Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BE7BDC61C6A11F0ACF92C8BDAE4EC9C.roa
File: 1BE7BDC61C6A11F0ACF92C8BDAE4EC9C.roa (raw, json)
Hash identifier: olqaFRvM4HKcwXIks1GiR7jS2ynMG7u6d0DXSweZ2+4=
Subject key identifier: 94:F0:D0:02:67:1F:52:72:63:73:96:3C:15:E7:7C:0E:FD:FE:BC:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BE7BDC61C6A11F0ACF92C8BDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 15:30:51 +0000
ROA not before: Fri 18 Apr 2025 15:30:47 +0000
ROA not after: Sun 25 May 2025 15:30:47 +0000
asID: 29852
IP address blocks: 154.194.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96706 (0x179c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 15:30:47 2025 GMT
Not After : May 25 15:30:47 2025 GMT
Subject: CN=6802702b-024c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f1:3f:8e:ae:b3:a2:4e:6d:bb:d5:21:d1:0b:
c8:00:8c:8a:70:d3:1f:04:4a:b2:12:e5:ef:c7:22:
a3:ae:0b:30:ba:9e:ca:7b:39:ef:f0:8a:be:1d:6e:
c6:8b:01:16:ce:ec:47:94:0a:8c:ed:41:f0:03:43:
c1:29:f5:6a:0e:09:89:b6:70:de:99:ea:97:13:2d:
c0:1d:f2:ee:8a:e0:00:88:d3:09:3d:de:ca:c6:57:
47:8b:e9:bd:39:06:8b:8a:fb:f1:9f:a2:2a:15:7a:
4e:71:c0:f7:2a:02:c2:29:be:c5:df:a5:60:62:7b:
a9:aa:2b:db:c1:71:a6:ac:3d:98:2c:f6:d8:3d:97:
bf:1e:68:00:06:83:bd:45:68:ae:fd:6e:c2:a7:05:
a8:d2:9c:35:2b:d2:e3:b4:b9:20:6d:d5:8a:1b:61:
f9:af:86:c3:02:2a:37:d2:54:18:44:e9:18:f8:6c:
66:4f:b8:f7:b8:9f:5f:1b:b0:50:9f:54:16:31:20:
1d:67:de:eb:b7:c8:31:99:77:c8:d9:fc:33:66:af:
c4:02:71:9b:eb:d3:bc:2e:25:fb:29:66:27:77:f8:
ed:fa:d1:43:47:05:20:92:47:43:7b:d9:ad:3e:d6:
be:ea:2c:2e:83:88:ad:83:99:f9:2b:0b:6b:c0:51:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F0:D0:02:67:1F:52:72:63:73:96:3C:15:E7:7C:0E:FD:FE:BC:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BE7BDC61C6A11F0ACF92C8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.58.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1b:a8:6e:40:33:6f:cd:dc:47:c7:b2:e5:9c:a2:61:e7:61:
bb:78:0c:21:95:08:61:aa:24:a2:c2:80:98:c1:9a:1f:e9:89:
bc:52:39:f6:99:36:16:06:ec:95:b7:82:ee:e5:6b:0f:6a:2e:
f7:dc:6c:1c:bd:e7:fc:51:56:44:ef:cb:b0:a3:65:31:59:73:
a7:56:a9:08:5d:30:74:4f:a8:47:ec:ab:eb:3e:81:c9:91:c6:
82:7b:8d:df:2b:bf:f5:9a:57:79:5f:c9:c3:bb:72:2b:d8:97:
21:74:81:2a:3b:58:94:de:17:d6:e9:cc:ca:18:fc:6a:e8:28:
b8:97:2e:cc:5f:4f:59:cf:bc:bc:68:0a:07:ae:bc:9f:b1:0a:
5a:f7:ac:6a:e6:74:e1:09:de:93:73:97:ca:66:84:7f:36:7e:
ed:31:0d:7f:fe:44:6c:cf:77:78:cf:bf:f3:f7:35:a5:dd:88:
67:96:c5:6e:8c:3d:51:d2:f0:ac:c5:20:ee:94:cd:21:8a:aa:
31:ea:9f:02:15:76:92:2c:4e:9e:11:3c:cc:54:15:e4:8d:2d:
aa:c1:25:c6:16:6a:71:2a:8d:af:f3:61:a2:4a:6d:5f:34:48:
dd:0c:cf:35:6e:b3:a8:21:03:c7:27:7c:2c:3e:ae:9d:15:4c:
a5:25:3b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:14 2025 by rpki-client on console.sobornost.net