Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/432008F0C38011EFAC50634B762E951A.roa
File: 432008F0C38011EFAC50634B762E951A.roa (raw, json)
Hash identifier: ulxSe/EC8ORczN5JS9rpf6daGJbynQvGnWMT0fgJ7T0=
Subject key identifier: D5:04:70:7E:F4:96:41:45:1D:B1:69:45:CD:A7:8D:72:50:28:BB:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012756
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/432008F0C38011EFAC50634B762E951A.roa
Signing time: Thu 26 Dec 2024 11:55:12 +0000
ROA not before: Thu 26 Dec 2024 11:55:08 +0000
ROA not after: Sun 12 Dec 2027 11:55:08 +0000
asID: 17561
IP address blocks: 154.94.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75606 (0x12756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:55:08 2024 GMT
Not After : Dec 12 11:55:08 2027 GMT
Subject: CN=676d4420-6fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:a2:be:9e:06:2d:dd:b5:4b:b1:07:82:65:
5e:57:14:60:91:b6:65:69:36:f7:dd:6b:f8:3f:3b:
66:89:2f:21:e4:7d:8b:b3:ad:c1:7a:5d:5f:de:03:
9d:ec:42:1e:23:1c:1c:a6:fd:be:e8:8b:ec:1f:85:
82:80:33:73:e8:9c:a7:4f:ef:58:e6:e6:80:33:d9:
13:7a:b9:42:07:10:c7:8b:84:96:e5:58:77:ba:5c:
76:f3:a7:9b:19:8e:21:58:87:8b:78:74:9c:d4:10:
eb:40:08:44:79:3e:e1:71:82:08:34:d7:ae:f5:ef:
f1:e3:03:ae:d0:0c:bd:7e:2d:16:6b:ff:68:71:de:
c4:00:cd:99:64:f4:74:bd:1e:c2:b9:2a:ed:cc:bb:
fe:5b:3f:0d:14:61:87:5f:f5:03:8b:74:1c:f0:a0:
5c:97:c1:2b:73:90:11:27:24:33:c4:9a:45:82:e8:
67:dd:f2:f5:29:02:02:68:7d:50:f2:5a:d6:54:ad:
14:11:ab:80:f9:fb:8c:69:1c:60:32:9d:69:13:58:
79:48:8a:cc:9f:50:50:4c:87:51:09:11:6a:cc:2d:
d8:fe:9b:ae:ad:ba:fd:70:fc:6e:05:a3:8f:de:d1:
25:80:9f:30:27:89:8b:bb:b6:ad:0b:2f:eb:bb:87:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:04:70:7E:F4:96:41:45:1D:B1:69:45:CD:A7:8D:72:50:28:BB:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/432008F0C38011EFAC50634B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:86:5e:dc:ac:96:fb:ea:18:cc:1d:7d:09:bb:d1:48:93:e8:
f5:b9:1a:d4:d2:51:ac:e4:d3:a0:09:e0:12:4d:67:ad:a1:b5:
df:22:37:1c:fe:fd:de:b6:25:19:ba:a8:94:ca:f0:98:0c:4f:
e4:b1:75:41:70:b1:00:f3:56:d8:56:47:20:92:59:98:03:b5:
12:e6:72:7e:98:91:ce:8b:da:a9:f4:3b:f6:cb:72:12:c7:32:
15:cc:ef:e8:1f:41:5e:66:b6:f2:ef:b8:a1:d4:0e:28:8b:0c:
9e:b8:32:d0:b1:22:32:99:cf:19:fa:54:99:4b:52:bb:60:2f:
c1:24:1c:e4:3b:47:4b:43:1b:91:1a:e6:80:09:4d:de:0b:eb:
8e:df:8b:05:e6:a3:cf:4d:b4:26:2e:e0:04:49:47:ba:9d:95:
9d:8b:f9:89:2c:c9:d8:95:65:55:a8:aa:8c:8a:c2:3b:ec:e5:
07:0b:7d:64:c7:16:94:90:6e:1a:4d:b6:f5:c8:65:41:25:33:
e7:6e:c9:0d:4d:7f:fc:1f:fb:ef:93:de:bb:66:03:40:a2:b3:
7e:6d:f9:10:40:4d:e2:b2:ed:1c:3c:9c:91:c7:14:69:87:82:
3d:ad:34:a9:d4:b3:40:88:ae:ba:13:63:70:75:73:34:4f:6b:
d6:b6:2a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:01 2025 by rpki-client