Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2442759E108811F0A00BABA2762E951A.roa
File: 2442759E108811F0A00BABA2762E951A.roa (raw, json)
Hash identifier: pffGZ+yTVyX3HKnILiBgpsGzoJym4DW3SMS43Zz1duk=
Subject key identifier: 1F:48:FB:DB:29:08:8D:E5:4C:AF:BA:9A:26:5E:90:83:52:08:EA:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017787
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2442759E108811F0A00BABA2762E951A.roa
Signing time: Thu 03 Apr 2025 12:35:36 +0000
ROA not before: Thu 03 Apr 2025 12:35:32 +0000
ROA not after: Thu 08 May 2025 12:35:32 +0000
asID: 200373
IP address blocks: 154.213.193.0/24 maxlen: 24
154.213.194.0/24 maxlen: 24
154.213.195.0/24 maxlen: 24
154.213.196.0/24 maxlen: 24
154.213.197.0/24 maxlen: 24
154.213.198.0/24 maxlen: 24
154.213.199.0/24 maxlen: 24
154.213.202.0/24 maxlen: 24
154.213.203.0/24 maxlen: 24
154.213.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96135 (0x17787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 12:35:32 2025 GMT
Not After : May 8 12:35:32 2025 GMT
Subject: CN=67ee8098-e2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:1d:eb:b1:0d:fa:ef:88:5a:fe:93:bd:3b:
ac:ee:af:84:20:e5:06:ad:a9:5d:95:df:1a:27:c2:
96:2c:30:0d:de:01:6c:20:56:79:2d:84:31:cc:87:
60:89:02:b6:f2:e1:f9:a7:09:34:58:5a:db:db:85:
16:a8:f9:e7:77:b1:f1:58:15:e7:a9:3e:af:0d:9f:
19:ec:6f:0d:f7:6f:29:4b:8c:25:2c:05:37:1d:76:
ec:ac:61:e4:6b:13:16:09:41:e0:1a:b9:ac:96:f5:
e3:36:07:e2:8b:60:cb:98:c7:84:0f:24:8b:2c:3c:
ed:12:a9:e8:df:d1:b3:73:31:99:6d:c4:6d:cc:a0:
5c:b9:48:5a:8f:71:47:3a:ce:22:88:e9:40:87:f7:
12:67:99:df:ce:08:dc:24:2b:b6:78:35:5f:74:59:
2b:ed:b6:ec:f0:5e:24:c1:48:45:ec:12:73:6f:36:
49:e9:d4:48:46:bb:d5:e6:c3:f9:23:93:83:3f:53:
fb:91:16:80:6f:da:8e:9c:f9:e8:a3:ce:49:02:04:
f9:b6:0b:3c:be:af:af:c3:62:fc:6d:d8:25:da:ac:
3c:a6:7c:8b:60:f9:28:dd:d9:ff:ec:04:ca:2e:c5:
1c:7f:5b:b8:d5:d2:2e:21:53:c8:d5:d6:aa:cf:14:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:48:FB:DB:29:08:8D:E5:4C:AF:BA:9A:26:5E:90:83:52:08:EA:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2442759E108811F0A00BABA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.193.0-154.213.199.255
154.213.202.0-154.213.204.255
Signature Algorithm: sha256WithRSAEncryption
be:06:a1:ff:63:17:3b:60:b2:3d:42:62:b0:a3:00:ab:98:48:
2e:da:3d:e9:1c:61:26:e0:14:5c:2a:a1:3d:e7:21:a9:2f:36:
f5:62:14:d1:a1:10:a0:61:1a:45:db:92:ed:86:f8:d2:58:ac:
5e:b7:53:4b:c4:4e:f7:7d:cd:12:46:29:08:42:e1:80:8f:af:
80:45:bd:00:7c:22:a7:58:ff:0e:5e:5d:91:9e:ec:12:d3:cf:
67:c4:35:64:54:2f:09:8b:57:93:d8:bc:20:ef:d3:60:9f:b9:
85:5d:e4:bf:d2:f1:ec:72:f7:ff:f6:82:dd:24:d3:eb:60:e5:
04:67:17:65:0d:71:ee:ee:fd:45:51:1d:d7:48:60:a7:a0:b6:
ad:67:ec:aa:66:6d:0c:d1:d0:b1:5e:fa:60:00:b6:bd:8e:aa:
52:35:e9:ab:d3:c0:8b:4e:a9:fa:8d:68:48:0c:55:ac:d8:3c:
e8:5e:b2:f4:e7:4f:97:2b:42:61:b3:2a:e4:a8:1c:14:e8:f5:
ce:8d:eb:74:4d:74:5c:c3:a9:bf:80:93:e8:f1:b0:33:00:ff:
37:c2:1c:cf:ac:68:db:f7:ea:a3:fc:97:cc:3f:df:6b:7b:7d:
f3:d6:b6:67:20:b1:cf:9a:4f:97:b4:91:69:84:97:b1:11:03:
e7:29:70:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:25:47 2025 by rpki-client on console.sobornost.net