Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAF3F4A13C611F0A6A943B9762E951A.roa
File: 0AAF3F4A13C611F0A6A943B9762E951A.roa (raw, json)
Hash identifier: nu6htwVjkijFSkMyMR6ruavXIa/OSR/7+F+cIAdAFTM=
Subject key identifier: B3:3F:EF:C4:CE:81:30:E7:34:30:4B:97:76:93:22:CB:50:F3:08:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017808
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAF3F4A13C611F0A6A943B9762E951A.roa
Signing time: Mon 07 Apr 2025 15:36:15 +0000
ROA not before: Mon 07 Apr 2025 15:36:11 +0000
ROA not after: Tue 13 May 2025 15:36:11 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96264 (0x17808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 15:36:11 2025 GMT
Not After : May 13 15:36:11 2025 GMT
Subject: CN=67f3f0ef-1d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:ae:28:66:f9:6d:0d:ff:0b:cc:7a:ae:0c:
4b:25:f6:f0:0a:13:21:45:89:39:11:ba:17:ec:84:
dc:c5:5a:d9:2b:ab:9e:2e:1e:19:c8:db:9c:56:97:
ba:0a:c2:01:40:88:97:bc:92:b4:f8:9b:bd:48:58:
a5:f3:00:4a:bc:84:47:cb:39:82:43:4c:d6:0c:7f:
51:3a:fe:a3:ad:a8:28:d3:cf:a2:9a:45:37:19:15:
1d:81:11:97:88:cb:cf:3c:2e:e6:15:e5:72:d0:b3:
89:dc:31:c2:41:6d:e3:43:ba:1d:df:d0:60:9b:86:
9e:94:eb:dd:20:92:45:c9:76:db:e7:db:86:ef:a5:
50:aa:42:0b:08:a3:68:f5:92:0c:85:33:4b:d7:9c:
1e:c2:87:dd:ae:23:9a:5e:bb:74:07:7f:75:35:22:
2a:6f:62:ab:a2:3e:de:45:03:b2:24:53:6a:62:2d:
77:4b:59:49:85:09:60:62:61:cb:f9:a7:e9:68:2b:
e8:57:ac:62:d5:fa:0b:dd:7f:af:1b:b3:0b:e6:a5:
b5:4b:b1:d7:6a:45:19:9d:ab:40:83:e1:6c:2d:d9:
a3:24:8f:5a:6e:ec:50:b8:13:1d:05:be:59:82:d3:
1e:80:ef:f1:bf:10:3d:bf:af:69:a4:ff:dd:47:1f:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3F:EF:C4:CE:81:30:E7:34:30:4B:97:76:93:22:CB:50:F3:08:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAF3F4A13C611F0A6A943B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
31:05:6d:ff:20:72:52:79:de:8e:95:84:8e:43:0f:19:ed:f9:
c1:e2:c2:54:2e:3f:bc:2a:e7:21:27:b8:01:d6:c3:89:21:16:
72:f1:7d:db:a2:16:b5:49:ff:aa:82:1a:d8:31:e3:c1:1e:aa:
a6:eb:9d:1e:fa:2e:21:34:46:39:6e:c4:55:cf:3a:f8:31:fd:
10:cb:34:6a:3b:dc:eb:fe:75:72:58:d2:e9:10:60:cb:f5:a5:
f0:d1:d5:1e:7f:ed:45:af:d6:e1:fe:6e:b8:fe:89:b1:42:89:
cd:5c:c9:af:b0:92:25:4a:04:59:1f:ab:13:99:ab:62:20:05:
83:40:31:66:a4:da:e9:55:69:8d:cc:5e:e5:47:ae:f6:15:a0:
f4:89:4a:c9:f5:e1:02:4d:17:54:c5:5a:62:4f:89:82:c0:bb:
e7:47:f1:e8:c0:61:ad:fb:7e:e1:a4:20:d7:fd:8d:e9:95:14:
d7:b4:39:69:65:63:a0:71:55:e8:76:39:df:36:6e:bc:2f:3e:
05:04:40:d7:61:fd:f4:5e:e2:d7:79:8f:39:3c:39:25:b8:2a:
41:cb:35:29:aa:85:b6:b8:bf:0e:65:e1:bb:24:3b:82:99:45:
07:15:4c:da:74:ab:f9:fb:04:a8:60:4b:d8:ae:d1:06:f7:c2:
e5:8c:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:18 2025 by rpki-client on console.sobornost.net