Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B8A4EC2114711F0B97A23A8762E951A.roa
File: 5B8A4EC2114711F0B97A23A8762E951A.roa (raw, json)
Hash identifier: dSQhmUBrgADktyPdK4AFpqt08nPqu7FMw/4F5s/ExUg=
Subject key identifier: 51:97:A5:A6:AE:AC:E3:07:B5:EE:51:64:B2:29:3F:F9:9D:68:A9:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B8A4EC2114711F0B97A23A8762E951A.roa
Signing time: Fri 04 Apr 2025 11:24:22 +0000
ROA not before: Fri 04 Apr 2025 11:24:19 +0000
ROA not after: Fri 09 May 2025 11:24:19 +0000
asID: 395793
IP address blocks: 154.93.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96194 (0x177c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 11:24:19 2025 GMT
Not After : May 9 11:24:19 2025 GMT
Subject: CN=67efc166-38a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:0d:c0:9d:bb:86:45:30:94:0d:c3:06:54:
ee:35:5c:2a:c1:b9:aa:b2:63:bc:bc:7a:66:0e:f6:
6a:2f:af:7e:07:42:a2:64:19:41:2d:87:6f:7d:02:
b5:4f:db:5a:7b:54:1f:76:82:57:f1:0c:95:d5:88:
27:14:58:46:ec:ce:eb:dc:70:92:14:d9:9e:f8:f1:
af:2d:66:aa:61:04:21:2b:0e:4a:bf:fb:50:b0:67:
03:5c:e2:86:53:49:18:13:08:fd:d8:cd:ce:3d:91:
68:e8:a2:19:39:44:f6:0e:db:f4:d8:83:12:15:d5:
a3:eb:35:10:d5:7e:6a:6f:15:96:e3:ee:2b:9f:30:
b9:47:7b:76:47:de:f6:ef:ab:ef:d2:6b:e1:a1:e2:
90:bf:c2:ea:9d:87:34:76:e4:5f:cf:ba:60:de:2e:
bc:aa:18:cb:ca:a6:7b:a8:e4:dd:c8:1a:8e:80:aa:
48:75:42:44:8e:aa:1b:0d:f3:ec:c3:e1:e5:1c:bb:
82:fa:0d:44:06:4d:f0:c7:d1:fb:35:70:0f:4c:7b:
90:d8:93:e0:5a:b9:ff:19:ac:a1:8c:68:1d:cf:21:
ca:6d:76:c3:c1:6c:f1:b0:a1:c9:78:ac:29:a2:35:
29:ea:5d:32:f4:53:8e:4b:22:ae:75:e1:87:1d:f2:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:97:A5:A6:AE:AC:E3:07:B5:EE:51:64:B2:29:3F:F9:9D:68:A9:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B8A4EC2114711F0B97A23A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
57:50:3e:57:57:41:81:57:79:69:8a:51:33:72:c9:c7:ff:1d:
21:30:1b:81:dc:df:e5:30:96:8a:7e:d9:d6:39:72:45:16:57:
66:13:e0:54:09:b6:e9:f1:ad:2d:90:34:88:63:1a:eb:a5:4b:
16:d5:df:1f:c7:cc:22:ed:ec:8d:7a:89:40:72:28:01:34:ab:
fa:0d:27:11:06:25:20:21:0e:16:82:af:7a:c1:6e:36:f4:4f:
01:d3:e5:64:96:49:3c:1e:95:4d:6e:8c:a1:e2:29:6e:70:9c:
b1:10:fc:4a:dc:2d:40:6f:72:ca:10:8d:e8:91:00:0a:3b:22:
48:cd:d7:fb:d9:22:8c:9e:30:31:93:07:b7:8e:de:ed:ff:9b:
d9:94:e0:24:92:4b:e0:f4:cd:2d:e2:df:d4:cb:15:a2:8f:e7:
f4:b3:5a:f3:a9:47:84:82:2e:a3:f6:91:c3:a6:7a:b1:8d:7f:
5e:a9:8b:f3:6e:13:ac:be:fa:92:f1:fc:cb:76:1f:ad:e6:9c:
90:ca:b2:a1:29:70:08:f6:0f:83:15:0b:04:65:3c:ce:e9:0c:
41:9e:00:6d:15:b3:aa:03:39:a8:af:84:a6:48:42:d9:7d:7a:
ab:e4:da:72:e2:06:d7:9b:cf:59:ac:f0:56:69:a9:3d:c2:e4:
4d:cf:95:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:50 2025 by rpki-client on console.sobornost.net