Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DA33F8A152211F08BAD9C0A6EB8BCC6.roa
File: 2DA33F8A152211F08BAD9C0A6EB8BCC6.roa (raw, json)
Hash identifier: 6+qTVA5UFVFzALj0TcmbFTDlQRdYzRiGfD+HLhTGzI0=
Subject key identifier: 34:EC:9D:7C:C7:B4:7F:58:8C:2A:AB:28:57:C7:A7:A3:23:81:74:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017898
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DA33F8A152211F08BAD9C0A6EB8BCC6.roa
Signing time: Wed 09 Apr 2025 09:08:19 +0000
ROA not before: Wed 09 Apr 2025 09:08:15 +0000
ROA not after: Thu 15 May 2025 09:08:15 +0000
asID: 203020
IP address blocks: 154.201.37.0/24 maxlen: 24
154.201.38.0/24 maxlen: 24
154.202.91.0/24 maxlen: 24
154.202.101.0/24 maxlen: 24
154.202.103.0/24 maxlen: 24
154.202.104.0/24 maxlen: 24
154.202.106.0/24 maxlen: 24
154.207.54.0/24 maxlen: 24
154.207.59.0/24 maxlen: 24
154.209.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96408 (0x17898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 09:08:15 2025 GMT
Not After : May 15 09:08:15 2025 GMT
Subject: CN=67f63903-59ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:7a:7d:52:3a:e8:85:24:01:fa:fc:b1:ec:
cd:44:30:4f:c2:9e:84:7e:4f:c7:1b:fb:e0:87:fa:
79:97:56:80:4b:34:f5:bf:dc:55:69:f2:d8:ba:1b:
91:84:05:0f:84:68:ba:14:29:90:59:ef:95:53:af:
60:13:ac:d4:97:e3:24:55:35:4b:2b:94:35:26:65:
9c:d3:4e:26:a3:e7:dc:3d:1f:8c:5c:30:d0:e7:07:
83:30:ba:c6:e2:c2:c7:b3:cd:7f:7d:f2:47:32:e9:
8e:7b:2f:5e:30:ec:f5:f2:74:26:11:78:30:3a:eb:
ba:0b:21:bf:51:30:ac:1e:9e:65:f6:58:3e:0e:17:
ec:6c:a0:c3:5c:6a:f6:b7:4c:bd:7d:f3:44:d8:88:
e2:50:9a:3e:37:44:ff:b0:8d:08:51:b1:91:f3:c7:
2a:4b:38:5b:63:8b:fe:91:f4:ed:0d:15:bd:da:d4:
f5:e0:d2:4a:4d:a5:ed:62:ca:34:ca:7b:7d:a8:f4:
f2:27:00:08:a1:56:96:54:fd:94:8d:b0:9a:f2:e7:
5c:ba:b8:a9:ba:f4:85:a2:50:aa:38:39:cd:bf:9a:
e3:83:04:5a:1b:ce:6d:39:f6:c1:33:79:96:88:4c:
23:68:7f:fa:fa:be:dc:96:28:54:6b:c3:81:e8:e1:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EC:9D:7C:C7:B4:7F:58:8C:2A:AB:28:57:C7:A7:A3:23:81:74:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DA33F8A152211F08BAD9C0A6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.37.0-154.201.38.255
154.202.91.0/24
154.202.101.0/24
154.202.103.0-154.202.104.255
154.202.106.0/24
154.207.54.0/24
154.207.59.0/24
154.209.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e6:4f:26:d9:e0:8f:94:df:04:37:2d:59:ba:e9:cf:15:df:
af:4b:d9:36:59:d2:15:4e:f4:8f:b8:fe:56:28:8e:d7:fa:e7:
ba:87:84:66:8f:0b:42:27:7a:c7:d4:72:ae:35:c2:e7:7a:8e:
76:9e:50:e1:5e:9f:2f:b4:a0:36:a5:2b:af:d7:42:9c:24:7b:
3e:7c:e6:f9:75:ff:47:64:4d:76:8d:e0:13:3b:87:ae:69:f1:
92:84:96:93:df:54:fe:34:e1:5a:ca:06:fa:69:85:70:c0:b4:
d0:07:d1:15:d6:0e:d8:41:c8:9c:69:9a:36:23:0a:e1:b5:c2:
25:7a:23:25:31:36:fa:26:70:75:b4:16:40:64:a7:45:46:fb:
df:e1:ad:62:9f:64:c4:cf:66:06:b1:69:ef:ef:48:0c:8f:00:
70:f6:1d:7d:47:93:42:66:5e:99:87:e7:c6:00:48:03:1e:d6:
c9:37:f4:f0:4f:88:56:75:50:9a:4d:34:64:ac:5a:af:92:c8:
82:b2:cc:c1:e9:79:7d:ee:70:19:0f:28:ae:f7:cc:bb:b4:7e:
de:ef:a9:94:80:ce:25:ff:ff:b8:be:ff:45:e4:70:28:0d:cf:
e4:50:ab:a6:e1:c6:7f:45:33:9d:fd:29:c8:02:8f:73:17:86:
5e:1e:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:21 2025 by rpki-client on console.sobornost.net