Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6700AEA613ED11F09492CAAF762E951A.roa
File: 6700AEA613ED11F09492CAAF762E951A.roa (raw, json)
Hash identifier: 0ZM7lCZ5Z5hT6HpE/1G/+OpsuCOve5eZGw8h59It1iU=
Subject key identifier: 52:4E:F3:77:58:C5:16:92:E4:DB:30:5F:03:49:E0:C2:20:FE:3D:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01783D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6700AEA613ED11F09492CAAF762E951A.roa
Signing time: Mon 07 Apr 2025 20:18:01 +0000
ROA not before: Mon 07 Apr 2025 20:17:56 +0000
ROA not after: Fri 16 May 2025 20:17:56 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96317 (0x1783d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 20:17:56 2025 GMT
Not After : May 16 20:17:56 2025 GMT
Subject: CN=67f432f8-50e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:25:fe:3b:2b:64:c4:3b:67:88:f3:9c:8c:
91:25:dd:a4:b4:02:b6:d8:7f:88:03:7a:e6:b6:55:
b3:47:e9:8d:f1:b5:49:2e:c9:4f:26:af:ef:00:6b:
5b:cb:62:a6:43:6a:39:67:e1:ca:60:f5:a4:09:2c:
83:a2:5c:e0:21:df:8f:25:96:6e:92:e1:3e:1b:a0:
01:87:93:54:3c:92:8f:83:2d:5e:ee:ff:5b:0d:3c:
c7:b7:b1:b7:fb:01:90:a9:3f:a2:f6:a8:b1:98:55:
a4:cf:a1:54:89:ca:14:a0:eb:21:98:ca:72:1c:79:
57:7f:12:7d:de:bc:d9:17:e6:28:0d:8d:8c:76:4e:
16:90:a7:4f:e3:5e:c3:e3:d9:d7:30:a0:d8:d6:49:
7e:37:f4:79:d0:68:20:0c:97:86:70:7b:94:80:c5:
a6:cb:cd:78:cc:f9:01:03:1a:fb:92:b3:77:86:94:
27:75:b3:68:77:13:96:55:07:5a:1b:a9:af:18:1a:
f6:aa:ee:ba:44:66:b5:a1:e2:79:48:b6:af:b1:b6:
bb:d5:c3:bd:67:2d:2b:96:63:af:b4:b6:cc:5b:8a:
82:5b:ff:d2:01:8c:95:6b:ab:0e:6f:95:56:4e:7d:
58:89:2b:5b:79:5e:d0:9f:23:93:a4:df:2f:59:56:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4E:F3:77:58:C5:16:92:E4:DB:30:5F:03:49:E0:C2:20:FE:3D:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6700AEA613ED11F09492CAAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:bd:f6:3a:64:f7:0a:9e:f2:d1:db:06:15:23:3a:a8:62:b2:
b2:64:9b:46:14:d8:cb:03:d1:e8:f9:3a:4a:e7:44:dd:6c:03:
1a:e2:92:98:9a:9b:88:c8:a3:3c:fd:de:b6:1d:8b:fd:71:e2:
00:fc:1f:80:6f:a2:38:a4:de:a4:6b:dc:c4:2b:ac:6d:18:e1:
dc:02:0e:6b:63:13:cb:8d:77:8f:fd:6a:10:8a:de:e4:3d:37:
d2:0d:3d:7a:0e:97:06:a5:6b:ca:43:71:17:3d:8c:47:a3:c8:
08:f3:8f:b0:e1:ff:03:46:12:3a:97:d4:e5:bf:64:6e:98:ef:
43:61:46:d4:08:29:af:71:18:97:f5:3f:0c:11:9f:53:91:14:
d5:d9:62:4f:ed:66:6e:c9:2a:84:95:8f:a7:f9:3c:06:44:6e:
83:48:40:9a:1a:12:c5:1b:98:23:8f:d2:38:97:90:76:55:b2:
48:d7:3b:28:96:13:14:92:de:9d:fa:d8:dd:d3:ba:39:c1:28:
24:fd:1d:5b:1e:0b:ca:93:fd:2f:f9:07:13:41:a2:48:93:9c:
23:d7:59:6f:28:eb:30:91:27:ca:d7:40:69:01:a8:d2:ca:5c:
81:0b:51:47:87:3f:22:36:9b:bd:57:0e:94:44:1c:7f:61:f5:
a5:36:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:17:56 2025 by rpki-client on console.sobornost.net