Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C464A8211811F082602BDADAE4EC9C.roa
File: 67C464A8211811F082602BDADAE4EC9C.roa (raw, json)
Hash identifier: pfLokIFZT1UHWJbidVJGYNL0f14fsrYY0gQzHiXJoh0=
Subject key identifier: CF:37:09:60:B7:4F:4F:B8:B7:64:1D:EC:6E:8B:9B:45:B9:B1:29:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017ADF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C464A8211811F082602BDADAE4EC9C.roa
Signing time: Thu 24 Apr 2025 14:28:36 +0000
ROA not before: Thu 24 Apr 2025 14:28:31 +0000
ROA not after: Sat 03 May 2025 14:28:31 +0000
asID: 21859
IP address blocks: 154.94.35.0/24 maxlen: 24
154.94.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96991 (0x17adf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 14:28:31 2025 GMT
Not After : May 3 14:28:31 2025 GMT
Subject: CN=680a4a93-5267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:30:55:7a:81:b5:b0:5c:2e:e6:fb:63:02:
29:cc:ae:08:55:b4:65:c9:1b:14:66:da:5d:d4:19:
6c:a6:22:c7:7f:31:0b:4b:35:c1:8d:b5:0a:13:90:
33:83:4e:18:95:b8:95:60:ca:ea:6b:cb:ee:90:23:
34:19:db:39:87:38:9d:f4:e0:71:e9:66:70:a9:a7:
57:f7:26:83:b2:2c:33:0f:73:05:d3:6a:83:59:80:
12:3c:80:26:ae:e3:42:31:18:1e:d3:e0:43:d6:b3:
09:a7:5a:3f:d7:05:26:63:24:23:48:14:a4:ec:ab:
19:ef:63:f6:29:3e:3c:d7:d2:2a:e4:02:8c:ba:4b:
ba:f8:9a:6f:a6:d8:b3:f4:e2:2d:93:22:7a:76:1e:
5f:33:b8:98:6f:8d:ea:d8:ee:3f:ab:65:bb:51:38:
4b:3a:b9:1f:28:c9:05:8c:2b:a5:8e:ac:a7:47:c4:
9e:90:02:d0:08:93:ad:2a:96:52:52:c1:6b:d3:da:
b2:7a:2a:a8:1d:b3:df:60:de:0b:d9:2e:6a:e7:3a:
84:d2:0b:6a:c0:e5:83:fa:14:b0:e9:9d:07:4e:6a:
24:69:59:44:a1:dc:17:4c:8a:9a:69:d3:74:7f:21:
39:6f:c4:ae:f4:bc:bc:da:00:1d:0b:cb:2f:ef:bf:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:37:09:60:B7:4F:4F:B8:B7:64:1D:EC:6E:8B:9B:45:B9:B1:29:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C464A8211811F082602BDADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.35.0/24
154.94.49.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:74:0e:b0:5f:a1:28:ca:26:ec:72:49:5b:ad:1a:25:b5:85:
25:ae:37:58:89:f9:cd:c9:01:1d:a8:4a:f2:f9:b2:c4:3f:a7:
1c:95:7e:78:80:80:cc:54:ae:da:32:40:7b:8c:a9:fe:ae:ba:
d8:ab:b5:90:f5:8f:42:a4:8c:30:e1:a1:b3:f1:43:75:76:0e:
d2:4b:30:ae:de:eb:26:95:a3:05:ee:a2:42:1a:98:11:01:05:
1f:d4:df:4d:8c:85:c9:0f:57:ad:d1:34:25:b6:ae:37:7e:70:
8b:12:1d:31:77:c2:48:5b:4d:43:47:ba:6b:42:98:87:19:19:
87:e8:c9:cf:6e:fd:0f:b8:35:08:cf:04:a0:cf:96:a9:f5:d1:
d3:db:ca:29:38:c9:4f:0d:10:66:b6:81:4e:3f:75:37:0c:7d:
2e:ef:26:e1:df:e6:a9:d5:f5:0b:91:a7:89:c5:f6:af:8a:c6:
79:04:8d:87:c1:49:3e:b7:a9:32:20:42:b9:f2:61:21:71:c1:
85:c4:61:38:67:01:af:3a:9c:c8:3b:cb:18:12:4c:84:41:4a:
25:92:6e:bf:94:a6:29:36:ab:1f:5a:40:d1:d0:f8:70:6b:f5:
e6:a0:e3:bd:34:a1:cc:96:ba:65:25:92:f6:a0:94:31:c9:2b:
31:a2:98:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:48 2025 by rpki-client on console.sobornost.net