Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/159847EA1E8311F0A6CEA499DAE4EC9C.roa
File: 159847EA1E8311F0A6CEA499DAE4EC9C.roa (raw, json)
Hash identifier: dJ4v0zhTbZ0wUie5kSnfqejYzdvGwge31OlvuQGd9YQ=
Subject key identifier: B5:ED:D7:51:CE:4C:B0:66:26:A8:E9:30:21:52:3D:B6:11:F6:C7:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/159847EA1E8311F0A6CEA499DAE4EC9C.roa
Signing time: Mon 21 Apr 2025 07:34:40 +0000
ROA not before: Mon 21 Apr 2025 07:34:36 +0000
ROA not after: Tue 27 May 2025 07:34:36 +0000
asID: 57043
IP address blocks: 154.199.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96837 (0x17a45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 07:34:36 2025 GMT
Not After : May 27 07:34:36 2025 GMT
Subject: CN=6805f510-b860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:00:50:44:05:8a:66:e5:6b:c7:d4:2c:9f:
56:db:49:a1:27:e2:0b:a3:b7:8d:46:b3:80:bb:fc:
26:98:5a:ff:be:e6:dc:14:62:54:97:03:4c:4b:57:
8a:93:bd:9b:44:39:24:04:dd:14:2d:fb:45:38:1b:
8a:62:77:40:2d:26:84:1c:c2:e0:51:14:79:ba:8e:
6a:20:9d:05:4a:57:3d:4d:0c:94:b8:98:37:3e:5b:
2c:96:bc:fe:3c:41:46:21:c9:b8:4b:cb:5c:da:22:
5d:2b:84:2b:21:a8:7f:76:6b:0c:3c:f9:33:89:1b:
cf:a7:f2:04:8d:05:ab:8a:fb:f3:93:88:0d:6c:8d:
63:95:13:5f:61:3b:09:9b:2e:47:c3:5d:54:8d:ce:
b5:07:d8:ea:6b:b9:52:04:b4:60:87:e0:57:11:b9:
a6:f3:a3:d5:4d:0b:ca:74:24:9f:d7:97:6c:58:51:
30:75:54:5d:08:6c:34:79:0a:c4:4b:c8:5f:90:50:
04:a1:ab:9b:e6:24:45:35:13:5a:42:70:3d:87:00:
54:db:e8:af:31:e1:1b:43:91:dd:97:61:c1:9f:a4:
b3:cf:97:9e:82:6e:1a:46:8c:74:22:22:47:a3:3d:
5b:bc:8f:46:44:41:a7:d4:40:c8:16:bb:ed:f7:f1:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:ED:D7:51:CE:4C:B0:66:26:A8:E9:30:21:52:3D:B6:11:F6:C7:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/159847EA1E8311F0A6CEA499DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.30.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:cf:e2:c4:39:8b:e3:4e:2d:85:ce:bf:86:99:bf:0e:96:90:
3a:1f:77:63:29:7b:b9:55:65:e6:c7:2f:25:de:8d:e0:04:56:
a7:31:ad:0a:9b:5a:0e:25:4d:76:68:66:d0:a1:3c:2b:93:0d:
79:b9:c5:f1:0f:39:cf:97:ee:1e:db:5c:00:74:d7:c9:80:12:
da:a0:90:67:16:d8:85:5f:1c:20:3f:50:7f:56:ee:c1:c6:6a:
73:20:50:f5:a0:ed:43:e6:f7:4d:0a:c9:93:4a:b7:0a:36:08:
27:46:e9:dd:87:62:75:8f:ea:84:5e:00:96:9d:82:c8:d0:f1:
ad:c4:85:e6:04:d3:86:01:b4:95:3c:e8:b7:0e:48:49:88:d1:
05:69:67:b5:f1:06:0b:65:8b:7f:0d:1f:2e:64:79:29:b9:35:
e0:87:b8:e1:99:84:73:36:98:a2:50:29:e4:79:de:5c:5d:47:
ce:70:5d:54:b8:0d:7b:79:90:00:6d:de:1e:e0:3d:a1:ec:93:
16:65:4a:b1:f7:3f:48:23:8f:5f:f8:05:14:05:d1:b1:7e:56:
70:5b:40:a6:f3:27:76:d9:f4:24:53:2f:3d:0a:33:dd:0b:79:
ba:80:3c:21:e0:a4:b4:f8:a0:54:ea:0b:28:d5:77:52:02:e1:
f8:c8:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:23 2025 by rpki-client on console.sobornost.net