Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/147F39341C6411F08300BDE2DAE4EC9C.roa
File: 147F39341C6411F08300BDE2DAE4EC9C.roa (raw, json)
Hash identifier: y9ka0hKPesLLFBJTedO8a8Rv9R3jkHK2VM7Yn4sWYGQ=
Subject key identifier: 97:FE:D1:BD:44:17:72:03:E7:A7:C8:D7:F4:70:52:49:97:7D:75:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/147F39341C6411F08300BDE2DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:47:42 +0000
ROA not before: Fri 18 Apr 2025 14:47:37 +0000
ROA not after: Fri 25 Apr 2025 14:47:37 +0000
asID: 39600
IP address blocks: 154.95.56.0/21 maxlen: 24
154.202.16.0/21 maxlen: 24
154.202.72.0/21 maxlen: 24
154.206.120.0/21 maxlen: 24
154.207.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Apr 2025 14:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96697 (0x179b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 14:47:37 2025 GMT
Not After : Apr 25 14:47:37 2025 GMT
Subject: CN=6802660e-1832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:48:63:07:ce:00:c7:ad:80:6d:a1:32:63:77:
db:69:ba:b8:7e:f8:cd:84:7b:28:7c:98:cc:36:18:
d3:b9:80:14:9a:0b:d3:64:09:c9:b4:a1:38:bf:7a:
1a:fe:a7:c7:78:07:a3:2b:a1:19:ba:57:50:07:f8:
5e:76:3e:30:9c:65:bf:12:c7:3e:a8:4b:2f:3b:42:
cd:7c:7a:99:a8:43:f3:dd:3b:d3:70:74:fd:98:40:
01:f5:8c:29:8b:41:57:cc:d9:7c:19:d3:a4:f5:61:
61:c8:bf:7a:f1:bd:9b:64:d3:bb:58:12:57:f4:19:
9d:62:02:63:61:a0:23:e3:78:87:85:96:4f:ee:90:
2c:8b:1e:27:9e:c6:9c:53:68:eb:17:42:9a:ed:2a:
9e:28:4e:8e:75:55:23:32:98:6b:ef:50:86:48:e2:
06:66:13:f1:0c:6f:8b:b0:7b:51:05:37:48:dc:d1:
49:a2:8f:31:d2:6c:1d:54:33:7d:0e:33:25:dc:7b:
3d:b5:cf:55:f4:52:74:8d:8a:a2:ed:66:cd:56:ff:
e2:ea:fa:f8:6c:b1:01:05:12:37:af:ea:46:d4:84:
56:b6:ec:80:cf:5e:32:2d:eb:85:0b:78:5f:b8:87:
2c:2c:29:37:3d:3e:75:62:42:e7:d6:f6:b4:ce:6f:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FE:D1:BD:44:17:72:03:E7:A7:C8:D7:F4:70:52:49:97:7D:75:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/147F39341C6411F08300BDE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.56.0/21
154.202.16.0/21
154.202.72.0/21
154.206.120.0/21
154.207.128.0/21
Signature Algorithm: sha256WithRSAEncryption
d4:56:0a:ce:d4:cc:99:f3:4c:0d:08:2d:2c:82:76:89:27:d0:
69:82:e7:5d:24:43:56:0c:07:64:b8:8f:52:cb:6e:a4:5b:8f:
0d:5a:f4:d9:7b:47:28:04:3e:20:a7:14:da:80:0e:29:47:cc:
4a:27:9f:d6:2e:fc:9d:93:4c:3c:ee:62:40:64:b5:a3:13:cc:
5f:46:51:39:82:b2:a4:52:77:13:f2:34:eb:47:38:77:7f:b4:
5f:22:12:d3:31:f9:d0:dd:38:82:4e:28:8c:b6:01:e8:da:42:
ea:b6:f0:65:7c:e9:0e:60:dd:7e:7d:9d:54:ed:e8:30:06:2e:
07:93:c9:a2:e6:76:c4:3a:35:61:56:49:6c:84:1b:9d:86:69:
2a:15:15:ab:8e:d0:28:a5:65:f2:46:f9:18:d1:98:9a:48:77:
0b:61:2b:ab:f9:46:32:2b:fa:bd:c3:f2:5e:40:71:48:80:b1:
c3:1b:76:a6:4a:47:d9:2b:ad:d9:f0:97:66:fa:60:f9:8f:1c:
15:da:09:76:9a:03:57:f5:02:3d:5b:15:0f:ad:6e:59:ea:fc:
91:c8:14:75:59:69:d7:1e:2e:fc:51:e7:24:31:d9:23:95:28:
b7:e0:05:1c:cb:50:4d:44:0c:f2:6b:38:bf:35:d4:82:cd:b5:
fe:a2:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:46 2025 by rpki-client on console.sobornost.net