Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35FEDDB2211911F0A613E5DEDAE4EC9C.roa
File: 35FEDDB2211911F0A613E5DEDAE4EC9C.roa (raw, json)
Hash identifier: bJMVGdjI5tBHwrFa+M+3jj0yL8KDHKhXkQiwbaZIRcI=
Subject key identifier: 55:B8:CF:8F:03:18:CC:69:23:77:EE:EC:3F:26:34:80:70:14:53:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017AE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35FEDDB2211911F0A613E5DEDAE4EC9C.roa
Signing time: Thu 24 Apr 2025 14:34:22 +0000
ROA not before: Thu 24 Apr 2025 14:34:17 +0000
ROA not after: Sat 03 May 2025 14:34:17 +0000
asID: 39600
IP address blocks: 154.94.33.0/24 maxlen: 24
154.94.40.0/24 maxlen: 24
154.94.51.0/24 maxlen: 24
154.94.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96995 (0x17ae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 14:34:17 2025 GMT
Not After : May 3 14:34:17 2025 GMT
Subject: CN=680a4bee-e604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:c2:c9:1f:ac:56:27:1e:61:98:c5:56:6a:
b8:30:3f:35:f9:75:74:dd:bc:f1:a3:ff:05:74:bc:
8d:4a:af:eb:67:be:5b:bd:12:78:b3:fd:80:92:4d:
03:37:93:4f:8d:eb:92:7a:68:ea:e2:b3:e6:60:10:
af:92:4e:6d:12:2d:b7:78:e9:6e:26:c8:2a:9f:4b:
c1:c2:37:2a:d1:12:a9:3d:dc:3e:2e:2e:eb:5b:c0:
c8:ba:13:2d:f9:56:62:df:57:b2:c9:be:53:2b:41:
f3:68:22:41:24:09:df:47:34:89:37:cb:b3:1c:17:
86:36:af:2d:5b:f9:4c:94:91:1f:fa:77:77:4c:78:
4a:55:38:9f:d5:44:d4:b1:47:6e:93:cf:39:80:40:
75:b6:b2:74:97:48:67:08:cb:73:e5:81:20:00:f3:
35:27:c2:69:29:9f:2b:d6:d4:3e:b6:df:28:15:8d:
e2:8b:4a:12:98:ac:22:05:e7:e8:f9:49:b2:38:42:
f5:50:7b:d8:f0:fa:e9:28:3a:cd:ea:1e:e1:b1:69:
5a:91:b6:a1:9c:0b:7b:43:af:50:88:8b:80:27:a2:
2f:56:be:02:e4:c0:94:4d:f5:1a:43:67:30:d9:9c:
c2:82:6c:b0:d8:ca:ce:37:f7:c3:e0:f7:25:2b:22:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B8:CF:8F:03:18:CC:69:23:77:EE:EC:3F:26:34:80:70:14:53:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35FEDDB2211911F0A613E5DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.33.0/24
154.94.40.0/24
154.94.51.0/24
154.94.59.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d8:70:a6:68:ed:99:69:80:03:48:83:8b:2f:90:78:a6:30:
39:dc:de:1f:c6:16:38:91:df:51:fc:04:e2:10:db:1c:d3:e9:
f2:d4:42:b4:57:2d:4a:36:d5:2d:11:6a:7f:24:70:67:3b:de:
34:ec:3e:b4:0d:b3:9e:16:13:2e:dd:07:3e:92:7c:16:dc:c8:
80:ba:2b:97:73:31:60:24:11:dd:a7:ca:7e:df:c9:bb:ed:4b:
fe:3c:d0:52:13:85:aa:d6:11:ad:0d:c4:51:ad:6d:8b:cc:35:
78:28:dc:db:d9:a0:e4:ab:4f:c3:41:4f:7a:cc:f5:39:8d:ed:
0b:6b:92:51:19:85:32:c9:b7:50:04:09:b4:14:4b:36:20:8c:
af:92:5a:a4:91:b4:ef:26:1f:e6:7b:98:bd:58:12:bd:91:51:
91:7d:48:84:d2:24:f4:8c:ba:d4:9c:a3:10:e1:93:f2:96:4a:
8d:38:75:32:47:ad:43:40:85:f8:36:cf:b9:6e:fd:ec:cd:cf:
52:42:5e:65:96:72:7c:5d:19:a9:f3:46:e3:df:c8:4c:c6:b2:
c2:e2:a3:16:14:25:5f:06:f3:92:29:04:d3:d8:f5:0e:ad:71:
34:f6:47:1c:98:34:91:96:99:af:97:2c:5c:f8:63:4f:65:8b:
7b:6e:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:59 2025 by rpki-client on console.sobornost.net