Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519E9840235911F09B43FBEFDAE4EC9C.roa
File: 519E9840235911F09B43FBEFDAE4EC9C.roa (raw, json)
Hash identifier: Go2faPPRUvGuP9I29r6D8gM1Z5oTtH6VDbD9btksZ0g=
Subject key identifier: 24:D8:68:0C:7A:F6:D0:18:22:07:86:11:4B:80:23:7D:64:BE:2C:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519E9840235911F09B43FBEFDAE4EC9C.roa
Signing time: Sun 27 Apr 2025 11:18:18 +0000
ROA not before: Sun 27 Apr 2025 11:18:13 +0000
ROA not after: Mon 05 May 2025 11:18:13 +0000
asID: 4809
IP address blocks: 154.83.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97093 (0x17b45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 27 11:18:13 2025 GMT
Not After : May 5 11:18:13 2025 GMT
Subject: CN=680e127a-d16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:a4:34:2e:e2:7f:eb:6c:ce:73:2e:f0:10:
e0:96:a8:f5:80:3e:44:db:83:c0:6f:c3:1f:aa:39:
4c:6f:2c:1a:20:3d:60:b5:55:06:af:3f:69:11:67:
7c:1f:33:55:0a:19:d5:bf:03:39:38:d3:0c:29:78:
a3:04:61:26:52:3c:33:58:eb:ea:9f:95:84:41:cb:
58:4b:24:6c:d8:7b:1f:03:fe:da:a4:eb:50:03:99:
d9:26:6a:a6:83:7f:52:01:26:da:c6:33:d1:46:f9:
ac:49:48:23:29:97:b8:57:35:a6:e7:06:65:52:20:
40:f7:7d:59:c5:74:87:e6:eb:7f:f9:9b:13:47:de:
7b:a4:ab:ad:30:3e:31:ab:34:66:35:15:4a:da:41:
60:be:e9:3a:9b:8c:fe:54:d4:de:9f:c4:87:67:27:
07:c3:57:ba:d2:1b:7d:26:96:dc:f8:53:f1:50:88:
ca:fc:73:73:47:57:26:db:b8:2b:ce:c5:7d:82:69:
b4:8f:fd:2d:63:1c:5d:a1:50:3c:18:8f:df:14:2f:
a1:93:81:b8:de:c2:55:44:de:e6:28:9b:24:d0:07:
4c:46:c3:20:62:fd:00:23:5d:32:4c:05:f3:e2:ae:
4d:2a:0d:30:47:e8:99:18:9b:17:2f:8b:3d:70:9f:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D8:68:0C:7A:F6:D0:18:22:07:86:11:4B:80:23:7D:64:BE:2C:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519E9840235911F09B43FBEFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.28.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:6d:2f:34:8e:31:4a:96:a1:43:27:1f:85:bd:6c:aa:0d:1b:
5e:75:10:95:36:7c:c1:e7:5f:57:bb:e0:ef:6f:e7:db:51:7d:
e3:bf:16:d7:d7:e9:be:76:dc:73:06:ab:1c:8d:0c:2c:e4:c7:
b5:c9:b0:36:76:e2:03:34:c6:0e:c9:13:33:db:ef:01:cb:0c:
56:25:b6:a4:d5:3d:d6:bf:db:c5:c9:f0:96:27:3a:a6:43:02:
1a:01:b9:9e:f3:26:3e:28:79:d5:47:7f:47:26:79:b4:12:4d:
e3:2d:a2:d2:62:57:57:a0:d7:82:37:1e:ae:c4:be:b4:bd:93:
16:bb:a2:5f:c7:91:0b:34:a6:99:27:91:d3:d0:12:cc:40:a3:
6a:11:cb:9e:02:0e:99:36:07:5c:19:4b:6a:22:b4:d0:9d:7c:
5a:03:3e:2a:5f:4f:69:e6:b2:a1:d3:27:07:82:28:9c:f0:3a:
f7:1f:db:15:f1:d4:ba:ae:ef:24:57:ca:0b:95:48:f2:92:c7:
82:e1:fc:dd:9c:e3:c3:2b:6b:7e:77:42:5d:17:d3:86:f5:fb:
69:5f:75:a3:31:4a:5e:96:a4:2d:f6:40:3a:eb:8a:32:dc:56:
21:cb:0b:2c:a3:8f:0c:3b:93:f0:f4:0f:6c:98:5d:db:9a:1e:
16:03:62:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:24 2025 by rpki-client on console.sobornost.net