Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68437D06245B11F08BEBBCABDAE4EC9C.roa
File: 68437D06245B11F08BEBBCABDAE4EC9C.roa (raw, json)
Hash identifier: mXFW72wt+lWs07F1CcWoPTpXVqFcnq/DyMHEy//63zo=
Subject key identifier: E9:19:E2:CD:55:93:DF:0D:5B:A9:C8:8C:83:80:BB:61:64:E4:8F:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68437D06245B11F08BEBBCABDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 18:05:46 +0000
ROA not before: Mon 28 Apr 2025 18:05:41 +0000
ROA not after: Wed 04 Jun 2025 18:05:41 +0000
asID: 202656
IP address blocks: 154.219.224.0/24 maxlen: 24
154.219.225.0/24 maxlen: 24
154.219.226.0/24 maxlen: 24
154.219.227.0/24 maxlen: 24
154.219.228.0/24 maxlen: 24
154.219.229.0/24 maxlen: 24
154.219.231.0/24 maxlen: 24
154.219.233.0/24 maxlen: 24
154.219.234.0/24 maxlen: 24
154.219.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97365 (0x17c55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 18:05:41 2025 GMT
Not After : Jun 4 18:05:41 2025 GMT
Subject: CN=680fc37a-3007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:6d:ae:bb:bb:fa:85:55:7e:84:b6:1f:ed:
f5:38:d7:ad:57:8b:0b:f6:d3:73:74:eb:5c:18:72:
8a:3a:1d:58:0e:56:92:95:10:bd:89:25:83:6f:5f:
dd:ae:6c:f2:eb:d2:6b:42:bf:1e:b2:b5:53:7d:06:
a3:9d:15:d2:b7:57:29:86:64:ae:75:e0:a9:db:5a:
f6:1e:d7:88:05:8b:57:b6:79:a2:91:18:9c:d5:28:
db:9d:7f:fd:bd:1c:7b:d3:19:87:50:ad:c3:e2:4d:
d1:fa:f2:6c:8a:b2:9b:e4:db:a5:b4:f4:c9:0a:4f:
db:cb:ad:56:85:5d:ff:fe:a4:28:ba:c4:ac:ee:a0:
7d:fc:43:a9:8c:0f:b5:1b:02:a5:32:d0:61:45:55:
e8:bb:80:fe:38:7d:da:77:bd:f8:eb:f1:3e:fe:e3:
e7:31:93:2e:c0:78:f1:cf:73:dd:75:80:1d:d0:32:
22:7d:9b:d5:76:ee:cd:d6:88:e4:fa:0e:1b:11:70:
73:eb:33:96:4d:d6:ef:57:84:67:00:b1:23:62:75:
2d:56:01:d2:c9:22:97:0e:6c:e9:2a:5f:0d:de:b5:
0c:3b:8e:a8:6a:28:e1:72:d5:14:c2:bc:f8:d3:2c:
b8:f7:1e:d0:39:85:57:29:6d:cc:9d:a3:b3:6b:48:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:19:E2:CD:55:93:DF:0D:5B:A9:C8:8C:83:80:BB:61:64:E4:8F:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68437D06245B11F08BEBBCABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.224.0-154.219.229.255
154.219.231.0/24
154.219.233.0-154.219.235.255
Signature Algorithm: sha256WithRSAEncryption
0e:bd:51:d9:ff:f4:83:f8:8f:34:a2:5c:eb:4a:a3:a7:24:6d:
c9:7c:a5:42:f2:ad:08:a1:60:10:7c:0d:1d:00:57:24:7a:47:
7a:12:3a:1f:de:ce:0b:77:d6:25:3b:78:9d:a1:bc:62:11:40:
af:30:d2:22:ba:f8:fa:d6:9d:6f:9a:e6:a5:1d:31:2f:da:2d:
fb:6e:96:fc:40:38:5b:bb:0f:f1:d2:d0:c3:c2:c2:de:c7:e9:
90:d9:df:ce:d9:77:4a:ad:a4:2d:c0:06:bf:4e:fe:8c:a2:77:
be:df:d9:1d:35:0f:ae:55:6c:91:7b:71:c5:51:86:d0:5a:10:
73:11:cf:0e:4e:25:bb:80:84:bb:d5:4b:cd:72:4e:9e:32:0f:
0d:97:13:2d:64:82:e1:7e:4e:aa:52:ae:2c:6f:53:52:2f:d9:
de:13:e6:c3:d2:b0:a9:31:7a:81:69:0e:21:d7:77:d7:d7:af:
70:ea:98:18:37:c2:bc:3e:a1:00:cf:54:83:25:16:f0:7a:6f:
be:1e:45:0d:e0:ee:00:93:07:b4:68:06:47:a3:f0:ef:48:b2:
72:bf:a1:ee:8e:bc:43:8f:83:ea:43:3a:da:0e:2e:54:a9:6f:
95:b2:05:29:10:e5:97:02:14:b5:59:ea:91:0a:a2:1d:5b:9b:
37:73:af:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:49 2025 by rpki-client on console.sobornost.net