Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EC6152E108C11F0BCD222BB762E951A.roa
File: 4EC6152E108C11F0BCD222BB762E951A.roa (raw, json)
Hash identifier: n8y69zKSwAytc2z+SiVzVJOFgLdnkFunzHJ2LMOA+w0=
Subject key identifier: 71:5A:92:B4:45:BB:A9:24:5B:D2:82:1D:21:61:D6:7E:40:DF:18:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01778F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EC6152E108C11F0BCD222BB762E951A.roa
Signing time: Thu 03 Apr 2025 13:05:25 +0000
ROA not before: Thu 03 Apr 2025 13:05:20 +0000
ROA not after: Sun 03 Aug 2025 13:05:20 +0000
asID: 18229
IP address blocks: 154.206.22.0/24 maxlen: 24
154.206.23.0/24 maxlen: 24
154.210.172.0/24 maxlen: 24
154.210.173.0/24 maxlen: 24
154.210.174.0/24 maxlen: 24
154.210.175.0/24 maxlen: 24
154.210.176.0/24 maxlen: 24
154.210.182.0/24 maxlen: 24
154.210.191.0/24 maxlen: 24
154.210.192.0/24 maxlen: 24
154.210.193.0/24 maxlen: 24
154.210.194.0/24 maxlen: 24
154.210.195.0/24 maxlen: 24
154.210.196.0/24 maxlen: 24
154.210.197.0/24 maxlen: 24
154.210.198.0/24 maxlen: 24
154.210.199.0/24 maxlen: 24
154.210.200.0/24 maxlen: 24
154.210.201.0/24 maxlen: 24
154.210.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96143 (0x1778f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 13:05:20 2025 GMT
Not After : Aug 3 13:05:20 2025 GMT
Subject: CN=67ee8795-8e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b4:26:80:df:b2:f6:74:39:55:3c:a2:82:08:
e2:ac:3a:72:6c:a5:04:02:55:61:a2:ef:9d:35:f3:
be:21:1a:7f:94:52:ae:87:1e:a7:aa:2d:86:3a:d0:
c8:e2:f5:17:d3:ce:9f:da:33:79:ba:07:c0:57:59:
43:f9:01:66:24:ae:da:28:8f:48:58:e6:a2:a9:e7:
04:c8:45:54:a8:91:a4:96:98:4b:81:da:1e:57:87:
b7:24:7d:c7:de:83:8c:f2:26:da:4f:51:b9:18:75:
ed:15:a5:33:89:27:08:ca:4c:18:56:2b:b2:80:01:
56:f9:5a:6e:99:48:3c:88:1d:16:c9:e8:34:1d:b1:
8e:3d:ef:33:70:54:6e:7d:cc:1d:7c:6d:d6:d0:00:
58:fd:50:75:65:7c:82:a3:c0:ad:ed:06:8b:78:02:
81:98:12:8d:64:b8:51:2e:37:ce:5c:e7:10:3c:1f:
a7:bb:fa:fb:2d:28:89:83:20:b9:88:d3:b1:b7:a3:
58:86:a8:37:8c:32:75:27:21:6d:cb:9b:3c:a6:48:
31:de:62:36:08:80:bc:89:bd:a5:be:9a:09:45:30:
52:8d:e6:ad:e2:ff:e4:eb:84:2a:54:97:24:10:35:
95:0f:11:d2:d3:a8:86:87:57:b8:21:00:91:20:aa:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:92:B4:45:BB:A9:24:5B:D2:82:1D:21:61:D6:7E:40:DF:18:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EC6152E108C11F0BCD222BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.22.0/23
154.210.172.0-154.210.176.255
154.210.182.0/24
154.210.191.0-154.210.202.255
Signature Algorithm: sha256WithRSAEncryption
11:9b:c5:53:69:86:c0:f1:6f:f6:c8:dc:8b:24:49:f7:89:23:
28:c2:de:a7:5f:43:a6:d2:e5:de:a4:9c:f5:4d:26:16:1d:0f:
b0:be:b4:b3:fc:b4:d7:c8:1e:19:a5:ec:05:d9:52:6a:98:c9:
22:4a:79:a5:3f:78:23:81:3e:f9:67:ef:8f:ad:b5:05:5d:c3:
6e:8d:80:fe:d7:f2:86:f0:38:bd:ca:b3:91:16:49:c4:1e:84:
ab:d3:8e:f8:4f:b5:36:fe:c3:01:ea:70:2d:99:54:02:c2:8d:
5a:30:3b:eb:ff:4c:32:45:a1:52:1d:d7:0d:87:20:68:fb:46:
18:7e:1d:59:71:40:76:b4:23:32:36:d1:e7:52:4c:73:ff:8c:
72:bf:01:56:8c:28:ae:4d:47:f9:cd:f2:48:7a:8c:25:82:b1:
3d:1a:2a:23:fe:9f:2c:8b:6c:e7:a5:fb:2a:3d:9a:39:4b:b1:
7c:82:2d:8f:7f:e0:87:0f:66:1f:d1:ad:85:99:29:97:8b:8b:
4f:ca:06:0e:77:8c:84:c8:58:9b:5f:bf:22:4b:bb:3a:9b:cf:
0b:cf:95:c2:8d:3a:09:69:79:63:57:56:28:40:22:21:60:f9:
67:e1:d1:77:1e:07:0c:a6:9b:c3:75:99:f0:d2:41:d4:b1:62:
7f:d6:cc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:47:22 2025 by rpki-client on console.sobornost.net