Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8835CA1CAC11F0B905EABBDAE4EC9C.roa
File: 3F8835CA1CAC11F0B905EABBDAE4EC9C.roa (raw, json)
Hash identifier: IxjU+Z2eaPrgolXRb7fGkXGPIlZ6gLvlBvL9UTqh0xQ=
Subject key identifier: BC:EC:B1:12:5A:F8:10:17:86:09:30:3A:BC:4E:12:B1:3D:16:45:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8835CA1CAC11F0B905EABBDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 23:24:18 +0000
ROA not before: Fri 18 Apr 2025 23:24:13 +0000
ROA not after: Wed 04 Jun 2025 23:24:13 +0000
asID: 36137
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96770 (0x17a02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 23:24:13 2025 GMT
Not After : Jun 4 23:24:13 2025 GMT
Subject: CN=6802df22-65ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:7c:bd:6f:4e:38:d7:dc:2e:d3:7b:bf:69:
f4:14:bc:85:8a:55:1c:6a:c6:d8:d6:74:b0:ec:b7:
34:1b:98:2f:74:90:be:7a:59:a7:4f:62:1e:64:5a:
df:57:17:ed:63:68:8b:59:d7:a1:9e:ae:db:9f:35:
fc:78:58:f0:b5:f8:79:c5:93:ce:3b:05:ef:2d:61:
1d:0b:e3:af:44:84:10:e9:92:92:5b:9e:5e:45:42:
d6:86:89:b9:d4:ac:ae:24:a0:8e:b6:a1:64:5a:ff:
2c:11:07:95:fa:0a:f4:e4:d0:87:b9:ac:5c:54:a6:
1f:2b:12:59:ff:6b:94:a7:e6:a6:61:9d:55:9e:c2:
bc:03:24:fc:b9:d4:a3:97:6a:1b:b3:15:ab:cc:80:
12:29:01:2d:ff:00:b8:11:0d:37:55:82:4c:7a:c7:
d3:d3:8b:0f:f2:4e:ae:b2:d9:1d:35:4a:25:20:f5:
86:af:71:52:dd:45:76:56:c4:26:0f:11:c0:e5:bd:
5b:bf:c1:3f:a9:7c:9e:d1:b3:a5:30:8b:5d:51:1c:
7d:79:b7:5f:9d:16:95:f7:21:39:3d:fc:e3:7d:ed:
8f:5d:b5:02:79:0d:4d:e1:3e:e8:51:fa:fc:cd:f8:
be:ec:40:23:38:47:6d:76:3c:fe:d7:4b:95:0f:92:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EC:B1:12:5A:F8:10:17:86:09:30:3A:BC:4E:12:B1:3D:16:45:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8835CA1CAC11F0B905EABBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
30:09:b0:a4:c5:01:d0:96:aa:0d:62:fb:f2:1b:09:e1:ed:fa:
e8:e1:61:ff:2b:36:0b:1f:1e:c0:c1:c2:37:b6:28:c9:d3:01:
1c:e0:9d:85:6c:8c:4c:e4:68:72:28:4e:df:44:7c:1e:07:3b:
cd:07:1f:4b:c4:6a:80:03:3e:7c:b0:bc:4c:e2:c8:27:16:77:
ac:e3:e8:c4:48:b5:22:14:dd:8a:9d:44:81:49:dd:6d:ac:f9:
b7:af:4f:ed:4f:64:e7:25:ef:ff:73:35:8b:97:b3:5a:4e:b3:
51:45:2b:11:3d:5f:d6:53:5a:6d:64:48:08:0c:af:e4:8b:b4:
c4:0c:f4:2e:a3:3d:8b:32:f8:6f:35:66:3f:b0:36:b2:75:63:
ff:00:eb:b7:e8:06:8d:e4:c2:5e:85:08:fa:fe:5c:d6:d3:08:
d1:c7:87:9f:a6:b8:21:95:f3:2a:a8:27:c4:e2:0b:8c:ed:ff:
69:a3:3c:1c:b7:f2:27:0b:ea:70:f6:05:9e:fb:3f:9f:f9:6c:
b4:c4:8c:bf:ee:f6:c2:d6:53:4e:ff:f8:7a:5d:3e:cd:55:63:
9e:07:6c:9a:be:88:2a:2e:39:25:f1:2f:82:01:f5:2d:75:5b:
18:2f:a1:ca:20:c1:5a:12:da:10:77:94:d3:f4:68:31:26:1a:
0f:a4:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:11 2025 by rpki-client on console.sobornost.net