Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57042D7016B811F09DD934276EB8BCC6.roa
File: 57042D7016B811F09DD934276EB8BCC6.roa (raw, json)
Hash identifier: kVgMlH/i61LsECHh/bqHkXYwqPjV9i/HbP1j+KvER90=
Subject key identifier: 66:D9:A7:58:DA:25:69:48:3B:6B:03:0B:36:06:87:BF:91:AB:92:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57042D7016B811F09DD934276EB8BCC6.roa
Signing time: Fri 11 Apr 2025 09:35:44 +0000
ROA not before: Fri 11 Apr 2025 09:35:39 +0000
ROA not after: Thu 26 Feb 2026 09:35:39 +0000
asID: 45669
IP address blocks: 154.198.64.0/19 maxlen: 24
154.198.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96493 (0x178ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 09:35:39 2025 GMT
Not After : Feb 26 09:35:39 2026 GMT
Subject: CN=67f8e270-60d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:50:bf:17:cc:6d:97:52:72:4b:a1:4c:8b:
c4:00:83:cc:b2:7c:09:46:73:d5:6c:e9:47:ed:04:
ec:2e:48:df:73:e0:89:70:e4:0e:ac:b4:1e:31:60:
ea:bb:45:ff:6d:e0:5e:67:9d:96:04:22:df:60:48:
ec:ca:96:af:ca:c9:c8:5f:81:a8:ef:e2:13:5d:d3:
f7:9c:91:28:d4:59:1f:00:3d:68:35:d6:7b:19:f4:
f8:41:62:81:62:e4:e0:cc:9d:a3:a9:dd:e7:6c:bb:
08:80:4b:fa:14:ee:a7:31:4c:d2:a7:36:70:87:a4:
51:5c:ac:c8:0b:87:e2:5d:85:2f:af:ac:6b:a1:cd:
c4:4f:35:36:35:12:93:0a:2c:e2:c6:82:4a:0a:6f:
a7:d4:13:6a:a8:c0:89:d5:ee:43:fa:40:0f:54:b7:
e9:6f:a8:6f:ba:40:55:f9:98:10:af:b1:30:bf:9d:
51:52:3d:c3:20:72:d5:85:25:10:dd:44:98:b7:73:
c2:0a:3f:49:93:74:ea:88:d3:26:a8:51:21:d1:b6:
f4:dc:78:1d:40:cd:50:d1:15:fb:eb:9a:2f:8c:03:
ba:13:e0:78:0b:6a:ea:d8:f2:55:85:9f:69:2b:82:
2e:13:a7:37:9e:09:9d:d0:14:a4:e1:f4:6e:6c:9f:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D9:A7:58:DA:25:69:48:3B:6B:03:0B:36:06:87:BF:91:AB:92:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57042D7016B811F09DD934276EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
28:aa:e6:79:c9:50:bd:ce:8e:c5:b4:99:e5:80:ba:16:08:e3:
b5:21:4f:f8:c4:bc:e4:d1:35:36:fc:fb:59:a0:74:5c:db:d6:
f2:ac:21:1d:78:f3:e4:a6:11:8f:0d:92:08:da:76:70:72:b6:
5d:29:cc:06:85:99:80:20:62:97:e5:9c:af:7a:11:fe:7c:62:
1f:40:c2:98:9e:4b:88:80:35:60:89:70:43:d5:9f:9b:a8:19:
1e:e6:38:29:28:2a:e1:ae:02:da:59:83:5b:58:eb:af:7b:c0:
5b:31:96:fd:6c:d7:fa:b8:8e:4a:a7:26:c1:ad:86:4a:6e:f8:
8c:c6:f3:0b:b8:c7:84:10:0f:9c:09:1c:f3:60:06:55:7d:39:
e3:58:0c:cf:13:2e:70:c5:53:4d:b4:bb:49:62:e3:09:b9:71:
ce:a4:44:f7:a5:b3:b3:e1:77:1c:4e:33:87:28:28:61:72:f3:
5f:fb:ac:64:de:21:02:40:f0:ea:54:9c:e5:87:bf:8d:1e:f6:
26:12:d3:9c:3d:ad:77:f4:cd:c7:a5:dd:7c:d5:ea:cf:d1:30:
c2:78:41:5e:16:ed:8c:1c:20:b7:b7:4b:85:94:e8:a1:37:51:
06:31:91:c1:f2:59:b1:d9:31:b7:ea:cc:f8:11:85:ab:7e:1d:
57:47:8b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:30 2025 by rpki-client on console.sobornost.net