Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EDAC7B08200C11F088AAA8E4DAE4EC9C.roa
File: EDAC7B08200C11F088AAA8E4DAE4EC9C.roa (raw, json)
Hash identifier: ZEfW7z7aUx3TrAEErPr7lFnU/hD8KEnyReelDhVpMyE=
Subject key identifier: E3:50:03:16:03:04:55:A1:43:12:EB:03:AE:4C:87:58:EB:16:14:36
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A92
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EDAC7B08200C11F088AAA8E4DAE4EC9C.roa
Signing time: Wed 23 Apr 2025 06:33:55 +0000
ROA not before: Wed 23 Apr 2025 06:33:50 +0000
ROA not after: Sun 23 Apr 2028 06:33:50 +0000
asID: 212238
IP address blocks: 154.16.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6802 (0x1a92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 23 06:33:50 2025 GMT
Not After : Apr 23 06:33:50 2028 GMT
Subject: CN=680889d3-66b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:4b:0c:31:ab:5a:ea:95:05:c5:89:73:83:
d1:24:d2:7d:87:9f:c3:0b:f5:16:bf:8c:ee:59:97:
96:63:29:27:0a:c2:a2:8b:0a:91:af:c1:fe:42:06:
c5:11:3f:87:e0:dc:04:8e:80:72:13:b2:a3:81:c1:
ea:f1:37:0f:04:fa:97:3c:5e:0a:5a:7c:64:55:cc:
0a:7f:8b:d2:8c:8a:1f:22:92:93:b4:21:26:e1:4a:
fb:21:1f:d7:d6:fd:c9:76:e8:f4:8e:6d:12:06:a5:
e9:9e:0d:83:aa:25:25:11:11:4d:35:b1:33:7e:c8:
af:8b:fe:91:42:4f:23:2c:44:ea:82:cc:50:35:9f:
8e:6b:c3:17:c3:b9:c2:90:fd:fe:fc:e3:b5:e8:69:
b8:d7:60:4f:24:34:e0:0d:db:6d:1e:ff:51:78:56:
7f:24:bd:2d:5c:b9:e1:cb:06:7b:a8:6d:0d:9c:8f:
f1:7f:ba:e9:53:12:50:5d:57:47:fd:c7:a8:2c:56:
ae:7e:4b:f9:72:da:2e:75:0c:f9:c1:86:86:9f:c6:
33:35:3a:c1:c0:36:d6:ba:81:cf:c1:30:47:99:a5:
2b:7f:ee:60:d6:b1:53:b5:8f:c2:eb:52:d1:c3:f5:
c9:34:8d:bc:1f:85:d9:cf:36:02:73:15:8a:db:48:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:50:03:16:03:04:55:A1:43:12:EB:03:AE:4C:87:58:EB:16:14:36
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EDAC7B08200C11F088AAA8E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.95.0/24
Signature Algorithm: sha256WithRSAEncryption
87:13:15:9f:79:9d:ad:96:dd:70:2d:eb:a2:b7:1c:73:d0:39:
c6:28:51:ff:82:90:cf:10:80:cf:cf:05:90:b3:1c:27:a4:31:
7c:d3:e6:ec:cc:5b:4d:9c:10:6f:4e:6d:85:c7:b6:d5:95:4b:
3c:86:7e:b0:0a:9c:8f:64:28:00:38:ac:d5:4d:a4:b2:b0:8f:
97:09:5c:1b:d6:3f:f8:b5:e2:99:f4:3b:60:22:c1:37:b0:1d:
f4:c6:7b:62:b5:ff:c7:48:b6:4e:1d:d7:84:b7:0c:99:6b:79:
ff:30:88:be:69:5f:90:e5:27:1f:40:a6:8c:fe:62:af:65:40:
2f:b7:81:f1:00:26:79:90:f8:99:2a:c5:f9:62:82:13:13:49:
8f:b7:c1:ab:03:f8:ca:f4:31:c3:04:bc:11:7d:80:15:56:bd:
bc:8e:cb:8c:4b:d9:9c:19:65:b0:67:c7:65:b1:09:67:92:47:
0f:bf:f3:a8:40:cf:20:92:7e:f0:ee:14:11:16:e5:2b:46:90:
c5:de:45:d2:52:c0:00:8b:6e:11:ac:b5:eb:ca:b5:e6:2d:2f:
99:53:fa:4c:c3:ae:e3:f0:4f:b5:d7:ed:5d:9f:d4:d2:dd:dc:
9a:c6:b6:a5:de:63:59:64:e7:7e:c1:3f:e6:c8:9d:bb:97:d8:
28:04:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:34:02 2025 by rpki-client on console.sobornost.net