Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADFFDA4EF82B11EF846ED99C762E951A.roa
File: ADFFDA4EF82B11EF846ED99C762E951A.roa (raw, json)
Hash identifier: 9Tz9ypHQ6Nr/F4CykcX82Xa8Ebc4lCg5X5yjLcrs4d8=
Subject key identifier: 63:6F:C8:0A:6D:A5:D8:19:FD:E1:3D:2B:AC:8B:C0:4F:9F:34:49:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01709D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADFFDA4EF82B11EF846ED99C762E951A.roa
Signing time: Mon 03 Mar 2025 12:33:16 +0000
ROA not before: Mon 03 Mar 2025 12:33:05 +0000
ROA not after: Wed 30 Apr 2025 12:33:05 +0000
asID: 55320
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94365 (0x1709d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 12:33:05 2025 GMT
Not After : Apr 30 12:33:05 2025 GMT
Subject: CN=67c5a18c-0c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:ad:bf:8a:ff:9f:22:58:77:f8:c7:5c:39:
61:10:6b:4b:47:d1:e5:2b:df:51:5f:23:00:62:ee:
bb:b8:1b:d9:e4:7a:fb:9b:e5:d0:9e:ca:82:89:95:
3d:3c:28:c3:ca:25:2a:65:7a:1e:9e:99:01:e3:e6:
bc:0d:e5:59:cb:83:3b:50:fb:95:e5:71:5a:fd:45:
7f:74:a6:f0:99:4f:9f:80:e6:a8:e6:8c:5b:36:3b:
0e:48:c9:98:0d:cf:5a:77:73:22:a4:d6:5f:9f:2a:
23:0d:dd:ae:c1:7d:17:82:16:f0:f8:37:25:9a:ef:
cc:34:2b:9e:e1:98:0a:59:e8:29:f9:95:94:12:aa:
6e:9c:9e:5f:ea:48:6f:b9:18:4d:89:cb:90:a1:33:
bb:59:67:e9:19:e3:72:e0:ac:20:2e:16:8a:15:d0:
aa:43:4e:40:01:17:d2:48:35:78:d3:86:8f:54:cb:
1f:c1:af:3b:f5:17:9d:72:e7:ca:a0:af:00:28:2c:
f6:ba:f1:3e:fc:4c:2e:cd:da:68:6f:35:45:90:0d:
c4:c4:9d:c9:b9:72:4c:59:d1:d3:e6:cc:0d:f6:c4:
06:f6:85:b9:62:6c:cb:18:95:c8:9f:a7:af:24:34:
0a:fc:ca:d9:50:8d:be:ab:60:e5:f2:a9:66:9b:27:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6F:C8:0A:6D:A5:D8:19:FD:E1:3D:2B:AC:8B:C0:4F:9F:34:49:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADFFDA4EF82B11EF846ED99C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
77:34:1d:e3:b1:e8:cb:9e:4d:83:fa:78:25:f9:26:3a:78:df:
92:9f:22:0a:9b:e7:fe:c0:ea:43:06:28:76:63:da:6a:fc:16:
ee:ac:7c:20:c6:7e:7b:11:0e:e1:e6:7e:93:f0:5b:11:98:04:
f0:5c:ae:cc:9a:b7:6f:e4:fe:69:f8:ba:51:b7:84:1d:67:b4:
04:be:af:4d:46:71:70:42:91:de:c5:36:3e:79:31:6d:f2:04:
a1:c8:ed:a4:ef:8f:42:af:0d:ba:80:70:06:ae:a8:be:43:d9:
e4:4b:b7:63:34:7c:05:d0:39:cb:61:dc:ae:33:e0:a1:d4:c2:
41:af:60:28:2b:07:81:d9:d3:c2:b3:5d:2d:b8:b6:37:7d:fd:
4b:18:50:ed:5f:34:60:47:73:3f:eb:fe:05:62:7a:be:a7:86:
84:74:22:89:c3:1c:4d:b3:8f:0a:4c:40:5e:87:8e:fe:2d:7e:
df:69:98:bf:84:43:40:31:2a:8a:d3:e7:a7:89:c7:09:af:fd:
d1:7a:60:d3:86:b9:68:6b:03:19:e9:d6:59:5a:d2:58:d7:f8:
16:8f:aa:d2:d1:49:7c:b8:37:d2:49:46:91:a4:42:a5:e3:09:
9b:6c:92:6b:48:f5:91:21:37:e9:6b:87:36:e9:2d:cd:9b:19:
56:c2:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:53:03 2025 by rpki-client on console.sobornost.net