d1:d2:e3:fb:77:50:3c:4e:a6:
ea:e4:fa:bc:69:ce:bf:1e:51:7d:d2:aa:55:23:4c:
f0:e3:84:23:ad:8d:58:b0:af:4d:42:55:2e:9c:6d:
6a:ee:17:85:bf:c2:47:e0:2f:74:c0:dc:3a:6b:1e:
41:50:e3:3e:39:7a:3e:b9:61:c5:34:fa:e5:0e:13:
b8:97:e2:d1:d9:82:32:d1:a6:69:4e:d9:17:d3:f1:
fe:81:b4:6b:d8:91:c1:62:11:76:6c:17:b4:34:b1:
92:d3:a2:ad:e0:24:01:c5:86:2b:a2:10:31:1e:b7:
36:7d:94:c0:16:c7:fd:f4:af:70:09:96:7c:f0:d3:
90:01:54:c3:e0:b2:59:41:71:95:ab:d5:ae:ac:57:
95:68:ad:b7:5e:ae:94:e5:1e:ea:dd:4d:5f:97:03:
21:d0:aa:f9:59:33:ae:57:9a:f4:3b:f7:f3:17:3c:
7f:22:c5:f8:10:20:d2:44:c3:95:74:c9:a7:86:36:
48:4f:32:ec:de:c6:41:18:45:8e:be:88:d1:e0:b7:
0f:83:91:28:44:4e:83:0f:7e:06:72:c0:a3:9a:f0:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DF:01:48:94:EF:89:E1:57:46:A6:84:D3:16:30:80:40:9B:9E:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECAD806CC0DA11EFAB4B4E77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.172.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:98:4c:fd:9a:27:72:73:15:7c:79:55:b9:0a:68:b0:a2:e5:
83:49:d4:aa:c4:c3:75:b0:01:de:cd:00:b8:b4:96:77:a2:e2:
98:d7:ab:f5:bd:6b:d1:b5:a2:89:d1:03:d0:4c:eb:1b:59:54:
85:24:9e:92:4d:e8:be:76:7d:2e:ed:bf:4f:3a:78:c7:3d:3e:
73:58:21:3e:01:8f:03:c9:e0:55:39:16:16:14:7c:b8:56:24:
b4:08:48:97:5a:99:66:29:5b:e5:76:53:db:10:1e:d8:16:eb:
97:d6:d6:03:23:e0:39:6d:e4:85:07:b0:6e:fb:67:17:ce:61:
d1:a9:a5:c6:c8:14:b6:f0:b5:b2:4b:2e:da:58:82:e6:3f:cf:
2b:30:84:37:d6:50:92:3d:cd:e5:56:2d:75:1d:1d:7b:92:1e:
16:af:c6:6c:0f:fe:cb:7a:2d:d4:9a:55:8c:2f:bb:bb:48:33:
bc:79:6f:3c:ed:e5:b2:cb:17:74:55:d8:50:2c:a8:17:b0:49:
40:bf:80:24:71:da:7d:9a:80:cb:1d:13:b9:4f:23:44:2b:e1:
6e:86:63:80:32:94:f7:7c:38:40:6f:80:8b:18:67:c7:1f:98:
7f:cd:57:41:a3:e5:06:34:9c:ad:dc:af:e4:37:27:95:51:1e:
24:0b:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:05 2025 by rpki-client