Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/8D38EA92F36411EFB4C65466762E951A.roa
File: 8D38EA92F36411EFB4C65466762E951A.roa (raw, json)
Hash identifier: +EMSMJ3EYz9pXuGkf95ZpK0KIr/3eV/25E+zqK7H2d4=
Subject key identifier: 32:A6:7F:87:DD:E4:7D:78:48:99:02:1E:D0:73:5E:5D:1B:99:21:3F
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 81
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/8D38EA92F36411EFB4C65466762E951A.roa
Signing time: Tue 25 Feb 2025 10:37:46 +0000
ROA not before: Tue 25 Feb 2025 10:37:42 +0000
ROA not after: Sun 31 Dec 2028 10:37:42 +0000
asID: 30985
IP address blocks: 196.200.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 25 10:37:42 2025 GMT
Not After : Dec 31 10:37:42 2028 GMT
Subject: CN=67bd9d7a-53de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:3d:fb:03:2f:41:68:d4:01:d7:ca:01:bd:
2a:17:ac:05:3c:23:e9:42:70:95:f2:6d:75:89:3d:
ff:05:28:92:ec:fb:8a:5d:c0:74:2e:0a:32:8b:48:
d0:ad:ca:e7:f0:3f:e1:bc:6e:5b:34:9e:f5:05:55:
2d:ad:e2:8c:42:74:40:fb:35:62:9f:7b:21:a7:21:
82:e3:64:23:27:0c:ca:84:ee:b8:14:7d:cc:3c:3c:
8a:4e:80:13:68:ba:e7:47:bd:ce:2a:a7:5b:d0:28:
03:6d:a4:1b:7e:65:a2:9b:d5:99:3e:68:a4:e7:d2:
ab:c5:21:12:e0:db:57:a1:c5:46:02:4d:51:1b:e8:
3f:6d:7c:26:9d:cb:ed:8f:d0:c6:85:51:b5:ad:f9:
47:7d:a5:75:55:fb:21:d2:8f:96:4e:23:4a:15:dd:
1d:59:76:1e:a5:f6:b2:0c:9e:a2:07:08:77:b2:db:
ee:e9:0c:90:64:14:9c:f3:7d:2b:a6:46:cb:5a:b3:
5d:50:09:bb:c8:33:cf:af:f4:33:5b:c7:85:af:7e:
7a:3e:b0:a8:4c:87:3d:62:8e:92:eb:02:25:5e:28:
4d:95:02:fb:53:d3:43:3f:f0:be:92:53:ba:81:fc:
c1:0e:98:46:29:f7:9a:33:fb:d6:ba:f1:1a:22:d0:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A6:7F:87:DD:E4:7D:78:48:99:02:1E:D0:73:5E:5D:1B:99:21:3F
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/8D38EA92F36411EFB4C65466762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.80.0/20
Signature Algorithm: sha256WithRSAEncryption
18:be:e3:4c:92:a3:6c:fd:01:49:8f:c6:63:05:69:f5:df:d9:
45:3a:44:dd:c5:e7:31:b9:54:a5:1e:d7:c0:7e:8a:6e:de:19:
5e:06:c8:28:12:c4:76:a6:1c:89:40:fe:f5:f0:3d:ef:9f:0a:
ed:15:5c:08:20:9c:e0:c5:81:0b:9d:ea:b3:8f:b7:b0:6b:73:
e4:a4:79:6c:bb:e8:3b:20:a1:42:58:15:09:cd:66:8b:4e:6a:
f2:7b:f6:7c:86:2e:e7:5e:b1:4c:13:00:a3:5f:c7:27:c9:30:
de:be:a7:e4:c4:df:9c:5f:9a:a7:74:ff:7d:d3:27:79:1b:04:
0f:9c:43:23:6a:28:ef:87:6a:4b:ba:cb:72:50:c5:d2:8e:d1:
0e:73:51:8f:fa:15:b7:03:85:b3:75:ce:65:19:43:05:c3:8b:
15:5a:20:89:74:56:66:8e:b6:b2:37:1e:85:eb:22:9f:a7:a9:
ee:10:23:36:cc:a2:1b:ba:69:b1:11:ef:f4:21:13:78:78:05:
b1:56:72:94:a8:21:2f:e1:28:7a:0c:2f:10:1a:94:d8:63:b5:
d9:a4:51:fd:0d:c0:0a:65:10:ec:e5:87:b8:84:43:63:5a:cc:
33:48:9d:ee:f4:d9:8c:e9:72:c1:43:fa:fe:b8:83:99:54:57:
57:99:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:23:03 2025 by rpki-client on console.sobornost.net