Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD1885400CDA11F0B0873F4E762E951A.roa
File: AD1885400CDA11F0B0873F4E762E951A.roa (raw, json)
Hash identifier: axSqNUWuEHklxaE6fEa26AR1arE6jY5OgUdNs7d0RG4=
Subject key identifier: D3:5A:D4:D3:62:E0:A3:6A:3C:02:1B:B7:D6:53:88:97:08:26:4E:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD1885400CDA11F0B0873F4E762E951A.roa
Signing time: Sat 29 Mar 2025 20:16:20 +0000
ROA not before: Sat 29 Mar 2025 20:16:15 +0000
ROA not after: Sat 17 May 2025 20:16:15 +0000
asID: 55020
IP address blocks: 154.210.16.0/20 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95986 (0x176f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 20:16:15 2025 GMT
Not After : May 17 20:16:15 2025 GMT
Subject: CN=67e85514-3a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:9c:c0:94:2e:e3:9d:d4:40:d8:f6:87:da:
b7:46:dd:f4:36:92:42:2f:52:64:c9:b7:38:d3:d2:
45:8b:f2:b5:35:dc:69:f6:50:43:48:e6:10:d1:c0:
5e:d7:76:e8:cf:4c:66:81:ae:75:1c:62:b5:fb:dc:
31:48:5e:e7:cd:60:24:4e:24:14:ab:01:7a:21:d1:
45:37:30:fc:e7:68:a2:a6:11:94:92:8d:92:6a:c3:
46:7a:0c:b2:6e:5e:e3:f6:b7:6e:9b:fd:ba:e2:27:
ff:67:30:14:bd:5f:17:a8:59:9d:77:b5:10:60:08:
ab:c7:c7:cf:df:00:76:96:f8:1d:09:34:2b:d0:61:
e1:21:72:80:8e:aa:e1:77:69:05:3a:59:9a:63:f6:
9f:e6:07:36:e0:9a:58:2f:96:a7:e8:9a:f2:9d:65:
f6:ae:fc:a0:95:47:15:ce:1a:49:12:c1:7a:33:2b:
cf:62:15:59:5d:c6:8e:06:83:fc:b9:ad:52:31:cb:
63:1c:da:bf:55:cb:1d:54:5f:df:fa:68:96:6b:28:
01:bf:a3:de:fa:ef:03:c1:b1:c0:e5:6c:0e:89:2e:
d9:3b:36:dd:04:7e:34:30:3f:ec:29:8a:05:1a:2b:
aa:36:53:10:8c:5d:3b:8f:f0:9f:c4:da:40:21:ad:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5A:D4:D3:62:E0:A3:6A:3C:02:1B:B7:D6:53:88:97:08:26:4E:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD1885400CDA11F0B0873F4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:c5:b8:16:3a:4a:3d:10:92:c6:67:77:af:09:be:57:96:e7:
c6:26:76:93:59:a4:b9:da:6a:29:42:5c:5c:91:5f:4e:17:18:
8e:60:32:96:c3:b2:76:09:5f:4c:d6:02:c0:a9:72:cb:c4:12:
e9:99:cc:7f:30:cc:41:e5:a8:1d:95:d5:52:d0:e3:68:59:9e:
44:f6:65:1a:95:4b:82:01:47:35:c2:ad:3e:fb:c6:1f:0e:13:
2b:0b:11:bc:fc:61:69:35:9f:2b:53:5a:ed:5e:d0:23:d5:11:
be:e1:68:4d:41:ca:2c:e6:20:4d:6a:89:28:7a:24:fd:2e:f9:
c3:63:9f:3e:15:36:85:07:5b:65:73:df:ea:d7:10:ba:e0:12:
2b:13:e1:9b:94:51:0e:99:93:29:1c:d0:3e:a9:25:60:25:42:
e9:43:c8:ec:ee:6f:3e:2a:52:42:8b:b2:58:a3:f1:25:e8:23:
34:fa:21:39:79:2e:3e:90:ca:e1:03:ed:95:f2:e1:5e:50:50:
c8:19:09:6c:7c:ad:f3:e4:cd:c2:96:c4:2f:4c:74:ff:5e:9b:
3a:8d:bd:de:0b:44:95:01:8c:ce:2b:29:51:23:75:0b:9c:e9:
5d:36:2d:9b:b4:f0:28:45:d3:44:62:12:f8:ee:91:65:dd:49:
a1:19:02:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:47:59 2025 by rpki-client on console.sobornost.net