Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FE30006109311F0BB83D766762E951A.roa
File: 8FE30006109311F0BB83D766762E951A.roa (raw, json)
Hash identifier: TMQvXqI4sALLwS3Ku697q6HkHpmrw1qzEJXW6fAmnOs=
Subject key identifier: 30:5A:A5:FE:61:E1:F2:D4:C0:3B:B2:CE:C8:66:C9:CF:E5:C5:72:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FE30006109311F0BB83D766762E951A.roa
Signing time: Thu 03 Apr 2025 13:57:21 +0000
ROA not before: Thu 03 Apr 2025 13:57:17 +0000
ROA not after: Sun 03 Aug 2025 13:57:17 +0000
asID: 46071
IP address blocks: 154.209.6.0/24 maxlen: 24
154.209.7.0/24 maxlen: 24
154.210.203.0/24 maxlen: 24
154.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96161 (0x177a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 13:57:17 2025 GMT
Not After : Aug 3 13:57:17 2025 GMT
Subject: CN=67ee93c1-f4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:61:a3:38:c7:8b:65:af:1c:6d:7a:2f:4a:
ab:9a:e4:4f:92:b3:b3:8c:ec:94:0a:ac:c6:e8:79:
b6:73:f2:ff:03:3a:2f:2f:97:99:f2:da:4b:d7:64:
fa:98:58:27:9d:0b:50:8c:bd:3c:ca:6a:1e:c6:ad:
d0:33:7c:af:2d:3b:1f:83:ec:64:9a:bb:3c:5b:b0:
99:c6:5e:71:fd:dd:3e:7a:8c:57:76:0c:fa:64:6f:
a4:ed:78:6a:a0:fb:76:41:7e:9f:90:4c:a6:09:ef:
95:f5:a3:6d:a9:11:fd:e2:01:99:26:9c:4e:15:f7:
ee:3a:be:ff:42:13:45:20:5b:00:af:86:dd:fb:93:
ff:92:02:e0:a1:26:9a:82:02:8d:09:a3:82:62:64:
14:c0:08:50:8f:47:d2:87:35:65:c0:4f:05:5d:a5:
e7:70:2a:4a:77:21:2e:4e:a7:cf:17:02:ec:d0:69:
d2:5c:1b:ad:36:d6:26:1e:ab:ef:b8:1c:c2:f5:60:
d7:19:1c:96:8f:09:9b:ac:5a:65:dc:43:5f:f2:0b:
84:f6:0f:68:be:6e:ef:d6:ff:fb:0a:f7:a1:c9:5b:
37:a7:78:8e:73:af:d1:12:8f:28:f3:39:82:23:6c:
22:58:29:7b:f0:16:12:f6:1d:a6:1c:7b:d9:62:e9:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5A:A5:FE:61:E1:F2:D4:C0:3B:B2:CE:C8:66:C9:CF:E5:C5:72:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FE30006109311F0BB83D766762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.6.0/23
154.210.203.0/24
154.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0c:3b:6f:5c:56:ea:90:69:77:b2:da:16:1b:d8:22:57:21:
11:25:b3:e1:a7:ca:14:1b:39:05:9e:b6:e3:8b:69:b3:6e:4a:
4f:05:ec:d8:5d:a7:e3:3e:51:1a:21:4f:30:a3:6e:33:f6:f0:
e5:87:b2:28:6c:8e:14:4e:49:5d:60:df:f4:8f:b5:cf:1e:e0:
04:70:cb:0e:9e:b3:f2:62:87:09:ce:44:a5:67:8a:ad:a1:72:
19:39:66:92:74:8d:06:b9:6f:64:a0:79:ee:8c:62:4d:d2:90:
dc:30:ac:57:a9:92:a4:d0:5d:25:f0:5a:0b:21:24:79:0e:2c:
88:8f:d8:13:d4:ec:20:15:1b:a8:d8:05:5a:da:e7:64:3d:92:
23:80:2b:9c:22:ce:bd:8a:43:76:5a:69:1b:df:70:3d:3f:75:
9b:e1:87:e0:bc:32:8f:e3:6a:03:86:76:9b:69:fb:29:a3:70:
13:9d:52:94:60:c1:82:55:21:e3:34:3f:6d:b0:88:d5:49:23:
89:9e:c1:00:3c:79:ac:e4:12:2a:f5:7a:5b:73:b4:78:c5:1b:
f9:be:b5:33:40:23:f0:9c:1b:c0:46:9e:f5:62:59:17:c8:83:
d2:d6:69:20:2c:5d:3c:7e:2a:b2:70:4b:1b:ee:94:a9:51:55:
19:c8:46:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:52:54 2025 by rpki-client on console.sobornost.net