Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A225D764210C11F08051788DDAE4EC9C.roa
File: A225D764210C11F08051788DDAE4EC9C.roa (raw, json)
Hash identifier: lO6ATDYufnQfdZa864laBKDGCAzfuYaIcPJMH5eXRPo=
Subject key identifier: 1E:5B:24:45:37:18:55:40:04:DC:3B:84:1B:94:9B:35:4B:9A:A1:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017ACF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A225D764210C11F08051788DDAE4EC9C.roa
Signing time: Thu 24 Apr 2025 13:04:20 +0000
ROA not before: Thu 24 Apr 2025 13:04:14 +0000
ROA not after: Sun 18 May 2025 13:04:14 +0000
asID: 133180
IP address blocks: 154.194.128.0/18 maxlen: 24
154.206.128.0/18 maxlen: 24
154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96975 (0x17acf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 13:04:14 2025 GMT
Not After : May 18 13:04:14 2025 GMT
Subject: CN=680a36d3-80bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:31:26:8f:99:b2:d5:4f:0d:ae:69:0a:f8:
ad:c1:83:63:81:6a:b8:87:e2:bd:bf:2e:03:c3:b1:
0f:49:1b:d2:c0:98:6d:4a:de:1f:fe:9b:2c:ef:dd:
65:3e:e8:18:35:44:c2:c8:4b:54:52:0e:b4:5b:03:
c1:2f:9b:68:ac:d7:a3:19:ce:2e:9c:7c:5b:c4:aa:
85:f0:7d:e3:f7:05:f7:65:4a:e4:93:b8:34:bc:7e:
a7:08:0f:0f:61:d3:0e:f4:5f:e4:b0:6f:f5:5a:d0:
16:c9:23:3a:fe:36:5d:61:05:9b:9f:e7:30:35:64:
4a:4f:ed:1a:64:87:5d:ab:62:fb:4b:a3:30:27:c7:
c1:92:e1:0d:08:57:14:fa:d0:8b:81:21:e0:68:db:
5d:ee:ca:d4:c5:d5:79:43:aa:7c:6e:ad:18:30:94:
0a:4e:02:4e:2d:36:89:71:36:d8:1f:3e:73:92:ea:
01:bf:e8:9e:2a:f8:2a:eb:f6:6f:cf:e1:ef:fc:1b:
b7:6f:24:2f:28:8f:0a:33:d2:d8:01:e7:82:d6:69:
a2:07:5f:59:ad:e0:df:75:78:60:a2:0c:40:a7:51:
5c:61:7e:09:73:f7:74:6f:a1:c2:f2:f2:9f:ed:b4:
14:a2:04:7d:44:2d:97:f2:36:a9:68:1f:f8:ea:28:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5B:24:45:37:18:55:40:04:DC:3B:84:1B:94:9B:35:4B:9A:A1:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A225D764210C11F08051788DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
154.206.128.0/18
154.209.160.0/19
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
94:20:c0:78:10:22:f2:46:40:a2:67:c8:89:1e:99:46:7c:9a:
f9:dd:58:e2:cc:a3:cf:e5:82:08:22:f4:87:d9:0d:78:9c:9b:
ab:a9:84:99:a8:75:1e:7a:b2:f4:fb:cb:3b:96:6f:f7:f2:76:
fe:89:dc:8f:70:3e:1c:1b:06:34:ca:8a:e8:4b:d3:c2:44:1a:
9f:b0:6a:0d:34:40:f2:32:8e:04:8d:f4:0a:88:af:61:4e:ca:
84:8c:d2:96:4d:15:00:c5:62:74:31:d9:91:da:78:db:f3:9b:
48:4c:3a:5a:7b:a5:71:8f:f4:3b:44:93:82:bb:07:ec:65:c4:
5d:0b:45:34:4e:09:43:a7:4e:71:3c:d9:69:91:9c:d2:53:da:
46:b9:cc:04:91:41:dd:87:af:40:0e:53:d4:c9:c7:a2:e6:7e:
92:cc:e4:ee:00:23:5a:96:78:b5:d5:28:fe:f0:c5:fe:ba:a7:
dd:30:f8:55:d7:5e:54:63:a0:a2:b4:fc:e4:00:0d:79:e9:52:
50:63:b7:c7:9e:14:ce:31:01:56:8e:a2:49:26:27:60:8b:06:
11:6d:45:08:bc:77:58:e0:9f:93:04:6a:9f:47:29:24:37:43:
5f:44:80:0c:e9:fb:2f:21:7c:fe:17:5f:23:80:b8:13:70:c7:
ee:0b:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:18:21 2025 by rpki-client on console.sobornost.net