Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/113F297A202211F093302CF1DAE4EC9C.roa
File: 113F297A202211F093302CF1DAE4EC9C.roa (raw, json)
Hash identifier: VMvJ6vx28mhJ/Zt8swEmWUOGLP3R01xeHTxNQzepGi4=
Subject key identifier: 80:15:E6:47:BF:74:2B:7C:56:1A:69:E3:F9:D6:E2:10:7B:71:EF:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017AC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/113F297A202211F093302CF1DAE4EC9C.roa
Signing time: Wed 23 Apr 2025 09:05:14 +0000
ROA not before: Wed 23 Apr 2025 09:05:10 +0000
ROA not after: Fri 02 May 2025 09:05:10 +0000
asID: 212238
IP address blocks: 154.198.16.0/24 maxlen: 24
154.202.27.0/24 maxlen: 24
154.202.29.0/24 maxlen: 24
154.202.30.0/24 maxlen: 24
154.202.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96961 (0x17ac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 09:05:10 2025 GMT
Not After : May 2 09:05:10 2025 GMT
Subject: CN=6808ad4a-4a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:f6:34:8f:8e:11:87:3a:7e:b7:c0:fe:5b:
f8:ab:98:02:d7:ad:47:02:97:cf:07:3c:66:bc:2e:
da:69:9d:68:77:ca:0c:98:4d:b5:9d:0f:49:c1:fd:
bd:7a:61:58:96:50:9b:d3:6d:c8:34:2d:c3:f0:4f:
8d:7c:77:b8:ed:cc:6d:61:51:68:38:13:28:d5:6e:
72:85:99:fa:37:95:12:e8:08:df:b2:8a:03:65:cd:
0b:2f:f9:fd:f2:db:70:b2:e6:ba:cc:49:1a:c8:49:
32:bc:8f:85:b6:03:7f:59:1b:23:c9:1d:06:ae:20:
f5:af:34:71:a3:f8:55:83:f8:73:01:c0:c8:fa:eb:
93:fc:36:2a:57:b8:86:8f:50:b3:a1:74:96:65:b3:
a9:50:7c:d7:e1:c1:b3:bd:62:e3:9e:3a:48:65:9b:
7b:14:4c:3a:2d:23:30:aa:dc:93:ab:29:21:90:12:
2c:80:66:50:b4:4a:90:12:26:8b:48:1d:bb:bc:69:
0e:ea:2f:40:f8:fd:c0:84:ca:99:5b:c1:ed:b6:10:
8d:58:b2:58:4f:b3:16:9d:b4:46:e2:16:30:42:ae:
65:41:bf:a2:7e:b5:16:42:cf:1d:eb:f3:3d:c4:6a:
89:97:46:64:d0:cc:53:bb:8b:df:61:dc:2e:25:3e:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:E6:47:BF:74:2B:7C:56:1A:69:E3:F9:D6:E2:10:7B:71:EF:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/113F297A202211F093302CF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.16.0/24
154.202.27.0/24
154.202.29.0-154.202.31.255
Signature Algorithm: sha256WithRSAEncryption
84:da:a8:39:35:7a:98:38:dd:a7:9d:a7:d4:cf:6a:d7:41:23:
a1:d5:aa:53:b4:20:7d:b1:6b:b5:69:4e:08:04:47:8b:93:61:
d1:ca:02:16:ee:e1:ca:f8:04:eb:70:fc:a4:9e:0e:18:e2:7a:
6d:f9:4b:7c:2e:3a:c8:42:9f:8b:12:39:31:1f:00:dd:45:9c:
51:41:69:1b:a8:38:8b:56:28:29:fe:67:a4:5c:45:9c:9d:85:
a3:98:af:d1:1f:af:af:2b:ba:aa:6c:c6:df:68:fe:fa:86:6e:
ba:5c:01:b6:02:43:90:36:74:e0:1a:cf:a0:d2:12:cc:9e:32:
0f:9e:86:10:23:34:29:c9:84:d5:24:f3:fa:f1:8b:bd:5a:02:
81:18:da:33:f1:64:92:f6:8a:82:42:80:e2:84:2b:6f:e1:5c:
4e:5f:2a:d7:95:8d:81:1b:b4:df:07:aa:2a:1b:5d:d3:d7:3a:
f1:7e:46:34:6e:08:b1:7b:70:8d:95:fd:74:c7:07:ae:c7:ac:
6d:56:6e:d0:81:20:49:6c:8f:f7:8a:9b:11:5e:bb:91:a5:7b:
b3:c5:4e:a5:ba:02:7b:87:7f:7c:61:62:7a:ed:1c:46:6f:ad:
13:87:59:8a:2e:86:a7:28:f1:30:db:4a:cc:08:c4:0a:e0:7a:
57:9b:90:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:21 2025 by rpki-client on console.sobornost.net