Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FFAA3DE15F211F0837849FA6DB8BCC6.roa
File: 6FFAA3DE15F211F0837849FA6DB8BCC6.roa (raw, json)
Hash identifier: pT13QnTvu39SEZKjiLDaVxlAmi4SGs8eS8SAqoNQD5g=
Subject key identifier: 8C:B5:81:BF:B5:68:D9:CB:D8:38:A2:B4:6B:48:F7:86:6E:0C:70:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FFAA3DE15F211F0837849FA6DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:59:05 +0000
ROA not before: Thu 10 Apr 2025 09:59:02 +0000
ROA not after: Mon 19 May 2025 09:59:02 +0000
asID: 6079
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96453 (0x178c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 09:59:02 2025 GMT
Not After : May 19 09:59:02 2025 GMT
Subject: CN=67f79669-32d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:a6:7b:47:72:37:c4:fe:ab:83:da:d1:8d:
e0:c5:1e:9a:3e:a8:07:d5:4d:ef:30:31:e2:59:3b:
32:15:6a:2b:44:1d:ca:d3:b1:8a:61:e0:62:ec:c7:
be:a2:58:5f:50:38:09:dc:66:5f:d7:5e:87:de:0a:
94:a8:a8:09:d4:af:4b:95:75:15:a6:5a:21:33:8a:
84:86:33:ee:bd:59:ea:f4:02:6c:0a:4c:2b:7e:82:
18:76:2e:51:b7:6f:5e:7f:89:c0:c4:16:54:10:45:
29:b8:05:75:89:ea:8d:25:f7:e6:92:76:ec:1a:05:
50:af:d1:f3:9d:ab:56:cc:b8:f4:56:32:c3:b2:3e:
3c:3f:03:43:e1:76:e2:ad:8d:74:d1:dd:96:99:67:
4f:39:92:bc:8f:3d:df:55:9a:cb:7e:4e:73:f6:42:
e0:fd:18:54:4b:a5:49:aa:e3:6b:12:af:c4:10:1f:
6c:a9:dd:a0:64:22:30:79:dd:ef:54:fc:78:3d:f4:
cf:c5:f5:b3:a6:ac:3f:74:90:89:2b:75:4e:16:bb:
1e:4d:e1:21:dc:60:75:bd:81:f3:d2:d0:f3:7c:14:
cf:84:fc:ef:fb:24:f4:fa:da:dd:fe:18:a3:61:44:
ab:b1:13:09:cd:51:55:a5:e3:d5:dc:0b:27:e3:d2:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:81:BF:B5:68:D9:CB:D8:38:A2:B4:6B:48:F7:86:6E:0C:70:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FFAA3DE15F211F0837849FA6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
c3:cb:db:8e:f7:1a:73:d5:90:ab:4c:4b:2a:1d:e3:2f:f2:72:
a0:e3:9d:05:3c:b6:f2:62:3f:d6:f0:48:4c:c9:b3:52:ad:8a:
94:65:5b:f3:69:c6:20:51:71:1d:52:02:f6:c3:f4:c5:b3:0d:
f9:19:ce:5a:31:8d:51:09:b2:cb:b7:ca:78:aa:c8:35:73:ef:
68:db:4b:88:8d:c6:a9:0a:64:08:26:35:e8:e6:b2:23:22:d1:
ec:e8:ee:9c:32:d8:af:a9:43:bd:cf:b6:2b:4c:82:70:04:34:
49:3b:ee:a3:2a:a9:34:ec:75:4c:88:03:a1:bb:7f:27:54:b6:
6e:a4:1f:dd:06:9c:53:27:7e:bd:28:d6:cf:f1:01:fe:85:d3:
a6:23:f3:04:20:5c:2b:b9:12:97:41:1b:52:6e:c6:9a:79:b0:
4f:bb:84:fe:1e:5a:d9:68:f5:61:0e:20:50:fa:e2:da:93:f3:
ce:68:4e:20:c7:a0:a1:af:16:15:24:3d:2e:e3:6f:a3:b1:d4:
01:54:ea:b1:0c:9d:c3:12:63:0e:6f:d5:23:56:94:4f:23:99:
7b:59:7c:b7:8d:42:92:b5:66:70:ef:7c:69:15:b5:6f:36:11:
ca:21:e9:9a:c0:5c:e0:b7:36:57:c3:af:7e:8b:bb:93:3f:f2:
45:d2:03:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:03:57 2025 by rpki-client on console.sobornost.net