Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/447A89B2107611F084C3ECB5762E951A.roa
File: 447A89B2107611F084C3ECB5762E951A.roa (raw, json)
Hash identifier: fUZQujKOdzqJSqGmqTi8dXR2vlPkqlGzoeZ6V4jaaOU=
Subject key identifier: 8A:D5:77:51:C2:2D:25:33:A8:D1:14:53:74:36:AC:21:E2:02:E0:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017767
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/447A89B2107611F084C3ECB5762E951A.roa
Signing time: Thu 03 Apr 2025 10:27:39 +0000
ROA not before: Thu 03 Apr 2025 10:27:35 +0000
ROA not after: Tue 03 Jun 2025 10:27:35 +0000
asID: 142403
IP address blocks: 154.209.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96103 (0x17767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 10:27:35 2025 GMT
Not After : Jun 3 10:27:35 2025 GMT
Subject: CN=67ee629b-f1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:5f:a7:e2:6e:c3:64:05:01:cb:bf:54:3f:
9a:35:78:c4:3e:71:7c:49:a1:76:b7:cd:be:0c:d8:
f4:dd:27:07:ff:05:df:34:cd:d9:65:b2:15:ed:e4:
fa:c7:36:55:b8:06:19:08:58:b5:2c:3d:2b:2e:18:
ce:5f:59:76:21:b8:f5:2e:37:97:01:1c:c7:d0:59:
80:63:f6:ed:60:11:b2:0b:52:0a:fc:f5:fe:71:05:
b2:65:ec:40:08:c4:2f:50:df:ef:71:70:fb:15:af:
e7:c2:56:83:95:28:b4:db:8c:dd:58:2d:c3:8f:8c:
75:b6:41:1b:e4:c3:45:a4:40:1f:4c:0e:b0:18:cb:
fa:58:fe:53:cc:f7:f2:25:f9:e1:b7:06:e1:ce:8a:
f9:e0:d6:54:39:87:08:48:89:dc:43:75:dc:fb:dc:
67:db:24:a2:c6:7f:61:3e:81:b1:81:f5:fd:ae:1c:
2c:03:3e:ff:bd:8b:7b:ec:8a:61:29:28:cc:ba:7b:
0b:7a:1e:3d:ab:2a:17:e8:15:eb:24:a4:eb:f6:6c:
5d:37:20:02:b0:d7:f8:aa:29:cf:5d:1e:fd:bc:de:
c6:c8:67:54:5f:51:ec:ad:14:90:f9:69:15:03:1b:
39:88:33:5d:60:e2:ed:37:dc:a5:70:cd:47:73:09:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D5:77:51:C2:2D:25:33:A8:D1:14:53:74:36:AC:21:E2:02:E0:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/447A89B2107611F084C3ECB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:51:c2:c0:95:74:7a:a7:b6:58:a3:8c:80:f3:f1:78:1b:d0:
44:ec:44:71:dc:70:09:03:cf:d9:80:43:e9:b9:d6:a4:db:67:
88:7a:a7:8d:50:b6:8a:14:40:e4:78:a0:6f:4a:a0:61:99:28:
8a:b1:ff:d4:99:b2:b0:38:11:37:ff:dd:46:36:e8:a2:d8:6c:
ce:cb:ec:3e:63:f5:a1:90:6a:35:c0:7f:99:04:6c:55:23:45:
13:26:ef:c7:a4:fd:6a:53:f1:38:00:83:16:fb:6a:51:dd:3b:
39:90:b3:f1:6f:8c:45:00:06:04:a6:37:2f:a6:d8:6b:b6:78:
d3:18:76:91:15:27:bb:0f:9e:25:1e:f3:41:68:1b:c3:8f:86:
76:b4:41:2e:8e:0b:78:13:71:24:ea:10:72:87:ed:bd:3f:4f:
4b:3d:3b:3a:43:98:cf:c2:0d:2d:8d:c8:f3:02:78:09:86:53:
b2:44:1d:eb:28:1c:aa:f6:be:50:a2:8f:71:5d:0d:e2:5c:cf:
6e:0b:4e:16:75:c7:aa:d9:64:0d:06:53:cc:94:11:ac:39:52:
eb:a6:f1:b2:48:18:47:2a:3f:54:c3:66:23:a8:cf:b9:42:75:
c4:f1:2f:ff:19:a2:b8:c0:8f:04:03:42:71:8f:9e:a6:94:78:
b8:49:d0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:40:06 2025 by rpki-client on console.sobornost.net