Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5315D7F6109411F09097FB6A762E951A.roa
File: 5315D7F6109411F09097FB6A762E951A.roa (raw, json)
Hash identifier: JclxFlJxxioG179Xf+y+AIjQltQoPq0wzOEI1xA8cKA=
Subject key identifier: C7:A0:C8:D6:ED:C9:CA:9C:81:BC:CA:B7:E8:FC:5D:F0:24:1C:7E:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5315D7F6109411F09097FB6A762E951A.roa
Signing time: Thu 03 Apr 2025 14:02:48 +0000
ROA not before: Thu 03 Apr 2025 14:02:43 +0000
ROA not after: Sun 03 Aug 2025 14:02:43 +0000
asID: 138797
IP address blocks: 154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96163 (0x177a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 14:02:43 2025 GMT
Not After : Aug 3 14:02:43 2025 GMT
Subject: CN=67ee9508-7cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:3b:fa:7c:a2:eb:97:64:80:ab:2b:a8:e9:
47:9c:c1:84:17:8c:05:20:b4:94:80:55:27:01:a3:
22:fe:d4:68:35:9f:b8:fc:fa:37:cc:d7:16:c1:ef:
ad:f1:cd:75:32:a7:9e:67:1f:9e:01:f3:3a:6a:2e:
f9:42:ba:af:9f:b1:c1:9e:c3:28:18:32:33:41:1e:
1b:71:74:84:4d:32:47:37:86:92:6f:6d:f9:82:fa:
35:b9:e0:60:cf:82:f5:fe:2e:41:64:d4:f5:95:bc:
19:fb:1a:14:59:ce:02:48:69:37:de:d6:df:56:f9:
59:97:15:63:eb:c2:34:0f:68:dc:2e:51:68:97:e9:
56:e2:76:71:fe:29:e3:78:5c:bb:8b:d5:91:f3:a8:
38:f1:9f:e4:6a:81:86:5b:cb:e1:98:35:5a:78:02:
88:30:a4:db:9e:ee:fd:eb:0b:0b:5f:36:d2:96:fd:
93:a6:4d:07:99:2d:ef:b3:c7:a7:b1:31:14:1b:d3:
1f:d2:85:ec:35:93:f9:29:ba:c3:b3:df:a2:56:d3:
cc:53:48:91:cc:34:44:05:86:97:f2:4c:7c:31:41:
b1:98:eb:8f:58:4e:1c:5b:39:e8:35:04:f9:f3:9b:
57:ed:a6:e5:0e:78:38:68:11:58:7c:c1:79:31:23:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:C8:D6:ED:C9:CA:9C:81:BC:CA:B7:E8:FC:5D:F0:24:1C:7E:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5315D7F6109411F09097FB6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/23
Signature Algorithm: sha256WithRSAEncryption
62:b3:ee:26:32:2d:25:57:cf:88:01:2f:c4:f6:d0:8e:cd:13:
82:cb:6d:cc:ab:02:e1:b1:76:2b:ce:ec:43:1a:81:23:9f:07:
1f:95:54:fc:17:ba:83:f1:bf:0e:95:90:95:4d:b9:c4:0c:23:
00:18:1b:83:82:9c:f9:34:1c:ee:9e:73:78:29:71:0b:19:27:
e6:7f:f3:b4:21:3e:19:b3:ca:50:e9:d0:9a:79:36:12:4d:e7:
7d:98:89:6b:a9:db:f3:b5:17:73:24:ba:e1:fe:ff:06:ae:7c:
31:21:0b:91:31:11:62:54:90:2c:0e:3d:2f:18:47:6c:36:82:
77:53:df:0c:8f:1d:ca:d3:aa:a4:bd:5e:2c:eb:0e:19:17:20:
8a:4f:92:91:b8:a1:b6:a5:97:5c:4e:21:cc:5e:01:d7:67:d7:
dd:12:5e:2f:ff:65:3d:c8:f7:8d:50:bc:71:12:a3:6f:5a:b2:
b8:7b:07:50:8f:40:53:3a:15:8c:84:75:1f:04:0f:81:36:d6:
d4:b6:81:c4:5f:57:8f:d6:3d:05:eb:14:95:cb:83:aa:92:01:
10:a4:f9:68:fe:79:60:58:1a:2a:de:a4:96:95:5b:6b:53:ec:
08:de:2c:ea:1a:04:ac:0b:73:95:40:a9:65:6b:be:b4:23:2a:
59:1d:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:27 2025 by rpki-client on console.sobornost.net