Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E82E35E1C4E11F08D3EBFD1DAE4EC9C.roa
File: 3E82E35E1C4E11F08D3EBFD1DAE4EC9C.roa (raw, json)
Hash identifier: cQshKXlETjUX6Iw++hw7Nf05PaZ1I+wFsp+hxuiYWq0=
Subject key identifier: BD:F4:3C:CD:77:F5:6F:01:83:D7:AF:BB:03:35:A7:39:98:9C:20:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017975
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E82E35E1C4E11F08D3EBFD1DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 12:11:23 +0000
ROA not before: Fri 18 Apr 2025 12:11:19 +0000
ROA not after: Mon 21 Jul 2025 12:11:19 +0000
asID: 135377
IP address blocks: 154.82.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96629 (0x17975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 12:11:19 2025 GMT
Not After : Jul 21 12:11:19 2025 GMT
Subject: CN=6802416b-119e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:ef:9d:5c:0a:0d:ba:3c:ad:c5:e0:67:de:
36:ca:7a:81:53:50:3b:cb:96:79:2f:de:a8:6f:d5:
8d:b3:99:b5:72:0f:43:ed:89:2b:4d:d7:9a:68:cf:
95:8f:be:6d:1a:3f:09:5b:7e:c0:42:e9:09:18:45:
0e:dd:2f:0e:ba:23:7c:39:61:28:1a:b6:9d:1b:73:
7a:00:b1:c2:d9:04:4c:ba:bc:68:b9:76:e3:64:9e:
f5:cf:1f:b6:5b:7a:57:43:1b:ee:48:c9:0c:0d:54:
cd:4b:f7:e0:4d:c3:36:a2:62:0c:0f:50:87:2e:25:
bf:c7:32:99:ee:9a:96:43:72:a7:22:51:ce:37:35:
f4:51:ae:42:1c:9c:3b:8f:15:31:eb:32:2e:e1:e0:
c4:a8:32:d8:47:4e:eb:6c:80:98:28:a4:e4:ee:e7:
22:19:fe:e9:f4:85:47:fe:46:d6:67:35:11:6d:9a:
f5:e6:46:40:07:43:ca:23:d1:ea:7f:15:98:1a:35:
79:6b:2a:d4:ee:f2:5b:ab:c5:8d:b6:a0:da:6e:df:
18:4e:0b:71:5f:67:27:f5:ce:34:3c:74:8d:f3:bc:
34:40:87:90:ca:98:ab:62:ed:2e:2a:f8:2b:c7:38:
b6:fa:4a:f4:8c:21:f7:96:88:b0:f3:fd:db:e8:a9:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:3C:CD:77:F5:6F:01:83:D7:AF:BB:03:35:A7:39:98:9C:20:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E82E35E1C4E11F08D3EBFD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.22.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:c5:9a:e4:61:84:ef:b8:66:28:44:08:fc:05:1e:df:1d:98:
72:d8:29:e0:51:83:79:24:39:9a:59:08:ac:d9:56:7f:c4:8e:
74:63:c6:9b:75:15:53:0d:46:6d:9a:ed:77:21:ab:e9:0a:6a:
b7:82:ad:9c:18:54:a4:81:5d:c8:e6:37:bf:7d:60:e2:89:d9:
60:72:be:56:89:de:07:49:d0:b8:b0:46:0b:10:75:2c:9e:20:
ad:fd:46:e0:19:e7:78:97:9b:d6:04:45:b2:3e:f0:02:ca:86:
78:9b:a7:77:56:30:b9:64:31:e3:3b:5f:03:f6:08:e6:c9:24:
51:54:83:ac:29:e7:99:7a:4e:a8:5a:fa:d6:a1:55:2b:c3:91:
c4:2c:7d:9e:2a:8f:ca:2b:ba:d5:1c:8c:71:1d:36:e5:36:1b:
e6:5f:aa:92:70:c8:18:58:a0:92:c7:54:32:75:f3:55:e6:8c:
7f:c4:cc:9b:d7:96:2f:18:8c:36:0e:92:a2:81:8f:d7:55:c7:
e2:61:ac:4b:d1:c9:34:b8:7c:e7:61:77:de:d0:ec:65:00:a7:
25:9e:31:8f:2a:a1:50:2f:e1:da:7f:34:f5:6c:19:a5:6f:0e:
c9:d0:0c:24:34:07:27:4e:d2:dc:aa:ef:1f:7d:4c:1f:a6:23:
30:c3:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:05 2025 by rpki-client on console.sobornost.net