Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF89B9D2D2E411EFBF07C191762E951A.roa
File: FF89B9D2D2E411EFBF07C191762E951A.roa (raw, json)
Hash identifier: GuDH/1HLnK5h76mV9xrfatp2HlblI6uL7RloNFvYhwU=
Subject key identifier: D1:32:E7:C4:17:4A:CC:94:A3:84:33:50:08:0B:40:18:8D:FC:1D:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF89B9D2D2E411EFBF07C191762E951A.roa
Signing time: Wed 15 Jan 2025 02:04:05 +0000
ROA not before: Wed 15 Jan 2025 02:04:02 +0000
ROA not after: Mon 03 Jan 2028 02:04:02 +0000
asID: 17561
IP address blocks: 154.222.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80778 (0x13b8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 02:04:02 2025 GMT
Not After : Jan 3 02:04:02 2028 GMT
Subject: CN=67871795-2b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:ad:4f:85:45:ac:0d:dd:64:f6:a6:b2:b5:
56:7c:bf:dd:2c:e4:ae:c6:91:fd:5c:5e:77:83:96:
ac:42:48:04:72:df:be:16:79:5f:13:6f:e4:0d:56:
0f:17:4d:44:0c:7f:a6:42:bc:e0:5d:84:cd:51:d4:
6c:10:17:1e:c1:7c:6d:32:1e:88:d3:16:5d:cb:c4:
c2:f1:84:2f:0a:39:2c:5c:f2:6f:42:2e:cd:e8:39:
80:94:68:5b:64:f4:23:96:11:2b:87:7c:5a:06:8b:
fe:18:86:ed:0a:cc:70:53:7a:af:0c:1d:49:24:c5:
e9:1e:d6:69:a7:fa:00:ca:9b:a7:64:96:48:c8:8e:
ca:c8:ea:6f:0c:36:9c:57:30:ee:9e:ff:b5:66:c4:
60:ce:81:48:d5:45:1c:95:91:66:c6:43:7f:a2:58:
19:90:af:28:bd:de:51:57:9f:cd:f0:22:ae:b6:a6:
2e:f7:6e:c2:f3:89:5b:87:37:a8:44:fd:46:17:d2:
3a:5b:49:ec:7d:64:4a:fd:e4:fe:21:b7:38:5d:e2:
ac:36:53:d4:11:b9:da:b9:cb:da:79:e2:56:e8:80:
09:50:bb:a2:ce:d7:23:30:26:4f:ba:8e:cc:46:51:
98:cb:70:37:b4:f8:0b:04:4d:7f:22:1d:e1:96:ce:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:32:E7:C4:17:4A:CC:94:A3:84:33:50:08:0B:40:18:8D:FC:1D:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF89B9D2D2E411EFBF07C191762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.103.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:d6:af:27:db:d5:f4:5f:6d:ac:ca:b1:48:3e:db:2e:50:1d:
2d:07:d3:0c:89:d3:b3:ad:96:01:74:db:00:0a:eb:55:00:af:
d6:46:2d:c9:6d:c0:34:f3:be:d8:ad:91:2d:44:f7:ff:9b:18:
c5:d2:7e:a7:2e:f3:8a:a9:f7:9d:3a:ec:0a:4d:f9:d7:2c:85:
34:de:b6:fb:ab:d5:ec:dc:a7:d5:f9:ba:72:71:33:15:07:54:
3a:c9:f4:31:a5:3f:0c:37:6d:62:9e:5a:a6:c8:74:3e:44:0a:
42:1b:31:c3:dd:e6:52:25:47:41:5d:6f:bd:6b:62:ba:06:00:
0a:95:ea:eb:b2:c3:37:0b:11:5b:59:45:03:a2:45:f1:d5:28:
d0:92:69:53:2b:85:8e:c2:02:d4:34:d1:8f:45:a7:4d:95:dc:
0a:4b:88:03:08:ff:a4:ed:98:33:f5:b3:41:9a:b0:7d:28:1b:
89:d4:8f:3d:c7:bc:78:19:3b:91:e1:b3:83:26:62:29:6b:fa:
d1:6e:bc:68:3c:4b:82:73:8d:72:1d:76:47:c8:0e:d3:e1:e2:
b4:76:e1:75:62:34:dc:ce:2a:57:76:6c:4b:76:01:25:e0:46:
5b:57:f8:d2:a9:27:48:fa:a3:58:a3:98:27:a3:60:c7:6d:dd:
df:f7:9f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:24 2025 by rpki-client