Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/793A407A1C9711F0A64397B4DAE4EC9C.roa
File: 793A407A1C9711F0A64397B4DAE4EC9C.roa (raw, json)
Hash identifier: KW8FlMAfSVqiZfPJJj+EO2DEmFYppo8LAZCR2cJAzeM=
Subject key identifier: 48:1A:71:BA:89:06:51:A9:D3:C0:D1:58:E3:E7:E6:59:4B:8C:CF:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/793A407A1C9711F0A64397B4DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 20:55:35 +0000
ROA not before: Fri 18 Apr 2025 20:55:30 +0000
ROA not after: Fri 30 May 2025 20:55:30 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
154.194.73.0/24 maxlen: 24
154.194.74.0/24 maxlen: 24
154.194.89.0/24 maxlen: 24
154.194.92.0/24 maxlen: 24
154.194.93.0/24 maxlen: 24
154.194.98.0/24 maxlen: 24
154.196.18.0/24 maxlen: 24
154.196.22.0/24 maxlen: 24
154.196.50.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
154.196.62.0/24 maxlen: 24
154.196.64.0/24 maxlen: 24
154.196.65.0/24 maxlen: 24
154.196.66.0/24 maxlen: 24
154.196.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96740 (0x179e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 20:55:30 2025 GMT
Not After : May 30 20:55:30 2025 GMT
Subject: CN=6802bc47-b8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:1d:6e:c1:bc:89:92:a3:3b:ee:02:be:00:
8b:31:2a:0c:d3:eb:eb:15:20:b6:a3:7f:97:70:07:
be:16:9b:50:3f:3f:f7:9c:38:71:72:ae:f7:39:d6:
14:f7:89:8a:b4:cd:45:c6:0f:7a:41:0a:69:67:42:
67:31:9d:57:ac:c4:6c:61:1c:45:fd:1a:67:85:ef:
6c:5a:7c:b6:69:e4:2a:02:2a:18:bb:ea:c1:54:90:
86:f6:2b:9c:f1:56:28:56:4d:32:e5:66:6e:45:06:
65:d5:62:96:38:27:23:b9:f3:1e:17:ea:34:7d:bb:
32:bd:0b:59:6f:bc:8b:8e:c8:d8:e8:cc:cb:ce:32:
32:a0:00:e9:23:5c:df:2d:04:39:dd:63:52:89:5e:
9b:ac:b7:c6:c4:ff:a7:03:11:00:37:92:1b:df:18:
28:b5:60:f7:79:8e:b7:d2:59:9f:36:ae:8c:8c:c7:
8d:e1:48:e3:7e:89:83:47:3e:05:60:ce:d3:8f:a7:
ff:b4:2a:9c:6a:18:cc:c3:18:06:89:45:6e:e3:c7:
6e:3f:d1:b2:01:64:73:05:65:90:41:cb:d5:1c:1e:
7e:e0:e8:d6:67:af:4a:3f:f8:02:07:c0:89:38:f8:
ae:5f:0a:13:20:0c:8c:a5:fc:dc:9f:07:d3:aa:5b:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1A:71:BA:89:06:51:A9:D3:C0:D1:58:E3:E7:E6:59:4B:8C:CF:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/793A407A1C9711F0A64397B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0-154.194.74.255
154.194.89.0/24
154.194.92.0/23
154.194.98.0/24
154.196.18.0/24
154.196.22.0/24
154.196.50.0/24
154.196.57.0-154.196.62.255
154.196.64.0-154.196.66.255
154.196.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:48:8e:4c:eb:3b:b0:35:08:e3:05:21:9d:33:71:a1:5d:a3:
50:a0:63:81:4a:24:eb:87:b8:b6:b0:28:42:9b:81:17:7f:b1:
84:05:e4:25:0d:9d:21:82:78:50:38:13:b9:9e:e6:50:01:39:
3c:0d:4a:5b:ea:60:77:45:a6:bf:1b:00:4e:11:47:96:c1:2f:
eb:0b:6c:30:bb:3a:78:c8:e1:40:f2:c7:f4:de:99:a7:50:97:
ec:d3:ae:09:59:c0:ac:2e:be:f7:bd:c6:e9:fa:87:e2:83:cd:
b9:cd:83:83:44:f3:62:bf:cc:11:8f:a6:f7:8a:84:6a:c0:07:
a5:f5:b0:f8:28:ee:e7:ce:ae:9b:47:36:3f:b1:ae:a7:6b:ef:
de:85:6f:34:3f:43:60:4b:6e:b4:c1:6e:1b:a4:d7:ce:98:59:
df:a9:07:22:3e:5e:8f:91:b4:1a:3c:8e:2a:f9:4a:46:d2:fc:
0d:38:98:2d:8c:ff:1f:5b:81:19:c9:ea:8a:97:97:ea:05:f4:
76:e1:94:75:84:4b:29:d7:15:db:40:25:a2:1f:f6:e1:7a:03:
5c:bb:67:c1:65:38:cc:bc:36:50:97:26:3c:54:e9:6e:90:65:
35:7b:a2:31:cd:b5:e3:85:0a:81:38:1e:0e:1e:fb:60:b7:c3:
69:e9:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:47 2025 by rpki-client on console.sobornost.net