Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45D6E0ACDDA11EF87DD51A2762E951A.roa
File: F45D6E0ACDDA11EF87DD51A2762E951A.roa (raw, json)
Hash identifier: sG9Iv/Y1rjT2uYTyq16kVspQSygj6h5qp0EgWFocB3M=
Subject key identifier: BC:A2:61:9B:EC:F8:75:8B:3B:0E:A7:35:17:6B:25:85:FD:BA:66:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013791
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45D6E0ACDDA11EF87DD51A2762E951A.roa
Signing time: Wed 08 Jan 2025 16:09:36 +0000
ROA not before: Wed 08 Jan 2025 16:09:32 +0000
ROA not after: Sat 03 Jan 2026 16:09:32 +0000
asID: 984
IP address blocks: 154.89.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79761 (0x13791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:09:32 2025 GMT
Not After : Jan 3 16:09:32 2026 GMT
Subject: CN=677ea340-9333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:9f:c9:06:8a:9d:83:90:87:4e:4a:2f:4d:
40:f0:f4:60:56:3d:90:16:31:95:15:08:75:73:ee:
a1:95:3f:58:1a:7b:4a:1d:95:bb:77:71:f9:0e:b6:
3e:84:d8:ec:d4:34:95:3d:71:7f:61:86:77:5f:aa:
91:34:49:14:79:64:e0:dc:1a:48:33:1f:4c:29:98:
9a:c8:0f:a1:57:42:43:08:68:68:dc:78:20:35:4e:
82:f7:2c:c7:a9:aa:0f:21:72:6d:bb:e3:aa:4f:ff:
1a:ba:f0:60:ed:6e:75:ee:3d:d4:b0:4b:6c:4f:af:
1c:c4:ca:15:f1:e4:d9:0e:fd:2a:2f:4e:3d:9c:54:
40:04:04:c1:c7:f2:05:60:4b:dd:e0:1b:e6:2c:19:
ae:45:c8:86:4c:37:da:78:07:a3:66:38:a5:75:03:
95:83:b3:6e:90:80:21:05:1d:a7:94:0a:31:5c:4b:
e8:9d:51:41:cf:ac:54:19:04:67:da:db:34:1b:51:
57:8d:5f:8c:80:42:39:a7:6b:f0:44:92:4c:bd:e0:
8f:20:3d:0d:18:bc:2d:16:46:4c:eb:7a:5c:dc:2a:
54:cf:43:49:a4:d3:12:06:03:2c:78:68:a6:c5:ad:
7b:09:79:08:0c:f1:22:e9:29:98:cb:a3:73:5f:03:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A2:61:9B:EC:F8:75:8B:3B:0E:A7:35:17:6B:25:85:FD:BA:66:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45D6E0ACDDA11EF87DD51A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:33:20:e5:be:75:c4:7e:bb:a4:b3:33:85:69:37:05:3c:f0:
68:07:21:e6:46:3e:5c:16:bb:db:f3:60:8e:dc:a9:00:14:99:
92:e2:d1:2e:0c:c5:d7:39:4a:c0:29:89:52:62:25:e0:77:e7:
8b:01:8d:cf:7f:e2:57:6e:65:ee:b7:23:18:96:3c:a3:d3:e5:
55:df:5b:90:32:e2:74:8f:0b:55:1c:58:58:26:0b:3f:40:d5:
f1:a1:59:31:65:ce:9d:02:ad:a8:3b:6f:a4:be:af:ab:94:38:
e1:62:8b:af:dd:d8:c3:d9:23:c6:4e:39:8e:e2:0c:a4:db:5a:
65:06:2c:02:39:0f:d0:bc:42:ae:84:e9:f6:92:a5:36:48:e5:
f0:6a:35:d7:65:69:09:2e:69:01:00:69:03:92:12:6f:3f:68:
8b:2a:fe:5a:94:ab:cd:f4:d7:9d:8b:14:6f:c2:8a:27:80:a1:
93:aa:2e:fc:6c:8e:87:98:70:a6:47:2a:9d:9f:28:75:8d:c5:
51:8a:47:78:f6:d2:f7:cb:a1:da:dd:18:f8:16:86:d2:ad:73:
92:1e:90:53:3a:5f:9d:fc:ab:5c:5c:f1:b1:2e:ef:5f:21:7d:
37:ba:0c:b8:a5:c1:fb:58:97:ad:0b:2d:e0:ea:2c:f2:6f:8e:
54:01:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:11 2025 by rpki-client