Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/560491041C8E11F0B311F779DAE4EC9C.roa
File: 560491041C8E11F0B311F779DAE4EC9C.roa (raw, json)
Hash identifier: knWpdWSBqpFwXsbOpe/kkDO9lwHv1Qk54PGR35DVGao=
Subject key identifier: C3:0D:36:C7:B6:E6:D0:DB:83:B7:A3:52:7B:21:D1:13:3D:D9:BE:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/560491041C8E11F0B311F779DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 19:50:11 +0000
ROA not before: Fri 18 Apr 2025 19:50:06 +0000
ROA not after: Fri 30 May 2025 19:50:06 +0000
asID: 62240
IP address blocks: 154.195.6.0/24 maxlen: 24
154.195.7.0/24 maxlen: 24
154.195.16.0/24 maxlen: 24
154.195.17.0/24 maxlen: 24
154.195.18.0/24 maxlen: 24
154.195.19.0/24 maxlen: 24
154.195.20.0/24 maxlen: 24
154.195.21.0/24 maxlen: 24
154.195.22.0/24 maxlen: 24
154.195.23.0/24 maxlen: 24
154.195.181.0/24 maxlen: 24
154.195.182.0/24 maxlen: 24
154.195.183.0/24 maxlen: 24
154.195.184.0/24 maxlen: 24
154.195.185.0/24 maxlen: 24
154.195.186.0/24 maxlen: 24
154.195.187.0/24 maxlen: 24
154.195.188.0/24 maxlen: 24
154.195.189.0/24 maxlen: 24
154.195.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96724 (0x179d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 19:50:06 2025 GMT
Not After : May 30 19:50:06 2025 GMT
Subject: CN=6802acf2-51e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:a4:b9:26:81:76:0f:fa:6d:96:88:55:56:
83:a4:78:a4:00:1a:64:07:36:78:3b:88:8c:62:a2:
88:6b:1e:52:2f:77:d4:ed:f0:c6:9e:4c:37:f8:f6:
37:65:43:96:c6:fe:99:bd:b0:30:e8:ef:b7:bf:1d:
3d:b0:5f:c6:0f:ec:46:84:19:1c:c1:f3:01:8d:11:
7e:4d:6f:fd:bd:97:9f:e0:a7:89:92:c9:93:2e:2d:
98:a6:f0:81:aa:e8:b9:4f:64:d0:4b:43:97:cb:6b:
20:b6:74:4c:33:93:e3:b3:3d:61:6f:db:a9:b9:70:
96:0e:50:af:07:a3:6e:eb:0f:9c:1e:86:0f:d8:13:
b7:a0:60:75:11:80:c2:12:c3:95:40:28:e8:b9:84:
40:a2:da:29:9e:9e:d4:4e:fe:e9:38:85:12:cc:d5:
ce:57:a9:bc:8f:b7:9f:5f:b9:3e:45:54:c0:1a:2b:
10:6d:00:fb:7b:7b:79:8b:03:f2:ee:6a:f8:9d:47:
de:44:e2:5f:e7:b9:12:98:be:91:f1:0b:c7:a1:19:
ce:ae:fc:34:ad:a1:62:fd:00:f5:69:9f:90:0d:d7:
34:44:23:4e:7e:9d:38:a4:e2:3a:5c:23:1b:d5:76:
d3:c4:e8:63:53:4a:f2:ce:05:32:9a:3e:0d:fe:9c:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0D:36:C7:B6:E6:D0:DB:83:B7:A3:52:7B:21:D1:13:3D:D9:BE:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/560491041C8E11F0B311F779DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.6.0/23
154.195.16.0/21
154.195.181.0-154.195.190.255
Signature Algorithm: sha256WithRSAEncryption
c1:a8:12:67:bd:8e:40:bb:5e:63:6a:16:f7:29:eb:e6:b3:b5:
b1:ae:77:5d:c3:bb:02:d6:20:0b:cb:47:bb:9a:45:b7:c1:77:
23:be:72:c6:71:6d:f0:11:c1:bc:39:31:95:4d:0e:62:20:31:
12:58:a9:5d:ec:42:fd:c0:b6:dc:f2:5b:71:20:a8:3b:41:ac:
d1:d8:48:b9:98:48:e8:d1:e6:13:af:65:ae:30:30:da:8d:80:
86:a9:f8:7e:31:63:b7:c6:39:4b:f8:d0:00:7b:c9:71:02:ff:
0a:e0:23:31:dc:a8:32:37:74:12:02:2c:66:e0:ac:f2:84:6d:
ae:42:db:b6:1a:02:54:ff:f7:41:67:27:fa:9b:fe:28:9c:4f:
46:da:6a:f7:d9:9a:56:0b:28:33:27:02:52:fe:bf:12:66:ad:
03:a8:d5:5b:78:ec:61:1a:41:ec:11:50:1e:9e:a2:d6:a4:03:
b6:f6:db:7a:8b:a6:67:a1:25:db:07:de:5c:e6:2e:f7:09:05:
d0:81:07:a8:bb:ff:8b:a2:b0:ab:f1:6f:2f:4b:21:d3:10:69:
3e:d6:63:95:dc:e0:02:35:6b:ad:0e:ad:5c:ff:21:de:af:00:
69:e9:1a:ce:83:0a:2c:44:ae:76:1a:5d:c4:6e:5f:83:ff:95:
eb:3a:6b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:22 2025 by rpki-client on console.sobornost.net