Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/432F86AA15D711F0B6FB9EC66DB8BCC6.roa
File: 432F86AA15D711F0B6FB9EC66DB8BCC6.roa (raw, json)
Hash identifier: g1gwgQtT2c/6uodv6rXq90cNHwaX43jpIoQmuVijDWc=
Subject key identifier: A7:E4:8B:29:F2:16:B1:90:20:0B:BA:C7:9C:D9:0F:FE:46:B0:85:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/432F86AA15D711F0B6FB9EC66DB8BCC6.roa
Signing time: Thu 10 Apr 2025 06:44:34 +0000
ROA not before: Thu 10 Apr 2025 06:44:27 +0000
ROA not after: Mon 05 May 2025 06:44:27 +0000
asID: 57043
IP address blocks: 154.83.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96419 (0x178a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 06:44:27 2025 GMT
Not After : May 5 06:44:27 2025 GMT
Subject: CN=67f768d2-74cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:59:13:37:98:80:97:dc:3f:c7:41:49:c8:
c4:d4:e0:43:d0:26:b6:4a:57:f7:31:a6:1d:70:49:
6f:bc:03:a8:1a:4d:bc:fa:6e:12:56:d3:85:f4:30:
16:70:8c:ad:d1:25:58:f2:3c:ae:32:74:c3:e6:b2:
19:1c:79:80:23:57:f2:96:0b:50:7c:1b:5b:35:6f:
50:25:04:f4:91:86:02:1d:a1:c6:58:15:76:af:ac:
58:d4:7e:15:d2:46:fa:63:39:49:f3:53:fd:61:e0:
40:e9:22:e1:d6:21:cb:7c:a5:fa:1b:67:b9:fc:c6:
c9:76:6c:67:dc:0a:99:4d:d5:25:2d:62:9a:60:9c:
e5:8d:90:50:09:c3:b8:b0:8f:dd:7a:dd:2d:66:0a:
1d:1b:b3:17:cc:9a:85:99:41:53:c3:33:9b:8d:d1:
c8:ea:3c:df:ca:0f:37:fc:6c:53:39:c9:17:1b:15:
fb:15:fd:d7:8c:c4:91:94:fa:d4:86:7e:df:fc:49:
aa:2b:6c:d4:fa:bb:90:95:ef:f3:4e:51:8e:d3:b4:
bc:7f:d8:41:5a:7d:ba:f1:43:b4:f5:12:77:ab:e4:
11:c6:43:a4:37:a8:ae:49:15:fa:67:fa:47:3a:44:
d2:34:79:d8:ea:51:8e:e0:18:05:98:af:c8:ec:f6:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E4:8B:29:F2:16:B1:90:20:0B:BA:C7:9C:D9:0F:FE:46:B0:85:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/432F86AA15D711F0B6FB9EC66DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2a:c4:ac:06:f9:88:39:d0:c2:88:97:b5:83:3b:6e:42:e5:
48:dc:c8:09:47:1a:d1:f4:c1:65:aa:80:e2:39:42:d8:f7:69:
0b:e7:b1:a3:d2:00:ba:7b:22:7e:67:fd:83:f4:e5:53:d1:7a:
b5:b9:ae:f2:b2:be:43:1c:23:f7:6e:ab:28:f4:07:3a:7c:f6:
7a:f9:f0:0f:fd:9b:63:2e:b1:8c:e4:36:8c:db:ee:24:ba:4a:
2b:72:d5:96:21:ba:df:47:0d:0d:68:19:3e:63:81:b3:7c:5f:
31:be:c6:a5:e4:ce:a3:aa:7e:bc:94:75:29:71:c2:2f:d2:5a:
e8:10:ea:95:f9:8c:27:a2:db:7c:bd:19:11:d7:38:4d:67:4c:
67:1d:5e:91:8d:c6:26:22:fd:09:30:46:92:80:21:1b:90:f4:
a6:9f:0d:6c:e3:70:4a:23:55:c6:bb:e1:e2:66:5a:9c:6a:95:
58:c2:ea:c8:c2:ec:bf:4b:8e:ad:99:a7:92:60:3a:41:00:86:
d0:69:98:64:0f:5f:4d:9d:65:fe:b0:0d:46:4d:1e:9c:80:8b:
28:af:fc:e0:f3:48:df:a1:9b:05:6b:86:4c:63:09:fa:ef:9b:
eb:e0:6a:69:7a:cb:54:e7:c2:b7:5d:85:bd:23:3e:33:ee:8c:
09:87:f1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:58 2025 by rpki-client