Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D498426202111F0B7EE40EADAE4EC9C.roa
File: 3D498426202111F0B7EE40EADAE4EC9C.roa (raw, json)
Hash identifier: MViGr2xooShJ6OG98G2f0HdChwfmAFEzkju9rNZCCvE=
Subject key identifier: D0:56:6B:20:05:03:C2:BC:D6:A9:6C:7F:EA:4D:A6:4B:8F:C4:EE:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017ABF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D498426202111F0B7EE40EADAE4EC9C.roa
Signing time: Wed 23 Apr 2025 08:59:19 +0000
ROA not before: Wed 23 Apr 2025 08:59:14 +0000
ROA not after: Fri 02 May 2025 08:59:14 +0000
asID: 5065
IP address blocks: 154.198.20.0/24 maxlen: 24
154.198.21.0/24 maxlen: 24
154.198.22.0/24 maxlen: 24
154.198.23.0/24 maxlen: 24
154.205.49.0/24 maxlen: 24
154.212.20.0/22 maxlen: 24
154.212.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96959 (0x17abf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:59:14 2025 GMT
Not After : May 2 08:59:14 2025 GMT
Subject: CN=6808abe7-10fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:b7:f6:88:c5:df:3e:89:d5:4d:f0:e1:20:
df:64:f4:d7:f1:59:c5:8b:32:1e:12:a8:1b:02:ed:
9b:27:96:e7:45:b2:3b:19:35:b1:c7:ee:7a:82:b7:
4c:41:49:23:d1:ac:bc:63:d4:85:0a:cc:7e:c4:45:
1f:f9:98:38:19:b7:45:fe:a6:f3:9b:e1:86:e9:9c:
9a:fe:73:76:de:fc:9d:21:38:fe:40:ec:e4:d0:c7:
4b:5a:d2:c3:41:06:54:fa:61:b0:02:b2:b6:4f:bd:
55:90:9f:e9:8b:41:07:a1:cb:38:ef:93:07:39:ac:
3f:c2:c9:e7:9b:30:ab:b5:7e:42:dc:7c:09:de:ec:
d0:26:dc:fd:ed:a5:1f:70:c6:d3:13:d5:e8:6e:e5:
6d:c5:81:7b:0c:7d:13:ea:42:b0:86:46:d4:f8:95:
ad:d2:34:a0:7a:bc:ed:02:ac:70:70:65:59:40:60:
eb:31:a5:fc:6d:f7:3b:4e:44:10:2e:9c:21:b3:3f:
d3:66:e0:58:ff:d9:93:33:12:d8:01:d6:34:45:d0:
ae:66:d7:d4:4a:dd:71:a7:f7:30:e6:04:37:c2:64:
28:e4:45:41:4b:ae:2a:bb:3e:75:90:15:fb:03:9c:
cc:8f:c1:a0:fc:ee:3f:bb:b8:f0:90:fb:56:ca:4e:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:56:6B:20:05:03:C2:BC:D6:A9:6C:7F:EA:4D:A6:4B:8F:C4:EE:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D498426202111F0B7EE40EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.20.0/22
154.205.49.0/24
154.212.20.0/22
154.212.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:32:66:47:f5:a4:3c:2f:88:54:9e:c5:f7:f4:98:09:1a:e4:
8c:bd:c6:55:94:42:c6:10:c2:57:f7:d5:13:86:4c:80:e3:37:
e4:65:67:c9:66:0f:e3:fe:7a:f8:d4:3f:81:3d:56:62:f1:3e:
38:56:61:45:ae:cd:15:dc:58:69:0c:3e:1c:5c:e9:dd:c7:75:
9e:5e:98:77:d7:24:1a:89:0b:b9:fb:cd:70:53:a9:12:92:3d:
cf:e9:9c:44:b8:98:0c:6d:65:d2:14:69:b3:07:02:b2:ac:e3:
56:6f:8c:d5:11:bf:59:83:cc:7a:49:d7:46:c9:16:68:a0:9c:
16:a7:97:4b:c9:e0:bc:de:ad:6b:94:b0:db:2f:cb:7a:5f:1b:
40:ac:6b:df:89:36:c1:92:0d:65:74:a6:25:90:9d:43:65:17:
be:27:24:0b:53:e0:0a:c3:5c:77:ea:ef:d9:5a:4a:d2:cc:1a:
4c:8f:a2:9d:e0:f9:1b:82:b3:07:b8:25:c8:2c:6a:e1:0b:ef:
71:bb:50:7a:2f:db:d8:0f:82:5e:b0:69:a9:17:6f:b1:1a:b3:
bf:d1:97:38:46:52:ce:7b:67:95:38:15:ec:83:c0:f5:ca:dd:
5a:66:82:03:04:4d:10:84:45:ca:12:db:96:c6:f1:07:59:fc:
4c:18:34:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:38 2025 by rpki-client on console.sobornost.net