Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77FA8C9213B911F0BDC6226F762E951A.roa
File: 77FA8C9213B911F0BDC6226F762E951A.roa (raw, json)
Hash identifier: dx8AKy3xsPPgjdUYc5f0LG1KMH4LrGAbTzAfayPAWdI=
Subject key identifier: 8C:2A:E8:E3:F6:C6:C8:2B:3D:71:DC:F7:43:F0:EF:41:FD:C4:73:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77FA8C9213B911F0BDC6226F762E951A.roa
Signing time: Mon 07 Apr 2025 14:06:15 +0000
ROA not before: Mon 07 Apr 2025 14:06:11 +0000
ROA not after: Tue 06 May 2025 14:06:11 +0000
asID: 20473
IP address blocks: 154.196.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96248 (0x177f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 14:06:11 2025 GMT
Not After : May 6 14:06:11 2025 GMT
Subject: CN=67f3dbd7-8ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:37:de:eb:04:98:75:92:d9:ae:0c:75:3a:
bb:9e:64:9c:a7:62:de:5b:f9:53:e9:88:17:fd:b8:
50:bd:be:30:7d:e3:7a:2e:2f:47:0a:d8:d6:8d:9e:
94:40:7d:f7:e9:cc:23:78:ab:70:46:b0:ab:91:da:
8a:f0:a5:ca:44:1c:c4:fe:98:09:f2:dd:24:64:b0:
0a:fb:f7:24:11:c8:bc:c1:0a:50:b5:bc:56:e3:19:
9f:4c:c8:89:0d:c8:6a:c3:1a:ab:32:32:d1:31:e7:
ed:d4:bb:38:84:e9:0b:cf:23:6e:ab:c3:be:25:7b:
cc:40:15:f3:a7:dd:6a:1f:00:2e:65:5e:23:ca:1b:
12:96:9f:8f:50:e4:b3:fe:d7:34:c0:96:9d:5d:9d:
df:1e:4e:b8:30:3c:58:4c:4f:5c:28:45:5d:b1:8a:
91:4c:51:64:54:51:3c:ca:fa:02:ae:22:44:e9:b8:
f7:02:a5:8d:8a:41:d5:c6:4f:f0:68:3f:54:b5:76:
4a:6e:b3:e7:66:73:cd:d6:62:51:37:8b:d5:6c:6e:
3c:d5:73:7b:c9:02:d9:8e:01:d2:ad:24:9e:9a:3d:
a0:ef:aa:f6:e9:17:a0:0e:0f:a6:b0:6b:db:ca:66:
80:00:22:e0:9b:d8:79:17:e4:af:d3:03:cb:6a:02:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2A:E8:E3:F6:C6:C8:2B:3D:71:DC:F7:43:F0:EF:41:FD:C4:73:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77FA8C9213B911F0BDC6226F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.165.0/24
Signature Algorithm: sha256WithRSAEncryption
08:40:46:3c:c0:00:90:bf:36:28:bc:a7:7b:af:c5:67:f3:2d:
9d:5a:37:78:d4:ea:18:65:2b:03:e0:ea:36:e8:18:27:dc:33:
8e:5a:2e:16:97:8d:ef:4f:a0:57:57:96:9e:78:92:3e:5a:7e:
f7:6f:35:bd:47:d3:f4:1f:68:ab:89:3b:a5:e2:65:87:56:47:
44:d6:65:f1:b9:af:4a:10:81:9f:c5:e5:a5:f9:58:92:3a:dd:
84:02:82:97:ae:03:0f:21:85:f6:e1:92:40:e1:2d:57:f1:3f:
a1:44:86:6a:de:7d:ab:e0:ea:94:7d:31:56:10:2b:b5:85:e5:
c1:a4:d3:79:01:7b:f3:15:9f:23:96:f3:58:78:0a:d4:58:a1:
6f:78:11:22:e4:a5:59:2e:a6:a0:77:70:59:35:6e:9c:e0:be:
f9:39:09:86:8f:11:42:b6:3a:a0:1d:d0:a0:07:8f:0e:67:32:
d6:29:7b:d0:c8:77:46:24:77:51:a0:cd:d6:5f:28:63:cb:f6:
1f:26:fc:53:40:4f:0a:44:14:0c:d3:ec:2d:80:a6:4c:f7:0d:
d3:cc:6c:fd:b3:f7:4b:f8:fe:2f:d8:6c:98:cf:8f:d6:3e:fe:
ba:53:03:52:19:b9:2d:fe:11:2a:95:fa:4a:30:82:60:ef:88:
11:f5:78:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:00 2025 by rpki-client on console.sobornost.net