Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8567E2A20B411F0A4C108BADAE4EC9C.roa
File: A8567E2A20B411F0A4C108BADAE4EC9C.roa (raw, json)
Hash identifier: w+HPOlpu0HW/LzlmIoix7JK7IwYQj8q0RyNI8l7ycyw=
Subject key identifier: 1D:EB:B1:69:23:82:32:07:BB:E6:D4:E7:8D:15:31:CC:45:6E:C5:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017AC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8567E2A20B411F0A4C108BADAE4EC9C.roa
Signing time: Thu 24 Apr 2025 02:34:34 +0000
ROA not before: Thu 24 Apr 2025 02:34:28 +0000
ROA not after: Wed 14 May 2025 02:34:28 +0000
asID: 57043
IP address blocks: 154.86.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96966 (0x17ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 02:34:28 2025 GMT
Not After : May 14 02:34:28 2025 GMT
Subject: CN=6809a33a-916d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:9b:a4:ac:ad:f2:de:bf:3b:df:ad:ca:b8:
df:c3:ce:80:e7:e6:36:a5:6a:8c:08:a0:21:cf:28:
53:e9:13:db:2f:6f:e0:b3:17:1b:07:50:39:ac:1b:
4d:08:38:14:a1:1b:cc:79:fc:95:45:3d:09:a9:67:
47:7a:a0:02:92:67:31:f4:8d:41:22:34:b2:b6:6f:
dd:27:af:8f:d2:73:4a:a6:ac:64:ee:18:46:2d:e4:
ce:aa:7a:c3:bf:1c:31:b0:d0:22:5c:e5:22:4d:c0:
22:f8:82:c5:e7:26:5a:6d:b0:3c:03:16:42:74:fc:
fc:43:db:9b:af:42:17:87:1c:25:77:85:8f:3f:ae:
c8:d1:9e:08:ad:65:b5:6e:c9:0b:35:ac:5d:41:7a:
d5:e0:60:09:e8:9b:06:c4:2e:f4:97:7d:3d:b7:d8:
e6:08:cb:0d:5c:29:70:33:34:a6:24:82:fc:31:38:
f8:41:7d:12:d7:f7:38:26:c5:69:4b:a9:af:e0:3d:
d8:00:6e:5e:d6:f5:e5:b5:d1:3d:7e:a9:2b:ae:b8:
7a:98:7b:88:13:46:d1:ae:81:f6:33:8b:a7:e7:1a:
4f:4d:69:8d:24:0a:d8:f9:55:8f:d1:ca:ff:21:4e:
3b:f2:2c:a4:12:d4:9c:bd:18:39:99:e2:72:f3:61:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EB:B1:69:23:82:32:07:BB:E6:D4:E7:8D:15:31:CC:45:6E:C5:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8567E2A20B411F0A4C108BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.116.0/23
Signature Algorithm: sha256WithRSAEncryption
79:53:3e:4f:09:a1:f1:16:91:16:a3:ef:bc:45:25:e8:a8:c0:
07:fd:ee:19:82:e6:10:ff:5e:90:d6:dd:62:e0:81:ef:1d:c1:
b0:f0:fd:b7:e7:d0:a5:88:a2:96:ab:03:4c:51:f0:2e:03:66:
7a:52:c5:e4:42:d3:c7:ae:62:74:17:09:fb:95:f9:3d:ef:c6:
9e:53:91:b4:a4:23:f8:7e:9c:b7:6c:1f:47:26:fe:f7:9e:f1:
69:69:67:81:28:bc:9e:d2:71:b6:20:02:26:4e:c2:a1:d9:af:
2b:04:01:1a:4a:d3:bf:67:03:96:17:f3:0e:79:9b:6a:28:78:
80:47:55:5f:4d:85:28:e7:87:5a:5d:55:4b:e1:e3:53:62:c6:
a7:53:5e:5e:b5:1f:fc:ce:1e:05:cc:54:61:92:79:86:b9:f5:
7c:35:4a:f2:b8:80:72:21:11:d1:17:15:89:a0:1d:bf:7f:f3:
00:4d:c4:ac:a2:c5:63:95:da:41:ae:f0:b6:2c:5f:0b:a7:27:
10:1c:26:fe:3a:d0:68:2e:b1:20:d1:eb:b2:ba:ad:bc:00:66:
33:78:bd:82:1e:ce:58:d2:da:c1:e4:9b:4c:fc:fb:f4:3e:8c:
8e:01:fe:f7:fc:05:eb:0d:22:25:a2:df:6a:71:b2:e3:17:0f:
7e:e5:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:17 2025 by rpki-client on console.sobornost.net