Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78B5C3AC245A11F097D387A4DAE4EC9C.roa
File: 78B5C3AC245A11F097D387A4DAE4EC9C.roa (raw, json)
Hash identifier: TA1ovhiMD41hFPAIfy9Y1m+t/H5yiv2kIWJ6QEiLHiU=
Subject key identifier: B8:3D:51:B0:95:C3:CA:38:EA:C0:8F:77:80:C0:03:00:37:8C:1D:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78B5C3AC245A11F097D387A4DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 17:59:04 +0000
ROA not before: Mon 28 Apr 2025 17:59:00 +0000
ROA not after: Wed 04 Jun 2025 17:59:00 +0000
asID: 202656
IP address blocks: 154.219.213.0/24 maxlen: 24
154.219.214.0/24 maxlen: 24
154.219.215.0/24 maxlen: 24
154.219.216.0/24 maxlen: 24
154.219.217.0/24 maxlen: 24
154.219.218.0/24 maxlen: 24
154.219.219.0/24 maxlen: 24
154.219.220.0/24 maxlen: 24
154.219.221.0/24 maxlen: 24
154.219.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97361 (0x17c51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 17:59:00 2025 GMT
Not After : Jun 4 17:59:00 2025 GMT
Subject: CN=680fc1e8-8e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:7a:e9:42:d2:d6:5f:03:9c:6c:a1:32:5e:
24:8d:1c:dc:16:ce:2f:a5:d2:bc:d0:74:f2:e3:06:
66:76:87:0c:70:69:2d:c0:6a:26:a3:0f:5a:00:72:
4a:cc:9e:10:d5:79:02:5b:7d:77:1a:f8:39:4e:ab:
97:36:b8:86:61:aa:63:e6:b3:b4:da:67:54:10:8e:
37:b5:a8:52:5b:43:36:c9:6b:c5:f0:02:23:e3:3f:
e9:e0:b9:8f:b5:bf:72:3b:29:c0:24:3c:c8:d5:e2:
4f:9a:be:58:04:90:7c:f6:19:c1:49:b7:ab:a1:73:
f8:e7:d3:72:b9:4e:b7:47:02:52:b5:0f:39:03:bd:
d5:90:d1:14:f4:52:18:47:24:04:ca:39:39:c7:e3:
b2:62:4c:52:c6:c7:0c:c4:a9:d2:a5:e3:3b:7e:28:
bd:fb:04:5c:c4:0f:0d:c6:7b:22:09:de:8d:04:c9:
93:a9:5e:18:0c:46:e3:71:6b:47:b8:0f:8f:52:7f:
7a:7c:ab:42:30:c0:d4:8c:ad:f0:23:b5:cf:f6:90:
bb:0a:03:7c:40:d5:2f:5b:40:1c:d9:03:38:d8:48:
2f:d3:09:b4:7c:0b:32:b9:80:1f:a3:8a:46:84:2f:
8a:b9:86:22:7b:e6:37:ad:0c:10:60:f8:7e:b4:8e:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3D:51:B0:95:C3:CA:38:EA:C0:8F:77:80:C0:03:00:37:8C:1D:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78B5C3AC245A11F097D387A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.213.0-154.219.221.255
154.219.223.0/24
Signature Algorithm: sha256WithRSAEncryption
35:07:44:2a:08:35:89:a5:05:b1:52:08:9c:58:ee:68:26:77:
96:25:4e:40:a0:85:a2:d3:4e:c4:ff:11:8f:95:77:12:bc:b8:
78:34:9f:c5:1b:0e:a7:25:2d:77:53:49:5a:9b:99:6a:57:41:
af:7c:49:20:40:9c:37:c7:21:b4:86:f7:f7:7c:02:c5:38:6c:
86:79:68:6e:1d:2c:61:0b:66:bd:df:7e:a5:58:ea:10:c2:85:
32:ec:44:b9:d0:14:81:7d:b3:58:39:27:61:77:6b:d6:f3:2d:
20:df:a9:1a:7e:f6:e1:d1:56:32:b5:19:08:76:c9:8f:c0:ac:
fd:80:9c:bb:a6:f9:85:4f:2f:38:5b:29:3b:64:ae:68:5c:3a:
e3:01:4f:46:79:3b:32:64:d8:c4:27:28:2c:01:36:45:a4:a2:
2b:a6:62:e2:b8:08:fa:34:74:00:7a:e6:5b:b5:06:0c:67:6f:
97:1f:23:bc:72:dc:a4:0a:65:a1:7e:13:99:2a:2b:7a:1d:be:
55:d8:3a:05:a2:be:12:11:1e:20:c0:97:f2:37:27:81:ac:97:
9e:63:fc:1d:29:a5:af:fc:73:e5:44:3b:da:ae:d5:99:5f:3d:
e3:65:c0:6f:da:99:c3:71:ac:03:64:8a:1a:57:05:2c:1d:dd:
bc:bd:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:56:14 2025 by rpki-client on console.sobornost.net