Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B8218815DD11F09AC67DEF6DB8BCC6.roa
File: 13B8218815DD11F09AC67DEF6DB8BCC6.roa (raw, json)
Hash identifier: Or/DV5zQotlNR0n2tC1ZAZ04roLNVPKUUDzrMgPcrec=
Subject key identifier: DF:70:2B:18:7E:8B:FD:0C:92:34:6E:27:90:AE:79:21:83:27:E5:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B8218815DD11F09AC67DEF6DB8BCC6.roa
Signing time: Thu 10 Apr 2025 07:26:12 +0000
ROA not before: Thu 10 Apr 2025 07:26:05 +0000
ROA not after: Sat 10 May 2025 07:26:05 +0000
asID: 57043
IP address blocks: 154.222.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96423 (0x178a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 07:26:05 2025 GMT
Not After : May 10 07:26:05 2025 GMT
Subject: CN=67f77294-d588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:46:1a:86:4f:13:86:27:ca:39:d1:7f:4f:
4b:d4:68:d5:26:f1:59:c9:d4:48:7c:4c:3c:f6:e3:
03:1a:60:44:97:92:4d:80:50:cf:f9:ad:f9:5d:22:
49:a8:80:03:d3:68:2b:df:c8:b3:c8:fb:83:09:67:
b9:62:a1:cb:bb:ba:34:d0:6d:03:9f:c9:90:14:e1:
be:78:84:d0:70:db:83:dd:53:e5:fa:2a:65:32:7e:
90:1d:49:8e:18:85:4e:88:0a:28:9f:95:fd:0a:d9:
a5:e8:5f:ef:39:b2:68:b6:8f:23:d6:15:e0:8f:39:
6a:e1:c0:d4:1e:87:15:a3:43:a7:ab:85:ec:12:1e:
a8:17:05:9f:5e:77:13:fd:28:c2:ee:56:9d:b1:ba:
b7:b1:32:e9:8c:c1:5f:4f:89:e3:01:4a:de:02:5f:
6a:6c:34:86:26:3e:49:35:27:5b:5f:28:15:99:1e:
88:3b:af:eb:27:dd:cf:85:7b:ac:80:06:f0:ed:d1:
74:c7:44:70:32:09:e5:01:c8:27:b3:f4:b3:a7:0d:
c8:52:1f:97:48:d2:d9:48:66:bd:4e:98:db:52:5a:
40:07:2c:9e:e7:47:bd:89:e5:19:d7:ec:52:00:4c:
b5:af:df:54:45:3c:3e:dc:a7:4c:c5:e4:4c:2b:62:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:70:2B:18:7E:8B:FD:0C:92:34:6E:27:90:AE:79:21:83:27:E5:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B8218815DD11F09AC67DEF6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:28:2a:68:c8:14:d7:73:9e:a9:f9:9e:8f:ff:77:93:17:28:
0f:e0:d6:cc:65:48:0e:b2:41:18:c4:8e:8f:73:22:85:7b:d6:
9c:31:a3:6c:f5:94:8c:ac:77:80:92:c8:11:ad:8e:2f:d5:c2:
16:90:5d:9f:c3:38:e6:69:e5:37:79:a7:e2:7e:6b:c3:f7:fa:
73:80:20:ea:42:5a:cf:dd:c5:52:51:35:7b:eb:67:95:85:ed:
93:7b:2b:ce:87:71:b6:04:0f:5c:3c:09:dc:47:db:6f:e9:01:
ad:4a:87:4c:74:fa:c6:2b:ce:c7:58:cd:21:df:f5:c5:c9:79:
9b:f0:09:c5:b7:42:a1:68:0b:8e:dc:bb:eb:da:6a:40:46:b4:
95:40:f1:c1:52:af:42:1f:9c:05:19:12:23:64:95:ae:9c:9f:
4a:be:6a:ec:14:25:cf:b8:ac:c9:d4:df:45:e7:e0:aa:b6:85:
89:8b:cd:db:b2:6d:fe:67:47:9d:30:f4:6d:9e:96:88:ae:98:
2f:66:ca:04:16:bf:61:75:5a:60:69:a7:17:69:a5:09:03:40:
1a:59:1c:9d:ec:08:88:85:11:69:ea:a3:06:44:35:07:5c:a6:
24:a5:26:a2:39:7b:b3:5b:41:ab:1c:05:25:58:b9:62:aa:b2:
56:bf:39:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:22 2025 by rpki-client on console.sobornost.net