Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E296664FB3411EF9F874CA3762E951A.roa
File: 0E296664FB3411EF9F874CA3762E951A.roa (raw, json)
Hash identifier: Lla9tTAhIksKasb6S+z6t3VqSpQghKpmgmKZpLoECz4=
Subject key identifier: BD:FB:CD:F6:34:CD:86:7E:25:22:8E:23:33:FA:1E:A3:90:E7:44:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E296664FB3411EF9F874CA3762E951A.roa
Signing time: Fri 07 Mar 2025 09:10:47 +0000
ROA not before: Fri 07 Mar 2025 09:10:42 +0000
ROA not after: Sat 12 Apr 2025 09:10:42 +0000
asID: 20326
IP address blocks: 154.83.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94946 (0x172e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 7 09:10:42 2025 GMT
Not After : Apr 12 09:10:42 2025 GMT
Subject: CN=67cab816-f1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:35:87:e4:a3:c5:db:c1:92:af:f8:2f:be:
76:f8:f0:00:7c:f6:12:37:c7:91:28:bb:da:30:62:
88:3b:b0:72:a8:6c:1c:12:fb:3d:38:ee:02:52:ed:
9c:bd:0a:92:11:e5:23:a7:7d:df:2a:c6:26:55:df:
b3:7f:b3:96:9d:d0:37:35:2b:bf:1c:de:d6:b0:c8:
cc:d5:71:30:3b:3a:57:db:78:10:2b:22:61:51:d2:
bb:7b:04:80:b8:19:1a:dd:05:14:f3:07:b7:4c:8c:
e1:58:86:e4:41:1b:76:93:00:e5:6e:03:ac:51:a7:
9a:12:3d:1c:26:9e:fd:70:26:6a:8b:31:df:3f:f2:
a4:3e:a2:2d:23:d2:80:81:8b:b0:8d:d0:30:ef:28:
4f:de:f3:02:f9:ef:58:1d:80:d1:5c:0f:0a:e0:11:
cd:f5:fc:ef:3f:b3:8a:19:be:df:ef:8f:b3:00:04:
b4:bd:9a:d5:6c:df:ec:9d:2c:56:45:a2:2c:53:fe:
b2:a3:b2:be:30:30:95:06:97:cb:90:0f:64:8d:ba:
44:55:21:29:c1:cc:23:c4:b2:15:07:36:d5:34:2b:
c6:67:65:bb:ba:2b:0a:f4:38:09:1e:c4:35:df:33:
d2:4c:78:55:c4:74:5d:6d:62:ae:3d:60:33:a8:05:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:CD:F6:34:CD:86:7E:25:22:8E:23:33:FA:1E:A3:90:E7:44:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E296664FB3411EF9F874CA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:74:72:2d:23:10:1e:da:3e:7b:5e:a2:cb:16:dc:c7:ea:ea:
b4:33:31:78:54:ca:ea:37:5e:cc:0a:24:ff:4c:02:00:e5:cf:
2a:37:1f:29:6e:8e:78:90:c9:c3:d4:53:4c:72:5c:ca:8b:3d:
72:51:17:a8:69:e5:8c:6d:9f:cb:7b:bf:ee:ba:4f:9d:81:37:
dc:25:82:fe:61:12:9a:5d:1e:4b:ad:0d:9f:f7:0b:1a:f8:ec:
ec:10:a8:61:dc:55:b6:c3:c0:cf:57:67:93:4a:41:a2:ac:83:
51:fe:e3:d9:cc:d1:99:38:04:31:84:6a:4e:00:2e:d3:c6:9f:
43:77:ed:87:34:8c:4a:02:b5:7f:ac:d8:ac:a6:ed:7c:6e:b7:
d0:4f:97:c9:f2:08:97:fb:0a:9a:4d:81:8b:3a:eb:16:1f:ae:
f8:53:97:e0:5f:24:b5:d1:00:54:6a:cb:10:3a:26:97:20:0f:
19:94:df:3f:10:87:77:ba:8a:ca:00:ae:c1:b8:77:e6:c6:41:
01:37:9d:fa:6e:45:8c:e2:ca:d6:e2:51:36:e1:5a:08:a4:f3:
66:8f:e6:1c:45:a6:be:8d:d8:51:63:8b:0d:1f:83:4b:cf:bc:
1e:db:b5:d7:bb:64:20:9b:38:9f:d2:4a:a1:7b:61:ff:b6:9e:
a5:d6:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:58 2025 by rpki-client