Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5469EA381E8211F0B3C5F294DAE4EC9C.roa
File: 5469EA381E8211F0B3C5F294DAE4EC9C.roa (raw, json)
Hash identifier: CwrO0PlCtxHB924f+LXe7+eGvsFNj8hSYglIcXaG/oc=
Subject key identifier: C9:AF:12:C0:9A:56:71:D1:50:A5:80:7B:21:FE:D9:72:9F:23:91:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5469EA381E8211F0B3C5F294DAE4EC9C.roa
Signing time: Mon 21 Apr 2025 07:29:16 +0000
ROA not before: Mon 21 Apr 2025 07:29:11 +0000
ROA not after: Thu 21 May 2026 07:29:11 +0000
asID: 984
IP address blocks: 154.95.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96835 (0x17a43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 07:29:11 2025 GMT
Not After : May 21 07:29:11 2026 GMT
Subject: CN=6805f3cc-1bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:1b:0f:4a:38:53:9d:fb:98:99:7f:58:9c:
81:cb:a8:e5:43:8b:bc:9c:75:d1:c4:b0:13:27:7d:
65:af:5e:ad:cd:a1:70:72:a6:7a:93:61:15:e5:91:
ad:5b:3b:cf:3d:8c:91:ef:ef:26:68:1f:5e:b3:89:
a0:f1:1b:b6:a5:34:cc:89:d0:eb:16:a6:5e:07:17:
08:75:15:ba:ed:a3:b5:af:dd:3c:c1:5e:91:94:2f:
72:27:bd:4e:04:7e:76:d9:f7:7a:a9:eb:54:2d:ff:
48:b1:a3:28:cb:5a:ef:40:d2:e1:df:87:34:de:e0:
36:c5:5b:53:ac:33:64:fd:6d:29:50:94:e8:06:f0:
8e:68:3a:71:b4:9c:0f:61:8f:22:0e:f4:1a:9e:f5:
39:72:e1:ae:98:30:a2:e9:a1:b7:ba:36:94:66:29:
e1:06:a0:df:b9:33:b1:13:57:01:1d:4f:46:cb:1c:
c3:6e:f1:11:e8:1e:3c:46:e2:99:c6:ca:e2:c1:6e:
e1:fc:07:9a:a5:26:08:60:18:69:fc:a2:c6:8f:86:
1d:e3:d9:c5:21:fa:3e:8d:0b:97:f8:7a:17:a7:2f:
86:54:e1:22:d5:7e:d6:cc:47:fc:c0:6f:2f:98:18:
d8:8b:f3:2b:36:37:4c:85:f3:d6:a8:33:07:5f:c3:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AF:12:C0:9A:56:71:D1:50:A5:80:7B:21:FE:D9:72:9F:23:91:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5469EA381E8211F0B3C5F294DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6e:15:b7:79:d2:99:e0:0f:d9:a4:81:21:1b:c7:5a:a4:df:
e4:b8:8c:6c:61:d8:60:11:b4:0d:e7:09:be:1e:c9:e2:b9:42:
2c:d1:5f:bf:6f:47:cd:e4:dc:f3:4c:d9:43:7f:84:a0:c2:8d:
fd:fa:0a:b7:64:1b:52:99:43:ee:7b:c2:b2:bc:10:0f:39:c8:
c7:1c:6b:39:f0:1a:06:97:94:27:59:1e:87:ac:6a:b1:a2:67:
b3:f6:69:79:1b:4d:b9:c6:f7:b6:f7:62:0f:f4:fe:13:5f:f2:
6b:14:9d:1f:9d:53:29:11:1a:da:13:41:2f:08:e1:31:80:f6:
8f:65:40:0b:47:88:d0:78:7a:10:ec:0e:63:a4:17:5c:f5:f3:
33:0d:51:df:36:85:05:71:e7:63:2c:b7:c9:29:e1:74:b8:b2:
e6:18:9a:49:c1:8e:1d:7d:28:f5:2b:6d:b3:e5:37:75:d2:ee:
3a:02:6a:44:e9:4d:18:42:04:a8:ac:9c:ce:e9:bf:f3:ef:78:
b3:c4:ec:01:25:34:0b:e3:9b:22:49:8e:39:08:1c:0e:9d:35:
25:5d:a7:7d:cd:08:03:bd:87:b5:04:3d:41:e8:6b:f4:51:73:
80:21:bc:a8:bd:4f:19:c5:6f:e9:05:ed:98:e2:75:5b:93:7b:
76:14:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:47:24 2025 by rpki-client on console.sobornost.net