Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE729AC00CC311F0B4111E44762E951A.roa
File: DE729AC00CC311F0B4111E44762E951A.roa (raw, json)
Hash identifier: rQZtbWSl8/ZwlgUccGYjkEL1rrk/yIyCw/Yf73GY6Ms=
Subject key identifier: 55:A9:C8:8E:4D:3E:9A:2E:8A:30:D2:7B:45:EF:E5:06:5F:C5:67:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE729AC00CC311F0B4111E44762E951A.roa
Signing time: Sat 29 Mar 2025 17:33:04 +0000
ROA not before: Sat 29 Mar 2025 17:33:00 +0000
ROA not after: Mon 05 May 2025 17:33:00 +0000
asID: 399195
IP address blocks: 154.193.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95950 (0x176ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 17:33:00 2025 GMT
Not After : May 5 17:33:00 2025 GMT
Subject: CN=67e82ed0-60b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:e9:06:1e:7d:50:56:ff:64:5f:dc:2d:0e:
40:dd:45:5a:1f:b6:be:ab:19:37:ab:e8:f5:30:a6:
67:2e:6b:6e:1d:d5:6a:a9:9a:58:b2:66:2c:37:32:
9b:65:4d:4d:f0:4d:30:20:76:63:2f:06:67:ba:e6:
a4:7c:a5:bc:66:dd:11:c5:39:9a:e2:fa:7c:6f:c3:
92:51:ce:cd:3c:20:5c:7f:9f:73:09:86:a8:b5:21:
a7:a6:8b:5a:a2:35:c0:af:3c:bf:17:e0:54:da:0f:
ef:e9:62:55:02:15:74:16:ab:0e:6b:10:33:70:eb:
60:46:06:80:b9:53:81:dc:10:d9:b0:48:6d:ac:2e:
eb:72:98:09:1d:3d:ec:ae:c1:4c:c8:12:fd:ef:57:
5a:af:49:5a:f3:71:89:70:5a:1c:a9:f2:e1:23:03:
a3:ff:67:f4:e7:5b:11:8f:1c:d9:5f:03:7c:31:0f:
b1:a0:59:37:84:23:e5:ac:6f:d7:35:9b:a8:aa:c4:
02:93:f0:8e:e2:81:43:6b:e2:d8:b0:86:0f:61:b7:
07:5c:4f:f7:9a:c6:08:5b:97:54:6f:2e:98:69:56:
6f:dd:a3:00:43:c7:ae:31:46:1c:ee:d7:3d:4b:70:
1e:fb:a9:c2:c4:b9:31:dd:41:4a:55:aa:f5:25:ee:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:C8:8E:4D:3E:9A:2E:8A:30:D2:7B:45:EF:E5:06:5F:C5:67:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE729AC00CC311F0B4111E44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.112.0/20
Signature Algorithm: sha256WithRSAEncryption
59:1b:9b:d2:de:80:98:89:26:c6:ee:f7:2b:fa:3e:80:a7:dc:
52:1a:30:34:d1:2b:4f:98:59:98:c5:4c:f2:52:7a:21:35:55:
7c:1d:e5:ba:19:1e:21:a2:11:9f:5d:73:8d:55:95:b6:f2:8c:
7c:81:0d:d7:50:5d:33:52:2f:de:24:b5:59:67:e1:80:98:9d:
15:d9:f2:c8:b4:19:2d:70:5e:ba:e0:00:23:bf:c8:7d:e8:4e:
cf:99:0f:48:70:d4:3b:52:dd:15:2e:2d:7d:6a:d8:dc:f2:5a:
96:6a:e9:88:39:c4:de:33:b7:b8:15:25:18:06:db:0e:eb:8c:
43:61:e6:96:a7:f7:30:99:66:99:40:66:b3:9d:02:bf:5e:7a:
24:bc:89:b1:3f:9b:4d:8f:33:6c:65:bb:4a:1c:ab:52:0b:c9:
6d:3d:6b:5b:73:99:33:c0:16:96:8b:42:51:68:67:f6:a6:b7:
f2:32:ac:0b:a5:25:44:46:20:6f:69:41:12:ab:75:ce:f7:ce:
16:8b:2f:7e:ea:b4:e1:87:9a:b9:e7:ca:e5:01:14:1a:c4:eb:
55:9d:ae:62:7d:3f:04:d0:d9:49:81:5a:80:27:77:e5:9d:db:
6f:4b:4d:0a:30:9e:7b:11:1b:a9:6b:b4:5d:c7:f8:e1:1d:31:
64:b9:b0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:46 2025 by rpki-client