Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB4621B81CF811F087A1CFCBDAE4EC9C.roa
File: AB4621B81CF811F087A1CFCBDAE4EC9C.roa (raw, json)
Hash identifier: kzH4mCzBE5oZRG3LhZKhRH2jIi3siDcsu4LVfarpb9I=
Subject key identifier: AD:58:76:D4:1A:96:12:EE:DF:BD:12:88:D3:04:1C:0E:A8:10:0E:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB4621B81CF811F087A1CFCBDAE4EC9C.roa
Signing time: Sat 19 Apr 2025 08:31:20 +0000
ROA not before: Sat 19 Apr 2025 08:31:15 +0000
ROA not after: Mon 28 Apr 2025 08:31:15 +0000
asID: 133180
IP address blocks: 154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96777 (0x17a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:31:15 2025 GMT
Not After : Apr 28 08:31:15 2025 GMT
Subject: CN=68035f58-5d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:5e:45:ba:85:aa:e9:8e:a1:fe:de:a0:33:
6a:4e:12:e2:b2:f5:4c:44:c6:7c:e5:0a:2f:49:ec:
e3:22:bb:19:a1:7f:66:fc:35:4c:47:45:45:49:95:
ae:bf:85:a7:e8:53:d1:cb:06:15:b9:d1:b1:2f:d1:
c1:d5:f7:2e:03:69:7b:4a:7b:72:4a:7d:f9:90:3d:
9f:05:c6:ff:e6:54:e7:f6:51:32:04:0d:0c:6f:e2:
1e:32:fe:85:eb:12:dd:cc:bc:fd:7f:90:cd:9a:35:
4d:28:ac:00:a6:49:1b:1e:97:28:ff:98:14:01:8d:
6d:f0:ff:04:86:0f:92:de:69:d0:fa:af:12:42:6d:
8a:e0:c6:10:ab:b7:df:89:b6:2f:e1:d4:51:f6:33:
c2:0c:4a:9d:33:7a:8d:e6:64:97:43:d2:d3:d2:ed:
8e:de:88:74:e3:43:3d:6e:8d:e0:0c:75:ea:c8:41:
3a:2a:72:d7:90:54:e3:df:cb:16:19:f8:b9:a1:5c:
4e:74:85:45:81:3c:c0:b9:40:76:4c:27:74:97:5e:
3f:2f:74:82:59:76:35:0b:6f:bd:1a:74:a6:7f:a0:
a8:62:f0:2f:dd:48:57:13:07:1b:3f:14:fb:5c:03:
a5:38:d6:f2:4b:e8:9a:f4:f3:db:93:d0:e8:4b:24:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:58:76:D4:1A:96:12:EE:DF:BD:12:88:D3:04:1C:0E:A8:10:0E:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB4621B81CF811F087A1CFCBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
154.214.64.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
70:0b:0a:73:08:9e:37:dd:53:1c:86:d7:3b:ea:82:6f:e4:1f:
5f:39:50:df:ef:85:73:96:61:be:15:a1:ce:80:83:16:38:3a:
79:27:83:ec:9b:17:83:49:2d:80:b2:fa:d6:7c:2d:0f:78:92:
14:a8:0a:07:3e:be:ea:83:60:b7:1c:d2:f5:59:2f:ca:e7:84:
44:ed:d5:5a:c0:d1:61:82:e2:92:ff:32:91:1a:b9:7f:42:e6:
18:b2:50:59:57:97:33:fb:ee:c5:64:3e:62:5b:a3:cf:d8:d7:
3c:a2:4e:b2:6b:6d:f3:5b:3b:ea:64:f8:77:51:0b:0a:3e:f3:
14:ff:a8:3a:2c:42:f3:ff:b9:01:76:f2:b6:26:cb:7c:41:f9:
b2:33:1d:e0:3d:99:60:0a:a3:3b:c8:ba:6a:8b:60:4a:01:d7:
64:b9:8a:43:78:30:9c:09:4f:0e:11:b9:25:63:39:96:8a:27:
c2:d8:74:31:5e:3a:f7:65:19:72:ec:61:20:a4:2a:2e:7c:b4:
c5:5f:1c:a1:db:da:8f:80:d5:ee:e4:11:96:13:8c:df:7f:25:
eb:9e:b7:a0:b4:01:7a:dc:5a:b2:a0:e1:27:cf:ac:b4:3f:10:
30:72:9f:bd:72:d0:41:06:f2:dd:89:63:66:40:67:97:1e:cb:
10:23:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:18:28 2025 by rpki-client on console.sobornost.net