Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A8BBD84C3CA11EF8983EC9A762E951A.roa
File: 8A8BBD84C3CA11EF8983EC9A762E951A.roa (raw, json)
Hash identifier: ApUdNOg6ChFazHBnDM+CnF0jwQRiGZK1ZwQQHd9ce8A=
Subject key identifier: 8F:7A:D6:95:0A:7F:AD:D0:59:AE:60:7B:0F:62:7B:11:41:18:61:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A8BBD84C3CA11EF8983EC9A762E951A.roa
Signing time: Thu 26 Dec 2024 20:46:55 +0000
ROA not before: Thu 26 Dec 2024 20:46:51 +0000
ROA not after: Sun 12 Dec 2027 20:46:51 +0000
asID: 17561
IP address blocks: 154.83.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75774 (0x127fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 20:46:51 2024 GMT
Not After : Dec 12 20:46:51 2027 GMT
Subject: CN=676dc0bf-ddc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:14:cd:6c:eb:3c:a8:fe:b4:db:00:6b:67:
c7:4e:c0:4e:9b:f4:a6:e6:aa:46:10:cb:83:e2:f5:
eb:e7:32:3d:78:64:a2:2d:05:b9:8f:6e:24:31:b8:
61:b6:81:19:11:eb:5c:73:7e:af:08:ce:6c:b0:ce:
ff:ec:85:3d:d2:db:9c:ec:0f:e7:26:45:37:17:6f:
78:d9:34:c9:8e:7c:24:45:6c:85:61:96:ab:94:a5:
d4:e4:92:3a:03:b2:ea:4c:3e:f2:b5:65:36:51:4d:
4b:1c:ef:a1:86:67:0c:5d:8a:09:99:8f:8d:c4:2e:
55:32:8f:2b:85:fe:2f:55:fe:7b:46:e1:2e:84:93:
2a:db:64:62:21:74:a1:96:19:6d:f9:66:91:63:01:
ec:e0:4e:3f:30:2a:48:b7:2a:6a:d6:e2:b9:02:4c:
45:76:96:7f:71:56:ea:e9:cb:c8:12:4c:83:9b:a7:
3a:6c:ba:1f:17:fb:23:91:24:2d:38:84:a7:84:2c:
3c:ae:b7:52:54:6d:e4:f4:e9:f3:67:99:83:9f:8d:
50:ba:12:ae:46:59:e6:6c:f0:2c:2d:78:9b:d1:38:
35:6c:c4:0d:44:cd:a2:87:d7:56:b4:d3:3a:cf:12:
28:20:64:1a:06:e1:6a:e9:ec:ac:0d:96:9f:8e:40:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7A:D6:95:0A:7F:AD:D0:59:AE:60:7B:0F:62:7B:11:41:18:61:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A8BBD84C3CA11EF8983EC9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.148.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:92:66:c1:3b:fa:49:44:02:ac:86:30:51:32:c8:88:22:ab:
8a:5f:f9:1f:38:8b:fb:7f:67:8e:9e:7f:d0:e5:e0:a1:3a:2b:
a2:07:46:a3:02:4c:82:d0:30:89:b6:45:bc:e4:16:d4:30:0a:
df:a1:4f:7e:0d:1c:76:71:e5:dd:f3:44:3b:dd:39:03:d7:e6:
b8:47:1f:36:81:9d:42:a9:e8:96:17:a9:c1:9f:cf:ed:be:37:
f3:0c:b0:47:77:6b:6e:b5:74:b8:9f:bb:73:95:21:9c:b4:b8:
9d:20:45:08:06:38:22:d2:b0:a4:c1:fa:50:50:ed:ab:e6:1d:
8e:1a:99:05:e5:04:7a:67:6e:82:3e:e2:a3:49:96:15:85:78:
f6:cb:4c:fd:8f:f7:a1:1a:e0:f4:14:a3:95:08:32:90:1a:2f:
f1:1c:ea:17:fd:51:e3:d6:5e:c1:8d:2c:64:f9:b9:ca:c3:1d:
14:10:60:6a:87:4f:22:09:e8:4f:99:f2:f3:3d:7b:65:b0:5d:
43:e9:86:2e:17:74:c2:d5:2a:91:48:fd:17:1d:44:53:5d:4b:
5d:fb:00:d4:27:85:1b:05:13:a3:f2:b4:c4:1e:fc:fd:ab:9f:
79:67:dd:bf:9a:0f:92:ad:7c:33:ed:f8:4a:af:cd:1c:75:81:
06:c6:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:18:08 2025 by rpki-client on console.sobornost.net