Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FB67FD8201711F09DBAF4AADAE4EC9C.roa
File: 4FB67FD8201711F09DBAF4AADAE4EC9C.roa (raw, json)
Hash identifier: IcTc5lyzCFn+QUjQbV9CuJ999PqQ98AZWP2EDpSTpAU=
Subject key identifier: 1C:19:9F:40:D4:25:F6:B9:F8:3E:E9:B8:A6:AD:F2:E8:14:FD:D6:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017AA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FB67FD8201711F09DBAF4AADAE4EC9C.roa
Signing time: Wed 23 Apr 2025 07:48:15 +0000
ROA not before: Wed 23 Apr 2025 07:48:09 +0000
ROA not after: Wed 29 Apr 2026 07:48:09 +0000
asID: 28458
IP address blocks: 154.94.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96929 (0x17aa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:48:09 2025 GMT
Not After : Apr 29 07:48:09 2026 GMT
Subject: CN=68089b3e-2bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:c7:19:67:33:ef:45:0f:81:92:f0:de:8f:
d5:af:2b:b9:9d:da:e5:f4:2f:10:f4:b8:2e:40:30:
92:61:3e:4e:5d:3f:b7:c0:a3:49:83:e1:ba:b9:bf:
be:93:b1:8e:ab:16:a6:27:e1:5b:51:53:22:d2:67:
e9:be:ac:e6:73:64:14:2d:37:33:95:f2:25:2c:2d:
84:e7:1b:30:d2:1c:2b:fe:c4:7d:12:b7:9c:d8:24:
2f:60:af:58:54:2d:11:dd:88:a5:79:e2:c7:00:3f:
41:14:96:7d:9a:26:75:db:43:73:27:4a:c7:18:12:
66:65:02:ab:7f:64:58:86:60:b7:02:99:30:74:eb:
05:9c:52:3f:e5:0a:29:0a:1a:75:68:3e:b5:0e:c1:
cf:1b:04:fd:ef:cd:a5:d0:15:4e:4f:8e:64:8f:92:
0e:e8:7c:4a:18:77:ce:ed:35:7b:64:19:ea:8e:4c:
56:c0:fd:2f:12:f8:80:c9:f4:ad:2b:82:79:b6:fd:
7d:d6:7d:a3:c9:4a:67:a4:fc:3d:4f:c3:25:ea:39:
2e:8c:3a:04:d0:47:0a:45:34:36:88:fd:bc:be:cb:
68:8d:66:2b:44:02:12:a5:8c:4f:eb:60:b0:12:78:
53:da:5c:b1:47:a1:61:00:a1:57:ea:68:fa:8f:69:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:19:9F:40:D4:25:F6:B9:F8:3E:E9:B8:A6:AD:F2:E8:14:FD:D6:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FB67FD8201711F09DBAF4AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:0a:7f:ca:67:86:ec:ab:9b:68:95:bb:f8:68:4a:09:a2:06:
78:d4:30:62:18:37:f9:48:95:8b:b6:09:4c:e0:0e:79:58:c9:
76:80:2d:ad:7e:2e:50:3d:f4:03:f7:a9:ac:02:e9:c5:8c:20:
98:e8:d2:30:89:09:7e:9f:da:36:04:3f:a9:a4:d1:3c:70:7b:
3b:8b:c7:6f:b8:6d:58:a4:32:4c:19:e8:2a:97:cd:28:45:ce:
15:0a:f5:c7:5f:9f:03:ed:73:23:17:bd:14:db:eb:cd:74:b5:
45:d5:57:55:0a:00:4e:b6:ea:52:dc:6b:84:f1:bb:2f:d2:e9:
40:87:06:be:ee:f8:b9:c3:6f:ba:30:89:d0:1d:37:39:94:ea:
a9:50:5f:82:89:67:8d:57:26:ae:00:b1:0d:b6:56:49:e8:2a:
8d:ad:8a:38:d6:8e:15:4f:20:f6:ec:6a:95:5d:d7:b9:4a:e1:
8f:b2:9b:26:fb:e0:f3:55:da:06:90:11:1f:cd:bb:8f:24:de:
ab:62:b6:69:24:c3:9b:97:eb:7b:72:48:39:8d:af:7f:f1:89:
d2:21:fa:32:74:b3:dc:7d:51:d6:ba:96:d2:b1:f5:77:44:6c:
a9:95:17:c9:f8:c0:f1:25:99:20:0e:e5:41:86:e2:ae:ad:b9:
eb:ff:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:20 2025 by rpki-client on console.sobornost.net