Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E70596811F411F0B2ED2E46762E951A.roa
File: 4E70596811F411F0B2ED2E46762E951A.roa (raw, json)
Hash identifier: kYu52msNR8hwrGehN6Ylg8p9akxSPb5MqExv40wiVCg=
Subject key identifier: 37:B7:C6:4F:E8:C1:BA:76:38:F3:65:B6:46:51:67:B5:F3:CE:F1:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E70596811F411F0B2ED2E46762E951A.roa
Signing time: Sat 05 Apr 2025 08:02:23 +0000
ROA not before: Sat 05 Apr 2025 08:02:19 +0000
ROA not after: Sat 10 May 2025 08:02:19 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
154.212.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96209 (0x177d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 08:02:19 2025 GMT
Not After : May 10 08:02:19 2025 GMT
Subject: CN=67f0e38f-6e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:63:26:fe:d5:55:34:5b:01:20:5e:ac:b8:
49:d9:f9:22:9e:90:75:18:b9:92:48:e3:8e:8d:3d:
2d:c0:ec:26:e5:bd:05:dc:a0:7c:68:6e:13:95:eb:
d3:a9:36:54:ff:dc:b2:95:83:58:84:1d:af:9f:34:
99:65:89:9f:2c:da:3b:9e:d9:7e:ad:3d:1d:11:a9:
7e:29:25:e8:10:35:58:ed:1d:0f:f5:7e:8d:67:56:
7b:6f:c6:0f:7c:9a:b9:fa:b2:1a:6a:84:58:7a:2a:
3a:7b:8d:c9:eb:76:48:5f:84:c7:4a:8b:6c:ec:3a:
ab:2c:e6:af:00:5e:47:f6:31:b6:14:08:96:ef:dc:
fa:aa:15:08:59:59:2f:8d:73:f6:3a:1e:01:c7:60:
39:6b:0e:f9:0c:c6:14:96:95:65:e4:1c:fa:1b:45:
17:0a:37:b9:83:fb:50:11:7d:99:b0:5e:df:35:b0:
93:5a:c9:08:fa:96:1c:92:bb:8f:2d:eb:92:00:c1:
7f:9f:28:47:44:3f:0f:ae:30:8e:01:57:6d:fe:52:
55:4d:82:0f:16:79:93:66:4f:d8:05:53:3a:6d:31:
b7:c6:f7:c3:cf:1e:66:56:32:4a:89:e0:d3:0c:cf:
ce:70:53:8d:d6:cc:04:d9:0c:3a:8f:50:12:9c:fc:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B7:C6:4F:E8:C1:BA:76:38:F3:65:B6:46:51:67:B5:F3:CE:F1:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E70596811F411F0B2ED2E46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
154.212.139.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f8:df:e8:f3:d5:d2:b0:c8:6b:98:8b:ca:e0:82:a4:95:56:
2f:c4:0a:81:c6:51:5f:76:3a:0c:16:6d:fa:90:61:d9:df:06:
fd:94:9e:da:48:9c:8b:e5:8f:3e:ab:9a:3e:8b:a5:96:70:40:
a3:d2:08:c3:9f:4e:39:07:3a:68:69:15:b0:41:bd:c5:cf:92:
00:64:32:91:3d:52:1b:99:95:fd:65:a8:54:86:97:e1:74:56:
bf:78:13:b2:fd:91:e3:f2:80:1a:2a:58:93:f3:c2:fd:67:89:
5a:5f:40:e8:4d:c8:c5:29:33:5d:8b:e5:83:8c:a0:54:e0:f3:
a0:68:45:21:c8:52:9e:f6:0b:39:0a:09:34:cf:78:24:88:2e:
a4:b4:0e:48:60:ec:b9:6d:21:d1:09:cd:54:e6:a4:92:63:e6:
b8:c0:37:21:8a:94:98:62:3d:13:73:a0:7c:5b:33:83:89:c8:
34:5b:47:de:92:d0:0f:93:f9:c8:e7:46:69:25:47:cd:4a:ac:
a6:4e:bf:48:a5:df:10:75:32:b3:13:1c:aa:d6:62:ec:af:1a:
1c:fb:7f:5b:ce:0e:0a:25:bb:dd:c4:5c:47:5a:9e:2a:5f:1d:
e4:57:da:0f:17:87:5d:5b:97:6e:89:5c:37:41:77:74:c1:e6:
ce:e7:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:40:12 2025 by rpki-client on console.sobornost.net