Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53DFB6B21C9611F095A291ADDAE4EC9C.roa
File: 53DFB6B21C9611F095A291ADDAE4EC9C.roa (raw, json)
Hash identifier: hmwuD7DC4HZwF4qe0snssyIXsbm6hYndt5W5Hjkk7Pc=
Subject key identifier: 49:F9:8D:3D:BF:FA:03:27:8F:86:AD:D4:DF:5D:34:06:3D:7A:16:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53DFB6B21C9611F095A291ADDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 20:47:23 +0000
ROA not before: Fri 18 Apr 2025 20:47:18 +0000
ROA not after: Fri 30 May 2025 20:47:18 +0000
asID: 62240
IP address blocks: 154.194.75.0/24 maxlen: 24
154.194.76.0/24 maxlen: 24
154.194.77.0/24 maxlen: 24
154.194.78.0/24 maxlen: 24
154.194.94.0/24 maxlen: 24
154.194.95.0/24 maxlen: 24
154.194.96.0/24 maxlen: 24
154.194.97.0/24 maxlen: 24
154.194.103.0/24 maxlen: 24
154.196.24.0/24 maxlen: 24
154.196.25.0/24 maxlen: 24
154.196.26.0/24 maxlen: 24
154.196.27.0/24 maxlen: 24
154.196.28.0/24 maxlen: 24
154.196.51.0/24 maxlen: 24
154.196.52.0/24 maxlen: 24
154.196.53.0/24 maxlen: 24
154.196.54.0/24 maxlen: 24
154.196.55.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96738 (0x179e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 20:47:18 2025 GMT
Not After : May 30 20:47:18 2025 GMT
Subject: CN=6802ba5b-d224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:50:23:17:63:27:54:93:80:11:ce:bf:0f:
e9:62:61:6e:e3:67:29:4f:47:6d:36:15:49:a0:54:
4f:2b:5b:00:dc:7a:8b:71:6a:74:a7:21:db:a2:9c:
c1:60:fd:06:95:35:d7:f6:d3:50:84:c7:70:45:da:
a4:2c:f6:ca:62:59:19:3f:d7:50:7a:83:b6:05:cd:
81:59:77:48:e9:24:23:bf:26:61:56:f4:e2:97:43:
67:ba:c1:b0:65:82:b7:ab:2d:fe:21:3a:0d:15:9c:
f2:0c:3e:b1:e5:4a:9a:9e:53:fc:cb:d4:97:fe:63:
68:41:0f:5c:3e:12:6e:60:c8:15:b6:f3:0f:4c:df:
80:a9:83:9f:2a:22:18:ec:85:25:cf:57:e3:eb:76:
df:7b:bc:06:d3:9a:58:64:71:e1:51:ac:6a:8f:0a:
24:79:09:59:dd:dc:ef:76:20:88:e9:0d:83:45:1e:
a1:27:d3:e1:c2:25:8c:dd:e7:0f:30:5b:6d:15:f7:
67:f1:28:d4:9c:71:84:4a:ff:03:1c:e4:4f:06:67:
1f:68:d0:9f:4c:50:1c:a3:ec:45:75:d8:b7:69:8d:
d8:bd:a4:c3:ea:d6:31:83:c2:ab:92:cb:a5:cd:d4:
00:6c:89:e4:fd:80:7d:31:d4:62:88:8a:44:dc:e8:
d4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:8D:3D:BF:FA:03:27:8F:86:AD:D4:DF:5D:34:06:3D:7A:16:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53DFB6B21C9611F095A291ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.75.0-154.194.78.255
154.194.94.0-154.194.97.255
154.194.103.0/24
154.196.24.0-154.196.28.255
154.196.51.0-154.196.56.255
Signature Algorithm: sha256WithRSAEncryption
1d:7c:19:9e:37:23:41:e6:fb:78:67:9a:75:55:6b:fd:01:27:
81:1f:56:80:d8:08:07:b5:0a:83:7f:64:5a:4c:08:a6:0f:d9:
de:61:df:d8:85:16:8c:eb:10:d3:8c:13:b6:e9:03:f5:b5:ad:
5b:b4:14:51:a5:f4:35:a1:9c:fa:6c:6d:52:a9:b5:b7:53:3b:
59:ab:4f:59:3a:e9:80:0b:07:c5:a5:78:3c:a4:9f:d4:57:c4:
e0:3a:ad:9e:a2:ad:29:2e:6e:7d:a1:1d:ab:73:d2:a5:51:c9:
b1:5e:4d:30:00:da:8e:16:73:97:3e:27:1c:11:23:33:67:4e:
3f:4e:38:52:9e:30:f4:58:af:70:18:ab:b5:b8:f1:a7:fd:26:
ef:ad:94:98:a3:cf:61:16:54:0b:2c:26:2e:44:e6:2b:26:44:
d6:95:d2:47:10:8c:cf:e5:f7:89:03:f3:13:87:66:d2:4f:cc:
49:ac:1c:f2:a8:dd:4d:91:68:06:6f:bc:a4:26:a1:a5:90:5d:
1f:29:12:8b:f5:cc:7f:45:05:52:31:20:0d:f5:73:bd:fe:23:
7d:1c:a6:b8:df:88:c6:30:de:24:7d:b5:44:8f:f9:87:0e:3e:
07:56:a2:fd:9f:6c:6e:84:18:08:c9:28:b9:64:e0:2d:aa:5b:
34:da:68:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:34 2025 by rpki-client on console.sobornost.net