Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FAD076C1DD411F094CBE586DAE4EC9C.roa
File: 0FAD076C1DD411F094CBE586DAE4EC9C.roa (raw, json)
Hash identifier: nzOkvzuQl4FJd6uwJBGD23KF6CF0ccZhpG0biwk1f8g=
Subject key identifier: 5E:E9:6A:46:DE:2F:16:B0:C3:5D:81:78:C2:6C:18:FC:AF:70:35:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FAD076C1DD411F094CBE586DAE4EC9C.roa
Signing time: Sun 20 Apr 2025 10:41:49 +0000
ROA not before: Sun 20 Apr 2025 10:41:44 +0000
ROA not after: Sun 08 Jun 2025 10:41:44 +0000
asID: 3320
IP address blocks: 154.91.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96802 (0x17a22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 10:41:44 2025 GMT
Not After : Jun 8 10:41:44 2025 GMT
Subject: CN=6804cf6c-588f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:89:77:35:ba:bc:d9:d4:55:ff:86:9e:99:
4d:13:aa:c8:4e:78:35:a6:3d:e6:ba:56:93:82:5d:
52:0e:62:1c:3e:97:6d:6c:39:11:91:3c:f3:da:9e:
00:9a:d9:a1:52:36:47:c4:e8:de:84:94:4f:38:44:
3d:28:62:f5:20:64:e4:42:43:cc:fd:4c:e8:7e:4f:
a8:a4:a7:b8:5a:46:8d:7a:32:8a:14:59:98:34:00:
80:36:fa:a3:38:3f:4a:a1:6e:0f:8d:c3:96:02:8d:
5a:32:0b:17:ac:aa:fe:96:bf:2d:c2:a5:82:f2:14:
9f:6d:e4:3e:4b:6c:b9:23:e6:bd:7b:82:8a:ff:ee:
75:0a:26:4f:65:57:2e:c1:14:8a:50:a0:6f:f4:c8:
ad:42:15:8b:0a:35:04:cd:a5:9a:d2:0f:bb:ee:df:
aa:bd:9f:43:c8:4d:3c:5d:a1:6f:45:17:ca:f7:c4:
47:6f:58:4b:b3:86:55:02:44:77:34:96:75:ab:3a:
16:ec:8c:55:b7:d8:13:35:df:92:b2:8d:65:95:e6:
4c:e2:de:86:35:15:95:82:8f:2a:c8:1c:05:7f:2d:
9b:82:61:2d:54:0b:a7:3a:6e:71:d9:0e:8b:18:3f:
99:8d:b3:2e:3d:b7:2f:5d:16:a4:ec:fe:d5:3d:b2:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E9:6A:46:DE:2F:16:B0:C3:5D:81:78:C2:6C:18:FC:AF:70:35:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FAD076C1DD411F094CBE586DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:a9:cd:7a:62:a7:e7:67:34:2e:b5:57:08:b8:9f:6e:36:a3:
d1:c9:87:ed:e9:23:fa:2e:ea:f4:e5:45:eb:15:dd:2e:40:53:
b5:83:9a:30:99:7c:b8:63:96:61:e9:5f:82:fc:e5:df:9a:87:
36:d8:2b:58:5b:ef:ab:e9:01:b9:6b:3f:b1:10:42:b9:46:d2:
b0:1e:a0:23:78:89:75:af:08:a5:9b:ee:4c:0e:32:48:6a:69:
8c:24:f8:36:bf:19:63:42:8b:c0:bc:6e:57:43:06:d3:3e:c1:
a0:96:b0:83:5d:80:99:60:0a:8b:53:ee:01:ab:ce:54:82:4c:
5b:61:56:2e:c6:56:80:51:f9:e6:62:4e:00:b4:74:d8:95:4d:
17:79:aa:df:a5:42:29:9e:77:17:a8:53:e9:9e:f6:f6:15:4e:
55:b2:79:ae:46:6f:84:90:a7:96:9b:8b:35:13:81:55:cf:cf:
27:2b:13:4c:5c:99:18:1a:64:6d:37:28:8d:15:f6:3b:60:5b:
3b:68:78:11:40:b3:4d:56:b6:4c:4d:08:e5:5c:20:22:5e:e4:
39:ac:c6:64:7f:96:38:24:d0:73:73:6b:b2:c0:bc:93:ba:45:
09:97:47:64:3d:44:b5:f3:e2:69:0d:4d:2e:62:87:99:c2:ef:
8d:5f:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:20 2025 by rpki-client on console.sobornost.net