Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A92E4E8A1A1111F0849588036EB8BCC6.roa
File: A92E4E8A1A1111F0849588036EB8BCC6.roa (raw, json)
Hash identifier: 8VfV7NqfVyIqamPkjjEhMpFPF5/UxSo4e5UTOMvIaDI=
Subject key identifier: 80:08:9B:06:85:F1:9E:9F:01:59:72:F7:76:67:F6:E7:2E:66:5C:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017953
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A92E4E8A1A1111F0849588036EB8BCC6.roa
Signing time: Tue 15 Apr 2025 15:52:41 +0000
ROA not before: Tue 15 Apr 2025 15:52:36 +0000
ROA not after: Tue 20 May 2025 15:52:36 +0000
asID: 18779
IP address blocks: 154.205.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96595 (0x17953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 15:52:36 2025 GMT
Not After : May 20 15:52:36 2025 GMT
Subject: CN=67fe80c9-b856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:06:b9:b0:df:01:4f:63:b2:1c:44:af:ff:
6f:f4:2a:10:59:9e:20:13:55:86:f9:01:5e:cb:c9:
d4:6e:c2:7f:89:ea:22:e4:62:43:98:02:e1:44:a3:
a8:1b:2e:f3:af:01:01:18:9b:e8:91:86:fe:3e:5e:
6d:3e:a4:64:8b:5b:1c:5e:ec:c6:b4:be:6e:83:70:
57:47:b6:61:fe:85:b3:a1:84:20:3d:49:9e:ec:84:
e0:3a:85:07:7a:ac:11:b1:12:3d:89:34:34:3e:29:
31:0e:6c:19:7c:91:e0:97:18:d0:3f:a5:fa:d4:8e:
15:d1:31:b5:fa:f6:b8:ae:ea:a3:6f:15:09:5e:ed:
d5:40:23:f9:96:c0:bc:27:5c:01:f3:a1:0f:51:6a:
c2:71:05:75:fe:db:e8:5f:a0:f8:2b:55:0a:2e:e4:
78:fb:4f:25:79:a8:cc:f7:8a:11:b3:27:40:ac:71:
fd:59:5a:eb:7e:cf:50:61:db:65:4a:7e:27:14:98:
3e:da:f5:9e:4d:7b:81:42:0c:90:8d:72:e0:d0:14:
21:47:3d:50:c3:27:34:f5:c3:3e:64:2c:4b:7e:d4:
0a:87:82:0f:fd:a8:51:f0:ff:fe:b8:74:31:27:4e:
b2:a8:91:cb:3f:0e:7c:19:8a:29:9b:3e:d2:2b:5d:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:08:9B:06:85:F1:9E:9F:01:59:72:F7:76:67:F6:E7:2E:66:5C:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A92E4E8A1A1111F0849588036EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.30.0/23
Signature Algorithm: sha256WithRSAEncryption
46:d6:cc:fb:0e:62:60:65:f4:eb:90:d5:db:25:77:2f:cd:ff:
ee:dd:a9:4f:84:48:f7:1e:4f:01:b1:56:24:0b:c7:ea:48:45:
6c:05:5b:e3:29:9e:66:8b:85:05:4d:d9:dd:77:95:98:0d:94:
01:28:67:55:1d:59:a5:7c:69:bf:69:b4:1d:3c:2f:47:f1:48:
9d:3a:99:5b:8c:39:8f:ba:77:48:0e:48:a4:c6:0d:ed:a0:fd:
37:52:6a:97:a1:dd:6d:bc:da:a6:40:79:f1:aa:35:d5:eb:e5:
38:9f:6d:dc:bf:63:c2:62:15:ce:d8:4c:81:16:29:dd:a0:ed:
ef:2f:b1:08:c2:16:36:ad:c8:cc:12:f4:7a:ba:45:c1:9d:9b:
4d:04:1c:11:23:4c:0f:2e:0f:bc:15:6e:9a:10:b1:98:c6:fc:
6b:f7:03:39:f0:77:c4:76:05:0a:83:4f:82:17:2d:72:3e:23:
4b:ef:37:8d:9b:e4:36:54:3b:38:5f:c4:1b:0b:bf:ad:2d:ef:
2b:76:89:08:fc:18:5f:61:cd:b6:a5:b0:f0:3a:66:5c:44:0e:
15:61:63:60:d6:c1:38:38:e8:a2:bc:a0:9a:4c:7e:41:f3:6b:
ed:37:94:c0:3c:33:8f:c4:95:95:3c:88:60:27:29:3f:3f:89:
5b:59:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:14 2025 by rpki-client on console.sobornost.net