Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA930D8216B611F0A10BE9196EB8BCC6.roa
File: AA930D8216B611F0A10BE9196EB8BCC6.roa (raw, json)
Hash identifier: ehHj2UWGWdhBbDWsbb2HNNVJcpPEft2GwooyCWJfQNs=
Subject key identifier: 7C:FF:77:B9:C7:25:FE:2C:F8:04:C8:D1:D9:E5:F5:09:63:00:3F:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA930D8216B611F0A10BE9196EB8BCC6.roa
Signing time: Fri 11 Apr 2025 09:23:45 +0000
ROA not before: Fri 11 Apr 2025 09:23:41 +0000
ROA not after: Sat 17 May 2025 09:23:41 +0000
asID: 57043
IP address blocks: 154.83.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96489 (0x178e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 09:23:41 2025 GMT
Not After : May 17 09:23:41 2025 GMT
Subject: CN=67f8dfa1-63d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:4d:7d:90:47:85:3b:8d:5d:ce:2d:2a:74:
0f:25:38:ed:f8:f3:4a:21:28:96:b0:33:52:ec:6f:
a4:49:1c:aa:e6:e0:d3:1a:64:84:e7:09:3e:81:66:
d2:59:7b:d1:1d:58:a9:2e:df:08:84:02:e4:33:01:
38:fa:c7:08:a4:b4:ae:1d:50:a9:e8:6e:8b:f4:e9:
68:47:2d:fd:4b:b9:53:55:a7:5b:1b:08:5d:36:8f:
be:df:d2:ab:d3:53:38:02:06:8e:bf:ea:ec:55:da:
af:4e:1b:f8:8a:6e:44:6f:1a:b3:f1:cb:ab:7e:aa:
37:30:cb:35:b2:9d:e2:ef:81:a8:1c:bb:03:35:2c:
24:5e:06:3e:c0:04:66:04:b5:0f:64:a7:81:ba:08:
18:c2:33:ca:57:3c:c6:2f:f9:d9:49:61:fe:f7:41:
ed:12:8d:06:88:62:1b:11:06:25:b5:92:bb:79:94:
cf:1e:5e:b3:e1:7b:53:ba:54:aa:91:ca:1e:2a:70:
80:6f:a4:13:b9:cb:13:89:09:2e:22:35:cb:dc:12:
61:d1:d1:45:0f:a6:77:43:91:f2:ef:97:ba:ce:33:
6b:ce:24:f2:f5:7a:db:3c:9b:97:82:a9:14:14:d1:
34:36:b1:f4:d1:73:6e:e1:3b:22:eb:29:fe:ec:f2:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FF:77:B9:C7:25:FE:2C:F8:04:C8:D1:D9:E5:F5:09:63:00:3F:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA930D8216B611F0A10BE9196EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1b:d9:c8:80:74:65:4b:01:40:cc:d6:1b:cd:00:94:d0:86:
b8:45:17:ab:f4:1b:a9:86:14:cd:45:7c:b7:6f:b7:d6:a7:c3:
fe:42:cc:9c:39:f0:9b:06:28:f4:47:42:87:1b:0f:31:13:74:
e1:88:08:74:9e:05:7f:14:b6:14:5a:1a:f4:1c:fc:70:a5:73:
ea:77:11:c8:a6:b4:9d:20:49:f4:f0:ac:00:43:2c:60:e8:7c:
4e:5a:fa:0d:98:35:e3:0c:bb:0c:0b:4c:00:c9:5e:74:ed:9b:
cb:da:72:55:bd:d4:54:e7:b1:66:2c:6f:57:fa:64:cf:0c:b0:
34:35:0e:06:b9:fa:ab:91:30:a9:af:66:8e:d0:4e:44:95:a7:
d6:52:16:4e:2d:71:05:64:06:3e:9e:00:db:4b:f3:95:b6:66:
7b:ed:9f:92:50:50:c3:7d:e9:c6:33:b7:19:16:5b:c7:11:69:
dc:d0:b0:70:51:39:cf:e3:75:0e:bf:ab:8e:37:bc:22:01:77:
5b:e1:17:bb:dc:d7:30:6c:e2:f1:62:c6:46:79:c9:a4:43:21:
90:b9:b9:f7:f3:4a:a4:f3:42:61:e7:79:e1:0f:10:55:57:15:
27:4b:04:b2:d6:d9:4d:8f:34:ae:66:f1:9f:ed:dd:9e:dd:72:
18:e1:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:20 2025 by rpki-client on console.sobornost.net