Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BEB3501C5711F0A6A13B90DAE4EC9C.roa
File: 69BEB3501C5711F0A6A13B90DAE4EC9C.roa (raw, json)
Hash identifier: XhOHXl/+dnxr2BRTvtc4ytsxlLwmgGfFZ+ywVxfZEH8=
Subject key identifier: B8:1C:33:FD:35:42:34:88:7A:B7:12:3F:E5:B0:5C:01:35:8A:84:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01798D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BEB3501C5711F0A6A13B90DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 13:17:01 +0000
ROA not before: Fri 18 Apr 2025 13:16:57 +0000
ROA not after: Sat 24 May 2025 13:16:57 +0000
asID: 8796
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96653 (0x1798d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 13:16:57 2025 GMT
Not After : May 24 13:16:57 2025 GMT
Subject: CN=680250cd-81a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:d1:47:7c:03:50:11:21:82:74:8b:0d:ed:
2a:f9:8b:14:1d:b0:84:2b:e4:33:85:25:82:0c:e6:
f8:d2:c7:b9:9d:e5:b6:06:e7:81:6b:ff:b7:72:dc:
3d:6b:ec:b6:ed:a8:9f:b8:3d:53:1e:33:5f:d6:dc:
28:c7:17:6e:9b:d6:8f:e4:39:01:34:51:31:9c:f0:
ef:f6:3e:b6:37:72:08:63:52:68:ef:15:be:27:6a:
9c:88:da:5e:12:dd:b5:fc:9f:ce:b3:aa:ae:93:ba:
39:3c:68:ac:15:50:38:e3:89:8b:93:a0:8d:cc:5d:
fc:b0:60:b9:50:74:84:18:07:97:51:2c:6d:af:04:
03:94:2f:da:1e:05:c5:b8:39:b5:29:46:77:9c:44:
47:1b:24:92:1b:25:58:5f:34:56:dc:9c:46:03:ae:
f5:52:6d:af:18:dd:2f:c0:f8:88:cb:46:d5:8e:76:
e7:d3:19:ea:12:3f:c7:2b:4f:63:3a:4f:7b:39:45:
58:2e:0f:dd:6e:96:a4:e2:b2:58:f0:85:2b:01:db:
8a:06:e1:48:86:d5:dd:a9:6c:ce:ed:49:3d:42:8e:
82:28:f3:f1:e2:d0:a8:64:c0:3d:5c:10:37:bd:4c:
d9:69:7e:75:2b:ce:3e:47:eb:4a:28:2f:4c:9e:e9:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1C:33:FD:35:42:34:88:7A:B7:12:3F:E5:B0:5C:01:35:8A:84:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BEB3501C5711F0A6A13B90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:9e:58:dc:1b:ea:b0:5f:7a:cf:44:4e:49:30:05:45:ad:41:
16:4f:3f:4e:85:ab:26:8c:f4:0a:cf:c6:fe:4f:5a:ba:de:fd:
ba:76:f8:46:98:6f:17:27:e2:bf:90:85:e8:20:b5:78:f8:a8:
7a:8b:2e:b9:16:cd:de:ee:36:db:ec:06:6d:4a:ab:76:ff:87:
a1:b7:c3:28:d4:8e:22:79:0c:d5:1e:e2:45:77:06:b8:05:40:
72:67:d9:49:42:91:65:6a:b3:9d:a6:1b:b8:2b:cd:5a:4b:a0:
d2:03:fc:c3:4d:67:96:1b:26:5a:5f:de:80:d1:58:20:95:48:
22:1b:6a:e2:a2:2d:fd:dc:fc:d5:bb:54:2c:6b:c9:98:7e:e0:
2a:f7:b6:55:dd:27:e0:78:c3:64:1c:99:59:d9:f4:9f:2b:76:
b3:74:fe:2d:30:7f:5b:5f:41:52:a7:30:c5:09:a3:c9:8d:f0:
fc:ed:e2:ab:86:98:0e:ed:2f:1a:b9:f2:c0:89:5b:19:a1:aa:
e3:5f:92:75:69:4f:74:e8:7e:86:56:e2:36:87:d9:2b:45:02:
08:ce:c3:fe:9d:a9:17:af:56:ab:bc:ce:f7:48:28:9c:92:9b:
ff:45:43:b0:bc:78:67:70:f5:ce:98:55:26:c5:4a:d3:dd:bd:
28:b4:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:42 2025 by rpki-client on console.sobornost.net