Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095DD42C11FE11F0BA49207F762E951A.roa
File: 095DD42C11FE11F0BA49207F762E951A.roa (raw, json)
Hash identifier: 6ijVKMgIzPg5HjNoiF8F/U5Jmw+t+amRMAy0VCXegQY=
Subject key identifier: B7:ED:4B:57:AF:AE:9F:8B:3D:5F:6D:0C:37:9E:D5:CC:8B:12:12:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095DD42C11FE11F0BA49207F762E951A.roa
Signing time: Sat 05 Apr 2025 09:12:02 +0000
ROA not before: Sat 05 Apr 2025 09:11:55 +0000
ROA not after: Sat 10 May 2025 09:11:55 +0000
asID: 30781
IP address blocks: 154.217.176.0/23 maxlen: 24
154.217.184.0/21 maxlen: 24
154.217.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96224 (0x177e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 09:11:55 2025 GMT
Not After : May 10 09:11:55 2025 GMT
Subject: CN=67f0f3e2-a4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:a2:9d:f6:11:5e:9c:b2:e1:4d:c6:98:14:
02:ee:ba:78:54:8c:5b:fd:7b:5e:19:59:88:ac:df:
9e:fc:66:c9:f8:5b:41:e0:ba:da:3d:dd:e6:2b:66:
d9:7d:6f:29:1c:29:a2:7a:52:f7:a7:e8:4d:c3:3c:
6b:52:da:7a:41:44:e2:a0:12:6c:02:af:65:90:16:
1f:42:86:9f:88:2f:54:95:eb:18:1b:8d:82:90:d7:
95:77:f6:04:3d:25:1c:22:45:c5:7a:c7:86:06:e7:
8d:9f:92:5b:82:94:5c:4c:1d:b4:ea:7e:f7:81:8d:
a3:30:b0:f4:7e:b4:5d:e3:3f:9e:51:4a:29:0f:64:
68:f6:01:6b:62:3c:6c:d4:9f:08:0e:75:34:d8:6f:
ec:86:5c:25:1c:9b:09:38:80:ee:32:49:b3:f7:18:
ee:44:a2:35:fe:04:ee:02:58:e1:3f:22:48:94:dc:
b2:2c:ba:42:d7:11:b2:6d:74:81:a0:52:e5:0a:fc:
03:0d:e0:2c:46:dd:c0:98:7b:a6:bf:1c:b5:ea:2c:
ec:c8:05:73:fa:5a:de:19:cf:ec:74:96:77:dd:71:
7c:bd:21:be:07:06:77:1d:52:65:c0:60:2f:71:81:
07:ee:cc:18:d0:e8:e7:d6:ba:f6:5a:4b:25:10:47:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:ED:4B:57:AF:AE:9F:8B:3D:5F:6D:0C:37:9E:D5:CC:8B:12:12:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095DD42C11FE11F0BA49207F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.176.0/23
154.217.184.0-154.217.223.255
Signature Algorithm: sha256WithRSAEncryption
78:5f:0f:e6:b5:e9:62:fd:4f:f4:5b:1a:01:ec:3d:4e:7a:91:
fb:3a:41:bc:ef:d9:88:fe:67:c3:1f:59:30:0b:31:27:81:1d:
09:17:f7:d7:2e:49:d3:ad:b4:a8:7a:28:1a:a3:30:bf:1a:62:
9f:e3:97:91:a8:90:05:26:4f:eb:55:1b:0a:6d:77:f2:1d:49:
d6:29:9d:3a:ce:be:33:f0:2a:b5:85:43:a7:04:d6:7c:0b:b8:
b5:7d:29:f8:35:c4:d3:54:aa:b1:3a:4a:b4:83:01:d0:f7:d0:
3a:db:d5:b5:f5:2f:49:2f:62:47:bc:1e:9b:1e:49:a7:4e:ed:
ec:c6:c9:fd:ba:f5:9f:df:39:84:cb:5c:28:8d:c5:7a:72:af:
b1:34:fb:a0:ac:11:ed:46:0c:e5:29:62:41:e2:0b:eb:5b:c6:
de:c0:10:c1:ff:dd:31:02:b8:0e:98:e9:d0:c4:e8:66:dd:35:
2d:92:2c:a0:5c:b1:88:75:8b:eb:e6:9a:6d:1b:61:7f:44:9f:
19:99:c3:31:c4:33:aa:2c:03:18:6e:e7:b0:29:22:62:30:0a:
a6:ca:2e:4e:6d:63:11:09:a4:74:44:c4:32:87:0f:21:7b:d5:
0f:29:4a:fc:75:31:f1:9f:cf:37:cb:20:94:ad:9a:cf:c0:f0:
3a:31:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:17:20 2025 by rpki-client on console.sobornost.net