Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57EE3584151C11F08DF263E56DB8BCC6.roa
File: 57EE3584151C11F08DF263E56DB8BCC6.roa (raw, json)
Hash identifier: oEPNG+dAUVGvlZOaE5WYt704SeTPo9KTVimAsWUUGdE=
Subject key identifier: BF:D6:B0:4F:D0:DE:ED:6C:E5:99:89:CD:43:DB:D7:2C:AF:A9:1A:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01788E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57EE3584151C11F08DF263E56DB8BCC6.roa
Signing time: Wed 09 Apr 2025 08:26:33 +0000
ROA not before: Wed 09 Apr 2025 08:26:29 +0000
ROA not after: Wed 14 May 2025 08:26:29 +0000
asID: 17557
IP address blocks: 154.81.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96398 (0x1788e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 08:26:29 2025 GMT
Not After : May 14 08:26:29 2025 GMT
Subject: CN=67f62f39-0c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:73:7a:02:43:69:da:1c:a8:6b:35:0f:cf:
65:15:f9:66:6c:9c:99:5f:27:e8:c0:e3:75:55:b6:
83:a3:48:43:39:74:7b:6a:b0:48:c5:54:e0:b4:57:
dc:b9:1f:8b:4a:ac:17:de:ce:c3:35:cc:94:1c:1d:
01:b0:c0:64:26:4d:cf:8f:90:ea:c1:f2:46:c2:4d:
d4:fc:0b:5b:db:d5:b6:93:84:1f:56:f1:ed:86:43:
b6:14:4e:81:f4:7b:88:ed:7e:b4:da:ff:ad:6a:a4:
48:b8:c3:5e:aa:d6:8d:66:0b:3e:05:97:67:4d:34:
c3:2e:68:6d:8e:d9:cb:6a:83:2b:66:25:1e:b6:6e:
c1:93:c8:ed:c7:e9:e6:cb:44:b0:77:d8:b6:9b:ff:
82:44:2b:c4:31:3a:6d:30:de:2d:81:6d:ae:d6:f1:
80:61:f4:9f:87:18:23:34:45:fd:0d:6c:f3:59:3d:
ee:a8:f3:11:8a:aa:d7:ff:50:88:97:c6:02:9a:22:
e6:5a:c9:0a:05:3e:54:ec:80:f3:b2:0e:e2:68:f1:
89:eb:0c:22:0d:6d:87:95:13:a9:6e:9e:b8:67:e4:
f2:2b:7c:c4:78:ef:c0:73:02:ed:09:60:31:f1:88:
31:e6:50:a3:1e:d8:0c:b5:13:ea:dd:3c:62:d7:0c:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D6:B0:4F:D0:DE:ED:6C:E5:99:89:CD:43:DB:D7:2C:AF:A9:1A:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57EE3584151C11F08DF263E56DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.11.0/24
Signature Algorithm: sha256WithRSAEncryption
94:72:4b:40:b0:f7:4e:5f:01:ab:2a:8a:9f:fe:61:fe:cc:f0:
72:ef:5b:65:14:4c:ac:eb:ad:ed:17:50:93:99:cc:90:16:d9:
55:ee:62:9d:2b:e3:7d:df:27:ea:11:4b:81:66:4e:13:33:54:
58:bc:ea:c8:24:42:4e:97:c4:4f:e7:f5:53:8c:d4:01:39:bb:
3c:e3:92:ab:cc:05:64:2f:d1:ad:b5:0b:63:07:57:81:d8:06:
e4:c5:29:cf:a8:d9:a4:e2:54:1c:4e:ec:5a:60:ec:c0:02:4b:
dd:b0:89:70:9f:0c:10:c5:16:e0:86:4d:a2:0e:97:c0:40:b8:
d0:a6:da:5e:54:e9:e1:d1:1d:32:09:ae:02:f8:3a:34:b9:cf:
6e:a9:8b:51:57:dc:f5:33:f7:7b:cd:43:8e:19:a2:e5:aa:d0:
a7:69:13:4e:b4:d5:84:5b:dc:d1:09:18:33:aa:87:f3:28:0a:
80:d4:f4:da:05:1e:d1:dd:92:66:d1:8c:75:aa:4d:c7:aa:25:
dd:f8:73:32:c6:8e:71:1e:8f:b8:e0:72:04:7f:63:6a:74:81:
5d:86:61:24:22:dc:55:e2:7d:5f:59:27:bd:30:a2:57:97:b4:
ae:48:02:63:fe:72:7b:92:c1:b3:a9:9d:bf:1d:29:de:36:a2:
c6:28:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:31 2025 by rpki-client on console.sobornost.net