Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2440852E1AC711F0B6DB00C66DB8BCC6.roa
File: 2440852E1AC711F0B6DB00C66DB8BCC6.roa (raw, json)
Hash identifier: 7mldejVhNKvSi3607vgbSx9aGYiGDvLVft+WeoeDgHw=
Subject key identifier: 6A:7F:F3:07:1E:01:D9:E2:F7:2E:55:00:AF:A5:49:F3:CD:1B:1D:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01796F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2440852E1AC711F0B6DB00C66DB8BCC6.roa
Signing time: Wed 16 Apr 2025 13:31:46 +0000
ROA not before: Wed 16 Apr 2025 13:31:42 +0000
ROA not after: Thu 15 May 2025 13:31:42 +0000
asID: 57043
IP address blocks: 154.83.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96623 (0x1796f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 13:31:42 2025 GMT
Not After : May 15 13:31:42 2025 GMT
Subject: CN=67ffb142-f047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:4a:93:47:ef:e6:e2:3c:1a:85:8a:5f:b6:
c0:d1:6d:b5:e3:f7:e6:85:e8:a8:9b:0d:e5:0c:79:
a3:4c:8d:16:3f:47:75:76:3d:98:1e:b7:0a:f6:da:
68:2a:b3:ec:72:30:28:54:4a:b4:f0:45:d6:93:ac:
08:e3:ca:a1:d3:2e:ae:54:71:ce:f0:dc:4d:50:bc:
ef:86:c5:2f:19:8a:3c:85:ca:cf:75:77:50:73:9b:
b5:2a:64:a4:ac:d2:4b:08:fe:63:05:37:15:99:6b:
47:3c:82:e8:45:7e:b1:05:5c:7c:05:02:ac:c6:18:
54:4b:ef:90:e5:42:65:30:ba:00:0b:e3:b7:3d:1a:
73:94:e5:0d:ae:be:f1:7a:b4:7d:d0:47:56:3d:b4:
61:d0:94:a8:c0:0b:5f:b6:81:2a:dc:8f:49:e5:2a:
21:2a:c5:e4:e1:f3:46:a6:25:8c:6b:56:b2:61:1f:
e7:0d:c1:c5:0b:f3:0d:28:6f:82:00:69:de:ec:b2:
ee:37:8d:89:11:e2:85:5e:7e:53:a0:46:c7:cd:96:
5a:5e:71:b3:32:ff:7c:1a:82:26:38:d3:b1:c0:b6:
d5:11:dd:39:09:19:20:f5:d4:31:b7:24:92:dd:7d:
af:29:fe:a9:96:c2:78:1e:bf:b1:c5:5c:36:09:1d:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7F:F3:07:1E:01:D9:E2:F7:2E:55:00:AF:A5:49:F3:CD:1B:1D:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2440852E1AC711F0B6DB00C66DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.133.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8a:35:9c:86:df:c2:e3:69:89:cb:8e:83:53:d3:85:ff:0b:
ce:c1:83:3a:4e:6a:4f:e6:02:6c:fa:6f:3c:97:23:0a:97:3c:
26:54:56:91:55:2b:32:ed:69:d6:bd:ea:06:2f:be:f2:db:69:
bb:f0:79:58:1c:e7:85:81:ac:26:3a:02:f3:2c:a2:ba:cd:3c:
0c:b1:98:14:14:b8:4c:69:80:f1:f1:c8:c3:ef:aa:74:68:88:
c9:22:3f:a7:59:f3:86:7e:24:ff:1d:1a:d3:e7:f7:ba:a4:ed:
fa:e3:09:72:9f:f6:3e:4f:10:bd:ed:ac:f2:24:a0:cb:58:17:
be:a0:f3:08:3d:57:bd:b5:37:5b:e7:aa:60:e3:f8:ec:6b:95:
9a:8a:8b:ca:1a:09:b6:58:39:ac:6e:f8:3a:da:97:74:6a:e1:
09:31:3e:cc:18:9c:e5:d5:a0:db:fd:93:05:a5:1a:5e:bc:78:
86:92:2b:9f:22:bf:ee:b6:86:59:35:54:f1:40:c0:50:4a:eb:
ab:2e:f8:1e:99:51:54:5b:c4:6a:03:89:66:74:84:46:ca:c6:
d1:60:cb:5e:a7:75:ad:02:5b:00:45:9c:d2:32:f6:87:65:26:
9a:86:6b:1f:3d:50:21:65:c5:84:06:4e:4c:79:ef:aa:11:7d:
b9:7a:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:29 2025 by rpki-client on console.sobornost.net