Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B598CF01C5D11F0933D0BB7DAE4EC9C.roa
File: 8B598CF01C5D11F0933D0BB7DAE4EC9C.roa (raw, json)
Hash identifier: 32yEpZUFDNxVTdyt94BAcdPrJIYltwzDq8ZcYl1KPfA=
Subject key identifier: BD:86:96:92:00:62:E1:B9:2C:0A:52:32:DA:17:51:C0:60:29:D2:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01799F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B598CF01C5D11F0933D0BB7DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:00:55 +0000
ROA not before: Fri 18 Apr 2025 14:00:50 +0000
ROA not after: Sat 24 May 2025 14:00:50 +0000
asID: 55020
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96671 (0x1799f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 14:00:50 2025 GMT
Not After : May 24 14:00:50 2025 GMT
Subject: CN=68025b17-203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c0:43:06:9c:16:e1:81:35:ac:46:74:46:de:
b6:bd:4e:31:50:28:77:14:fc:40:04:7e:a6:6c:5f:
53:a2:ca:ca:a9:2f:b5:03:fd:14:11:ab:e0:4c:fc:
1d:5e:7d:e2:1a:85:4e:3b:82:5d:d8:24:5a:bb:68:
62:cb:dd:96:82:f6:86:6b:a0:56:0a:6f:bb:b9:4d:
0c:7f:94:b3:f4:ae:a4:af:e4:f3:99:d8:8e:f7:25:
1e:53:7f:9d:ba:ee:5d:b5:2e:f9:64:66:24:08:05:
e7:e9:e7:90:9d:11:57:41:78:00:fb:f2:ef:44:7f:
c2:61:4c:91:a5:c8:d6:36:99:75:2a:0f:b7:a4:32:
f9:39:c0:a5:bd:d5:89:d6:ea:34:a8:fe:3f:3c:8d:
96:80:9a:1d:29:0d:45:53:6a:f4:fc:7c:59:d3:57:
3a:87:3f:68:89:cc:37:ea:4e:4b:ed:43:67:68:2e:
5d:0c:a7:b5:89:f2:91:20:4b:f0:6c:57:5c:3e:66:
81:2d:c9:60:91:bd:2b:3d:a1:3a:5e:76:34:de:16:
01:b0:67:ff:ab:03:51:65:3d:26:ff:b4:4a:eb:e2:
f4:14:d5:6e:4b:12:9a:b2:f6:a5:36:7d:16:80:d1:
78:97:48:d5:8a:a8:ff:8a:ea:18:84:68:9a:3d:56:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:96:92:00:62:E1:B9:2C:0A:52:32:DA:17:51:C0:60:29:D2:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B598CF01C5D11F0933D0BB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:9e:3d:a5:bd:86:7a:9f:03:30:ea:ed:87:49:4c:fa:e6:82:
9e:b1:01:88:94:a8:7b:5b:3f:27:56:a8:13:6c:b2:3a:4f:d9:
bb:92:11:39:d1:ef:0a:e7:23:4b:4c:ae:a5:a5:7a:11:49:02:
80:92:1a:5c:28:e1:41:56:26:d9:48:b5:1e:08:3d:5d:20:e6:
e4:1b:f5:2d:0a:96:96:7f:52:c9:4d:82:08:37:06:c4:30:51:
ac:72:cc:30:be:c9:65:b9:a1:3e:c8:04:19:3c:13:d0:7b:7e:
fe:36:cd:ff:5e:c2:50:f0:c9:17:5d:01:66:8e:3b:77:f3:1f:
da:7b:99:b8:f6:9d:d2:04:a3:0a:2b:c2:be:94:72:ee:7a:bc:
ea:8d:68:8f:26:17:5f:a4:b5:1b:ff:1a:ba:2f:9a:99:75:4a:
32:e1:93:57:2b:60:5a:ad:83:d3:6e:bb:d3:a7:39:0f:b6:24:
b5:03:d2:48:c0:0f:35:07:0b:0d:d5:d3:d6:d9:11:c9:b9:c7:
ee:c2:4e:98:46:12:40:20:18:b4:cb:c3:43:a7:88:fd:41:72:
19:d8:4d:a1:35:c7:db:ff:48:ac:fb:fb:43:60:77:07:8d:5c:
a6:d7:f2:f2:af:1e:79:56:7a:ab:77:85:f9:8a:e9:10:a5:3f:
e9:3b:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:50 2025 by rpki-client on console.sobornost.net