Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D3F579E15EB11F09D7832CC6DB8BCC6.roa
File: 7D3F579E15EB11F09D7832CC6DB8BCC6.roa (raw, json)
Hash identifier: 8qYazOtR5BA3GLeMWJkCfiGgPaQuJFZkKEbZMfVL5NQ=
Subject key identifier: 4C:7D:B0:4B:5C:1C:28:0D:98:10:33:F7:14:83:CE:6C:AD:CC:3C:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D3F579E15EB11F09D7832CC6DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:09:21 +0000
ROA not before: Thu 10 Apr 2025 09:09:17 +0000
ROA not after: Fri 16 May 2025 09:09:17 +0000
asID: 394432
IP address blocks: 154.196.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96441 (0x178b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 09:09:17 2025 GMT
Not After : May 16 09:09:17 2025 GMT
Subject: CN=67f78ac1-d904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:ca:8a:4f:6c:cd:6e:04:c8:73:94:12:f7:
e7:da:bc:4a:a2:4f:2a:a9:e7:28:fc:ee:06:84:f7:
d5:d2:11:16:49:ed:01:b4:42:8b:d6:17:3c:55:92:
a6:4a:88:05:16:53:c4:42:02:72:0a:92:2a:2a:78:
0f:48:d6:57:fd:22:b5:a3:42:e8:91:8a:bc:76:04:
ce:6d:9c:d2:58:bf:d8:2a:5b:46:5c:74:a6:2d:9e:
9e:e0:a1:7c:ac:f4:3c:c3:ab:73:8f:a9:ef:84:af:
87:87:72:67:38:11:3f:b0:93:62:33:aa:08:53:39:
c7:40:0a:14:e4:15:6a:e5:51:39:c3:08:d8:4a:8c:
00:00:64:4f:9d:b2:82:38:42:b3:1c:ca:7c:8c:4f:
a8:94:20:4f:f5:cf:d6:65:5e:2d:96:72:3c:b3:47:
f1:42:5f:ce:ca:f5:b1:27:1b:b3:f9:9a:5a:76:69:
03:b9:5b:b8:8f:30:e6:41:56:03:0f:a5:24:a4:45:
68:4b:d2:4d:8a:53:25:5f:60:05:ab:53:4f:a4:da:
9e:60:b8:6f:98:1c:f3:f2:88:27:35:df:8b:fe:35:
81:f0:aa:e2:37:69:1c:39:76:87:6b:0d:9d:aa:3d:
4c:17:1e:cd:89:81:33:83:55:bf:67:ed:bb:d0:5a:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:B0:4B:5C:1C:28:0D:98:10:33:F7:14:83:CE:6C:AD:CC:3C:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D3F579E15EB11F09D7832CC6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.192.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:1b:26:13:7a:97:80:31:db:7c:f4:b3:7d:63:7c:44:58:eb:
87:9f:86:5b:6d:b3:68:79:cf:bb:e2:97:58:da:2e:f2:e5:0e:
c7:a4:0e:b8:91:af:87:b1:0d:72:ce:d9:d9:97:9f:64:27:e9:
cf:a5:72:e9:c1:8b:fa:dd:dd:15:94:1b:1f:3c:17:76:0a:bf:
33:83:e1:6c:f7:3f:07:cc:27:a9:b4:79:f0:6a:98:ed:fa:51:
ee:e3:32:66:eb:80:56:a2:98:d8:34:42:54:28:d3:87:28:a6:
2a:b0:d2:23:ab:c7:18:76:1f:bf:5b:5b:c0:68:fa:91:37:31:
fe:2c:5a:3a:3b:7d:f7:10:99:64:b2:63:6b:e8:1e:8b:08:a9:
48:9e:a7:0d:2f:20:7c:ec:9d:6c:a0:b8:6a:6b:e0:b4:52:61:
10:c9:57:b1:d5:82:e3:24:9d:ab:5c:89:a6:76:7e:c5:b2:d1:
a2:e7:13:de:17:a2:c8:a5:63:64:fe:ed:7b:a7:f8:af:2e:63:
1c:79:35:02:32:99:b9:ee:f2:8c:0d:fe:e6:ba:9e:a5:a1:0e:
20:8e:b5:3c:de:6f:2b:4c:7b:12:58:73:11:a6:58:b8:15:f5:
ee:04:00:d3:b0:a3:3a:a9:b1:0e:b6:c4:cf:58:fe:a1:a4:14:
8d:2b:0b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:18:04 2025 by rpki-client on console.sobornost.net