Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A25FBA01D0111F0849AAE85DAE4EC9C.roa
File: 6A25FBA01D0111F0849AAE85DAE4EC9C.roa (raw, json)
Hash identifier: ojR3LZIzAyHx5LsMDBPrD4F0UkyV73Wnx+LouKnEk2Q=
Subject key identifier: 9B:10:28:75:A5:A7:87:3B:B8:70:DA:11:90:A9:B3:4C:DF:98:89:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A17
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A25FBA01D0111F0849AAE85DAE4EC9C.roa
Signing time: Sat 19 Apr 2025 09:33:57 +0000
ROA not before: Sat 19 Apr 2025 09:33:52 +0000
ROA not after: Mon 28 Apr 2025 09:33:52 +0000
asID: 5065
IP address blocks: 154.86.104.0/24 maxlen: 24
154.86.105.0/24 maxlen: 24
154.86.106.0/24 maxlen: 24
154.86.107.0/24 maxlen: 24
154.86.108.0/24 maxlen: 24
154.86.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96791 (0x17a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 09:33:52 2025 GMT
Not After : Apr 28 09:33:52 2025 GMT
Subject: CN=68036e04-e6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:eb:2e:cc:93:58:73:d9:66:3d:e3:cd:26:
3f:25:1c:7e:ae:fd:23:5b:e0:d6:56:a6:76:26:1c:
bd:c8:d2:5f:a5:0e:20:03:3c:9a:7d:fd:65:99:ef:
97:99:79:b2:7d:c6:ac:95:d1:bc:a0:7b:ca:65:8f:
a8:71:b5:1d:ac:5a:01:2f:00:bb:16:18:f3:b9:62:
5c:e9:f5:18:97:23:28:92:f6:99:d3:c0:6f:06:c8:
24:37:ca:ee:2e:42:d8:1d:8d:2e:b9:07:db:ed:8e:
96:b5:20:91:98:e0:c7:53:0d:10:37:3f:b3:6d:3a:
08:16:da:e6:b6:91:2e:0f:cb:f2:aa:ea:a4:0c:43:
a1:c3:e7:44:d1:0f:bf:1c:54:89:f4:44:35:c9:d0:
35:42:04:06:b4:5b:3f:57:a5:ae:59:45:e4:8b:5c:
3d:98:a5:22:a0:27:fc:cd:77:52:b8:5a:cb:62:a0:
62:04:7d:c2:f8:3e:0f:5c:01:9b:6b:dd:23:bd:5a:
e9:5d:d0:c2:12:75:86:1a:72:b9:e6:89:b5:ef:89:
c8:0c:d3:14:ed:1a:0c:c2:10:56:4d:ec:07:7c:f9:
e6:35:e2:9b:6a:80:e6:b8:cb:1d:a7:7a:32:d4:a9:
e5:58:62:92:bf:99:7c:00:bf:86:9b:6b:e5:8c:d7:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:10:28:75:A5:A7:87:3B:B8:70:DA:11:90:A9:B3:4C:DF:98:89:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A25FBA01D0111F0849AAE85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.104.0-154.86.108.255
154.86.110.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e5:7d:85:a6:94:dc:ae:18:ea:58:97:c4:e5:8b:b5:05:bc:
8b:30:48:bf:e7:4a:ac:75:9d:8b:22:3a:ba:e0:88:52:c1:ed:
15:cb:83:d6:5b:45:7c:92:ec:6d:93:b6:d8:a5:64:2a:20:29:
e9:76:8d:c0:ba:94:a2:59:3d:d3:38:69:13:2a:3d:75:23:83:
50:a8:78:a6:f2:08:b4:77:2d:ab:17:c1:b2:0c:33:ae:ec:a7:
3f:f2:67:96:0f:4c:db:8f:a0:3b:0a:53:69:10:53:5b:cd:39:
4f:4b:49:de:6e:8f:78:34:eb:47:a7:29:a6:1a:a7:b2:62:5a:
95:a9:58:69:7b:f1:2d:5b:5f:59:d0:b9:25:a5:af:cd:ee:e8:
d6:55:eb:06:e3:f3:aa:65:e9:94:eb:e3:10:9e:3d:11:62:f0:
c7:e6:65:cd:62:0b:51:1d:40:b1:f7:47:be:56:e7:1b:d1:8a:
d3:67:a4:46:91:2f:33:55:36:a9:37:95:d1:be:cf:08:6f:0e:
56:ae:87:3b:b0:43:5c:51:f2:8b:3a:63:0e:29:c0:16:a5:48:
64:79:bc:36:95:df:de:22:ff:bd:f4:ae:3c:86:9c:64:a0:44:
53:59:a4:1d:92:77:8d:07:e4:18:b2:e8:10:0d:23:56:fd:b1:
76:c4:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:55 2025 by rpki-client on console.sobornost.net