Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81144D0E13B411F0A7BBB952762E951A.roa
File: 81144D0E13B411F0A7BBB952762E951A.roa (raw, json)
Hash identifier: g9DF3qoDJpbLW6xtbVaS+kONCkwAblU3aJR+9nDoauk=
Subject key identifier: AC:70:9B:EA:D6:5F:21:63:4E:AC:B5:46:FB:C5:48:44:02:8F:4C:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81144D0E13B411F0A7BBB952762E951A.roa
Signing time: Mon 07 Apr 2025 13:30:43 +0000
ROA not before: Mon 07 Apr 2025 13:30:39 +0000
ROA not after: Sun 04 May 2025 13:30:39 +0000
asID: 211590
IP address blocks: 154.83.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96244 (0x177f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 13:30:39 2025 GMT
Not After : May 4 13:30:39 2025 GMT
Subject: CN=67f3d383-fc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:f7:16:a4:e6:bd:f4:82:c2:e2:76:e6:31:
45:70:ad:b4:31:ff:a8:87:87:bb:e8:0f:87:6c:7b:
ab:55:71:85:38:ab:3d:c2:33:5b:f9:d5:52:d4:68:
76:f6:5e:39:f5:57:98:8e:30:ac:ee:a6:2b:83:b1:
de:f2:d6:6d:4c:fb:94:82:bc:31:35:ff:2c:71:2a:
30:96:70:c7:a3:88:29:87:98:e6:c0:86:e2:15:ba:
88:aa:9f:76:3b:35:ea:fd:09:8e:4a:c9:41:62:82:
e0:90:de:a4:ed:c8:35:3d:af:15:fd:10:53:e0:7a:
23:2a:90:c0:dd:5d:0f:8a:c4:65:41:fe:0f:43:b6:
a1:99:9c:fb:04:94:26:9d:c2:7b:72:23:8d:40:c0:
ce:fe:5e:08:6c:2d:56:4a:30:27:bb:b3:5f:38:c8:
ba:7b:80:a5:33:52:b5:e6:97:a5:5b:8d:29:03:bc:
11:43:f6:dd:a0:eb:89:72:09:e8:22:06:37:25:de:
5a:4f:28:1b:15:26:29:ef:ac:74:b7:fe:51:16:38:
ad:e1:0c:ef:e9:6f:9b:33:51:d9:90:1b:91:86:7a:
c9:7a:dc:38:3f:87:c4:e4:45:c8:87:da:93:47:6b:
10:80:cd:bd:4b:d2:dc:f6:ee:5c:e5:5e:74:bc:5d:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:70:9B:EA:D6:5F:21:63:4E:AC:B5:46:FB:C5:48:44:02:8F:4C:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81144D0E13B411F0A7BBB952762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a7:53:21:37:f2:b8:44:b0:13:8b:54:00:ea:42:b3:3a:e8:
cc:16:ee:89:f5:a7:04:6c:3a:66:24:0d:da:ee:b2:9d:16:f6:
57:cc:ad:3d:c9:ef:32:62:62:fd:da:2c:05:49:a1:64:79:45:
06:90:14:ec:a7:61:2f:ea:16:65:96:aa:73:46:53:6c:b1:0c:
03:1e:0f:d8:d2:ed:fb:99:00:19:a2:5f:b0:ce:b3:a0:a5:60:
59:4c:a1:db:6a:3b:1b:f7:b0:15:c6:35:16:29:3f:22:e4:08:
b8:38:29:35:42:ff:6b:2d:2d:94:c0:9b:58:38:c3:5d:e6:71:
ac:03:ff:cf:b7:98:82:f7:58:70:89:1f:08:42:1c:a7:31:6a:
ca:83:88:66:21:30:70:1b:83:ea:47:ab:8f:eb:3d:80:cb:2e:
1d:9f:a2:69:75:cd:81:91:d6:e0:4b:62:48:1f:35:73:13:9c:
61:00:eb:d9:2c:63:04:c6:bd:a9:02:dd:a5:75:94:06:86:8b:
f0:01:85:d8:e3:56:87:c0:dd:13:01:7d:09:15:29:0d:9b:18:
a7:bd:78:08:a0:ec:59:a5:a2:93:78:1a:68:97:40:b7:7d:50:
a8:48:af:a0:d5:f3:73:25:c9:9b:39:d8:4b:e2:87:e4:c1:93:
36:c3:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:56:25 2025 by rpki-client on console.sobornost.net