Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C779C4417A611F0BB65E0D66DB8BCC6.roa
File: 5C779C4417A611F0BB65E0D66DB8BCC6.roa (raw, json)
Hash identifier: jRK2PMU4CIj4mb2IhIuyPlEbt6hGgF00Viq8ds1fGR4=
Subject key identifier: 11:7D:E1:D1:1E:4C:22:71:69:82:A0:BB:5D:50:5A:6A:FA:50:56:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017909
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C779C4417A611F0BB65E0D66DB8BCC6.roa
Signing time: Sat 12 Apr 2025 13:59:33 +0000
ROA not before: Sat 12 Apr 2025 13:59:29 +0000
ROA not after: Tue 20 May 2025 13:59:29 +0000
asID: 214413
IP address blocks: 154.205.253.0/24 maxlen: 24
154.205.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96521 (0x17909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 13:59:29 2025 GMT
Not After : May 20 13:59:29 2025 GMT
Subject: CN=67fa71c5-5ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:03:a9:41:ff:31:5b:ed:74:b0:7c:68:97:
c9:3f:74:0d:c5:4d:fe:47:d2:0a:7e:ee:85:9b:b2:
fe:dd:60:eb:77:26:0e:d1:4b:a5:de:fc:b1:f0:0c:
1e:44:f3:3b:e3:15:05:13:0a:9f:ec:36:d3:cf:2d:
1f:c4:81:30:d9:b1:cb:30:a9:23:83:ac:22:82:73:
55:89:bd:47:48:40:79:14:76:97:3a:bb:4f:3e:07:
30:21:76:e2:92:5b:e4:3b:15:8a:dc:cb:6e:2c:c0:
fe:2c:f7:f4:cf:8b:f2:5b:10:10:b0:e9:55:85:7b:
90:d6:32:96:cd:f2:dd:4e:21:d9:77:95:41:11:ff:
56:eb:d5:63:54:3d:89:52:46:87:40:69:da:c0:fe:
35:45:de:d4:d6:62:2a:71:6d:b6:fd:bc:f5:a9:97:
ce:0b:e6:08:9e:f6:ef:91:5b:1b:4d:9c:83:7b:4c:
a6:55:86:49:8e:52:9c:04:10:dd:98:98:63:5d:5c:
5c:7f:64:a8:9c:a5:58:74:0a:58:04:05:74:1b:41:
e4:2a:79:9d:cd:19:d8:56:66:84:2e:50:4e:28:c8:
bf:08:28:70:59:54:58:82:52:98:7a:6e:d7:66:09:
31:20:f7:32:74:85:32:56:ef:62:91:6f:e4:26:2e:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7D:E1:D1:1E:4C:22:71:69:82:A0:BB:5D:50:5A:6A:FA:50:56:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C779C4417A611F0BB65E0D66DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.253.0-154.205.254.255
Signature Algorithm: sha256WithRSAEncryption
26:d9:2e:92:b8:c0:2b:38:71:d5:dd:94:2c:da:2d:d9:3c:e7:
d1:de:d4:62:bd:28:aa:2b:d1:0d:62:ad:01:da:72:dd:f1:f8:
d2:bf:e2:10:70:58:9e:72:2c:9a:05:48:9c:ca:8a:83:bc:a0:
90:f1:b6:7b:d2:c4:6e:0d:7b:7b:a8:32:cd:5c:13:8a:3b:f8:
e1:32:ae:40:aa:00:d4:6e:d7:c6:fc:da:72:d0:f5:b0:65:06:
23:7b:4c:af:1b:f1:74:cf:a4:91:80:ec:96:1b:7b:fe:e6:88:
5f:87:22:ff:55:7b:64:73:e0:87:b9:cd:57:8b:23:b4:4c:6b:
b6:97:83:21:1f:3f:4b:cc:e9:cf:3f:5f:53:a3:25:78:e2:d9:
5b:d9:33:24:d2:33:f6:1d:35:82:25:a5:38:09:bb:fe:0f:6e:
c7:8e:7d:1f:75:7a:48:7c:92:f0:fa:1d:91:10:ce:39:dd:e1:
7d:61:df:c5:ed:fa:81:f4:cd:f2:e6:66:1f:b0:ee:42:ea:97:
83:8c:6c:0d:45:9c:5f:24:96:d5:2c:67:cc:62:de:8e:14:92:
5d:e4:ee:74:ce:a0:4a:79:d1:5b:cd:ea:17:9b:ca:a1:5e:68:
6a:cb:f9:95:e2:95:83:b1:ee:7d:ef:98:89:2b:ac:d4:31:55:
57:ed:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:26 2025 by rpki-client on console.sobornost.net