Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F97EDEDCC0DD11EFA0F0728A762E951A.roa
File: F97EDEDCC0DD11EFA0F0728A762E951A.roa (raw, json)
Hash identifier: yZheFRADBmlPGqJHlBJ9x3j0DypE2MHtfcht3pM+RqM=
Subject key identifier: A3:E1:AF:C1:5B:56:68:D1:5C:2F:A4:91:ED:A5:C9:BA:23:9D:28:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F97EDEDCC0DD11EFA0F0728A762E951A.roa
Signing time: Mon 23 Dec 2024 03:28:28 +0000
ROA not before: Mon 23 Dec 2024 03:28:24 +0000
ROA not after: Wed 10 Dec 2025 03:28:24 +0000
asID: 984
IP address blocks: 154.89.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73412 (0x11ec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:28:24 2024 GMT
Not After : Dec 10 03:28:24 2025 GMT
Subject: CN=6768d8dc-2fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:5f:2d:b3:aa:20:03:75:59:2a:de:1d:ee:
14:11:94:5e:f5:4b:2c:b9:cc:55:15:95:34:f7:ae:
9f:39:65:12:c6:eb:b7:28:a8:7c:ea:78:b2:0d:bb:
0e:8e:15:e8:65:7c:86:3e:94:a1:4e:d6:72:84:05:
63:be:7a:39:da:b2:93:02:4e:bc:a5:21:15:95:2b:
4b:e2:eb:69:6c:ec:f7:87:b9:d6:d9:55:44:ef:19:
9d:66:1f:b0:cc:a2:f7:10:b6:8c:98:7d:d1:ad:08:
90:f7:00:22:c3:99:24:d4:3f:36:e2:67:21:2c:56:
74:e5:e3:ed:4d:2b:f6:47:5d:d1:94:77:37:be:cd:
08:8b:12:ad:00:44:5f:07:28:b1:ba:b0:4c:d1:66:
cf:52:f9:90:e7:8c:f1:d8:1c:df:ac:d9:c8:ca:69:
58:87:af:68:80:31:24:a4:c8:68:67:aa:a3:f9:89:
46:ff:bc:d9:c6:03:d6:4a:c4:30:31:31:18:5d:44:
07:1f:09:f3:14:e1:b2:47:18:a4:a7:ed:72:fe:5b:
b8:ff:c0:48:eb:2e:3a:28:42:dd:e1:ff:89:f8:6e:
0a:68:68:5b:f8:66:ca:02:b6:9b:18:eb:20:e7:b3:
e8:ce:07:9e:ae:36:98:88:89:3e:9c:22:b6:60:4f:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E1:AF:C1:5B:56:68:D1:5C:2F:A4:91:ED:A5:C9:BA:23:9D:28:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F97EDEDCC0DD11EFA0F0728A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c6:26:24:33:a6:13:98:66:94:00:26:2d:c2:5b:44:99:8f:
48:96:a6:2a:5f:09:79:6c:92:2e:c6:28:fe:30:09:03:8e:72:
4d:41:bc:d6:9f:08:c6:9e:24:f7:c5:a8:29:fe:f2:2d:19:5f:
93:1e:37:c0:97:11:ea:f0:b9:fc:01:8b:2f:2b:4b:2e:e2:5f:
bc:87:d5:43:ba:9b:ba:c4:87:20:41:58:88:9e:3e:bf:71:20:
ab:ff:3c:17:fc:c0:25:82:d8:45:74:c0:c9:10:25:fd:bd:16:
ff:ee:1e:45:7e:6a:de:ac:b0:98:37:ee:3b:08:c3:60:f3:7d:
3e:5d:dd:07:da:54:e3:67:45:20:59:91:18:58:bf:9f:8b:45:
a8:93:5b:42:26:18:40:fc:e5:0e:e5:b3:27:df:bb:cb:06:85:
bc:c3:70:73:49:17:b9:6e:10:94:44:7e:5c:cd:b3:41:79:ed:
d3:aa:41:74:cf:cf:f0:7b:0d:c0:6c:3b:d1:70:f1:61:4c:ef:
78:58:df:49:3c:91:77:4d:3b:5c:99:dc:87:6d:bc:82:7c:a0:
bb:29:37:dc:ca:1a:d1:24:39:c2:1f:2f:ee:f8:08:d0:a0:25:
46:63:8d:0d:1d:c7:14:14:d7:fb:05:19:e1:19:a2:ad:54:05:
23:ac:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:34 2025 by rpki-client