Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3561413C15E911F0887732BE6DB8BCC6.roa
File: 3561413C15E911F0887732BE6DB8BCC6.roa (raw, json)
Hash identifier: z3ql70GlY0itJhXSsvnQ86Ye4JwXH/PTpM2HY1GOLls=
Subject key identifier: 2C:C6:68:EA:A4:30:24:94:5A:BD:D9:C9:10:BF:6E:96:65:2E:C5:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3561413C15E911F0887732BE6DB8BCC6.roa
Signing time: Thu 10 Apr 2025 08:53:02 +0000
ROA not before: Thu 10 Apr 2025 08:52:58 +0000
ROA not after: Thu 15 May 2025 08:52:58 +0000
asID: 54801
IP address blocks: 154.81.136.0/24 maxlen: 24
154.81.166.0/24 maxlen: 24
154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96433 (0x178b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 08:52:58 2025 GMT
Not After : May 15 08:52:58 2025 GMT
Subject: CN=67f786ed-05b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:a6:87:7b:b0:85:ea:03:73:60:6e:fb:26:
ab:4d:34:96:bf:76:9b:22:c4:41:70:ee:5f:de:28:
1c:72:60:cc:2b:a5:a4:30:57:1b:ef:4b:12:2b:8a:
58:e0:16:e8:c4:ec:64:e1:f8:1b:94:76:c9:28:66:
4e:16:b9:97:91:c0:dd:8f:15:b2:0f:77:99:0f:ba:
18:31:ba:70:ff:8d:1a:39:f6:af:7e:10:da:d0:fb:
17:40:43:55:1b:72:b8:1e:be:86:12:e5:53:90:74:
67:81:01:e6:84:bb:3f:ab:01:72:09:00:49:95:93:
0f:73:a1:f6:51:68:0c:fa:c0:86:f2:e2:83:6f:cf:
27:48:c1:2f:0b:d9:db:97:1a:d0:08:73:f3:53:77:
b4:d0:f8:13:14:86:ca:b6:b7:60:28:ae:b8:56:d5:
1c:3d:a8:9e:f8:56:4c:ac:3a:a8:b1:8c:b0:c8:2d:
a1:c4:cb:eb:2c:06:fd:39:79:52:95:ca:63:56:22:
83:93:27:cc:84:4b:d8:3a:b5:54:12:40:04:15:fd:
50:d3:cc:e0:7e:8a:42:20:65:7f:b8:97:a2:d9:36:
be:98:82:fb:98:94:4e:aa:4a:b8:fd:be:94:b6:5c:
fe:12:8d:c0:11:ae:0f:13:e3:a6:92:5b:93:2f:2d:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:68:EA:A4:30:24:94:5A:BD:D9:C9:10:BF:6E:96:65:2E:C5:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3561413C15E911F0887732BE6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.136.0/24
154.81.166.0/24
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
154.83.209.0/24
154.83.211.0/24
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
92:eb:bf:8e:86:98:bc:17:17:43:0d:62:6e:24:64:5d:68:3d:
e9:98:85:39:f6:6e:13:7b:8b:40:87:50:44:bc:c3:5e:04:e8:
3c:ec:be:53:14:a9:72:87:38:3b:6d:74:8b:d8:3e:ff:d6:fb:
46:d4:2e:96:a4:70:c1:43:c9:c8:46:29:f2:55:95:1f:4b:a4:
17:16:0c:48:74:f6:15:91:36:c4:4f:6c:b3:22:99:59:30:9f:
6e:2d:59:b0:e2:95:20:77:f6:fc:cc:fd:2c:3f:b1:ee:52:b7:
6e:7c:37:00:e8:63:4e:92:9b:e8:bf:82:bd:d6:41:1c:b4:0c:
58:e0:42:c7:ef:4a:1c:64:74:dc:2b:9f:33:38:0d:48:46:ba:
62:e3:27:c9:77:93:b1:1b:b2:b3:e1:45:a8:51:3a:15:fb:05:
72:b7:39:7a:5e:fe:10:ea:0d:f5:6b:09:90:0a:79:a9:ee:bc:
11:08:36:43:f6:eb:b6:f1:2e:d6:12:c8:e9:f2:a1:4d:35:1c:
7f:ad:47:26:58:ed:d5:66:f0:9b:30:e3:92:26:34:50:35:bf:
6b:1e:10:d9:43:b9:c6:2a:2e:6f:c6:56:c0:c8:29:4c:e5:ca:
a7:fa:f8:74:d9:85:02:5d:d1:ea:84:90:4a:36:a6:75:c5:2e:
b2:c1:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:17:37 2025 by rpki-client on console.sobornost.net