Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7B0EB0120411F08AFBE7A3762E951A.roa
File: 9A7B0EB0120411F08AFBE7A3762E951A.roa (raw, json)
Hash identifier: nRrEvp5dDmSHpPy4bdVA+vrD5iWxskBFFBkLcIdnqCU=
Subject key identifier: A8:BF:C1:87:7C:38:06:EC:54:6A:8B:B4:00:E2:27:FB:91:DF:FD:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7B0EB0120411F08AFBE7A3762E951A.roa
Signing time: Sat 05 Apr 2025 09:59:03 +0000
ROA not before: Sat 05 Apr 2025 09:58:58 +0000
ROA not after: Wed 14 May 2025 09:58:58 +0000
asID: 54252
IP address blocks: 154.201.53.0/24 maxlen: 24
154.201.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96234 (0x177ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 09:58:58 2025 GMT
Not After : May 14 09:58:58 2025 GMT
Subject: CN=67f0fee7-4be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:8b:94:08:90:40:dd:63:9a:88:01:95:63:
a0:48:82:71:5e:77:60:3f:c3:f9:9a:b7:9b:75:8c:
4f:08:ec:71:f4:d8:3a:15:34:93:bd:62:ea:6b:59:
ad:2d:24:69:ed:72:f8:97:4a:85:35:b4:1a:6a:b7:
3d:53:af:f1:f8:57:f8:68:5b:c9:30:0a:07:8b:7d:
6d:d0:3b:89:45:e2:ba:f2:92:85:21:88:eb:95:35:
9d:d4:b5:a2:ad:79:f2:e6:ff:40:f8:12:6a:b5:6f:
6e:3b:50:df:d0:67:c1:99:1c:fd:51:f7:30:cc:cd:
53:36:06:03:86:89:43:b6:77:75:c0:b7:ec:f6:73:
de:01:b0:c7:a1:5b:a1:d6:11:e2:4d:c4:6d:18:31:
8e:fb:82:03:87:79:27:61:9a:8d:93:4b:9c:78:07:
0c:66:83:70:8f:ac:f4:ff:cf:bb:27:83:bd:4d:95:
d1:5a:2e:b5:01:4f:28:42:51:5b:07:e0:b7:c4:c2:
c6:a9:27:5b:06:ea:8c:09:cd:2e:88:f5:c2:ef:8b:
72:d0:41:98:7f:d6:ac:b3:10:b1:d3:85:44:26:ba:
c0:79:65:97:5f:8a:a2:07:80:d8:02:ef:c9:7b:89:
23:0f:fe:9f:f8:05:34:c9:83:0d:aa:1e:d9:d9:2a:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BF:C1:87:7C:38:06:EC:54:6A:8B:B4:00:E2:27:FB:91:DF:FD:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7B0EB0120411F08AFBE7A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.53.0-154.201.55.255
Signature Algorithm: sha256WithRSAEncryption
9c:de:53:3e:55:e1:a4:b7:1e:3b:39:f9:46:70:4e:84:c5:01:
7e:dd:d1:e6:29:9e:4b:ea:7b:16:18:c2:97:ad:b4:21:f3:82:
e9:24:e2:b5:7a:95:7c:a5:1a:da:a8:4c:a4:87:dd:9e:2f:d7:
07:4d:9b:83:01:5f:7e:16:0c:ca:e8:73:70:a6:83:04:8f:89:
54:12:de:18:de:d4:a3:63:f0:0a:01:fc:d5:d6:b0:78:bc:6b:
0a:a1:d9:5d:43:e8:70:01:ed:7c:f9:e6:50:80:21:4c:0a:a1:
39:47:68:56:cb:1d:6f:d9:da:f1:3f:6f:ac:cd:37:b9:f3:4c:
3e:bd:16:21:b6:a5:ff:4d:43:62:15:15:fd:90:69:bd:30:c9:
fc:a8:59:3a:77:56:57:a1:df:cf:8f:5f:5e:32:09:96:52:bb:
68:1a:6b:88:4f:85:49:be:c3:84:d6:04:4a:35:cd:9e:01:50:
e1:2f:53:b4:c1:c3:5c:e5:3e:79:0d:4c:16:2a:34:f8:02:71:
f5:ac:8d:69:e6:47:ab:f1:1c:71:1e:69:0d:32:d7:7a:09:7e:
52:ca:ed:1d:98:68:74:ab:04:38:05:94:58:ad:28:c0:8d:de:
ec:57:00:5f:af:51:63:d1:12:d5:29:88:92:f5:40:90:27:2e:
36:4c:73:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:40:06 2025 by rpki-client on console.sobornost.net