Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73136D8E1A8F11F08A3094D66DB8BCC6.roa
File: 73136D8E1A8F11F08A3094D66DB8BCC6.roa (raw, json)
Hash identifier: P/4eW8iqTXHRdAGeUgrBM55B065EXb/RtnGTkxNaLpU=
Subject key identifier: B9:24:DE:D5:F7:55:F8:42:2B:52:8C:CF:75:51:A2:AD:DE:EC:D6:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01795C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73136D8E1A8F11F08A3094D66DB8BCC6.roa
Signing time: Wed 16 Apr 2025 06:53:06 +0000
ROA not before: Wed 16 Apr 2025 06:53:02 +0000
ROA not after: Mon 19 May 2025 06:53:02 +0000
asID: 202736
IP address blocks: 154.88.53.0/24 maxlen: 24
154.88.54.0/24 maxlen: 24
154.88.56.0/24 maxlen: 24
154.88.57.0/24 maxlen: 24
154.88.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96604 (0x1795c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 06:53:02 2025 GMT
Not After : May 19 06:53:02 2025 GMT
Subject: CN=67ff53d2-7475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:2f:51:7a:9b:6d:88:70:30:e3:69:18:1e:
e0:59:f0:6d:2e:28:86:5e:f9:ea:a2:2d:43:4b:58:
8e:f6:ae:5a:d4:da:be:01:f8:fd:df:62:27:57:e7:
08:e9:25:28:df:8d:ce:17:4d:04:75:30:0e:43:27:
90:26:2a:14:e2:82:d4:5b:1c:e6:0f:46:0c:cd:23:
50:93:17:f8:19:97:1d:32:3d:b2:4e:31:27:aa:7c:
8a:8c:a2:7b:67:d0:36:d7:f9:80:2e:ce:ea:6a:23:
89:cb:b3:d6:e2:47:5e:c9:4e:55:6f:0d:58:9b:20:
77:86:6f:39:0c:c2:0a:bf:42:c6:93:f4:d7:d1:10:
6f:66:b2:80:ff:83:6f:4e:a1:1f:d8:71:6b:a5:91:
14:22:71:e4:7c:6f:fb:43:bc:f4:33:2a:2d:c3:fe:
49:3c:66:00:9a:a2:05:30:11:b6:5b:b6:91:31:26:
bc:a8:95:41:a4:f3:9f:8c:75:82:7e:9e:8a:5c:9a:
97:21:1c:be:90:aa:fc:6c:a0:e2:2e:31:84:f5:8c:
c8:b7:ca:5b:cd:f5:d5:7e:18:e4:7c:45:a4:a5:2b:
14:be:1c:4d:b9:7a:3a:97:29:1e:2c:31:f0:5b:2c:
c1:a6:45:b1:64:7d:b4:c0:e0:b9:49:66:a2:ad:3f:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:DE:D5:F7:55:F8:42:2B:52:8C:CF:75:51:A2:AD:DE:EC:D6:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73136D8E1A8F11F08A3094D66DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.53.0-154.88.54.255
154.88.56.0-154.88.58.255
Signature Algorithm: sha256WithRSAEncryption
0a:3b:88:66:79:78:e1:6f:53:bb:6f:a2:87:25:c7:bf:59:6f:
db:e3:7e:a8:67:10:c7:db:b7:44:51:37:d1:c6:ef:5e:f5:7d:
20:d1:98:a8:fa:ff:55:08:d7:d1:3a:bb:b5:7e:be:2d:c9:de:
c3:d1:5c:f3:f6:3b:5e:50:ee:88:7e:4c:bb:1c:e3:de:f0:27:
6b:9c:2b:3b:f1:41:e4:da:e4:d3:45:41:d3:23:ae:b8:2d:81:
c8:59:c2:ee:98:c7:a4:d2:90:7f:74:19:0b:b7:32:60:c9:c3:
9e:c8:0d:5e:8e:4b:8e:c6:10:64:cd:77:80:86:3a:7b:df:e5:
3f:a7:a7:13:78:50:7f:20:f2:fb:03:6c:c5:1d:75:44:8d:e6:
4b:86:a6:e3:05:07:ef:82:ca:c1:8c:67:73:bb:2b:29:26:64:
80:b3:ee:e6:0f:50:1a:6b:62:88:49:43:b2:67:19:67:e0:b7:
1d:0f:e5:a0:28:82:c7:06:81:58:6a:71:64:47:4a:6d:4e:fd:
61:2a:a5:90:24:fd:2a:4a:6a:f3:e8:17:40:d4:3f:e9:9f:5d:
e2:84:53:c2:66:db:ac:31:37:54:17:80:30:e4:53:d2:af:44:
30:ef:7a:a0:d3:ee:43:9c:8f:68:4f:90:e6:10:8c:05:53:4a:
36:d1:71:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:56:07 2025 by rpki-client on console.sobornost.net