Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4337CFA151711F08783E4C56DB8BCC6.roa
File: B4337CFA151711F08783E4C56DB8BCC6.roa (raw, json)
Hash identifier: ri5N0xUKMIkdtd9NLPIpyRlID/yxEOBLU6UkbZFOzuc=
Subject key identifier: 54:BA:E3:59:9C:9B:8E:4B:2F:BB:D5:B1:BD:FF:19:45:64:32:2B:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01787F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4337CFA151711F08783E4C56DB8BCC6.roa
Signing time: Wed 09 Apr 2025 07:53:20 +0000
ROA not before: Wed 09 Apr 2025 07:53:16 +0000
ROA not after: Thu 08 May 2025 07:53:16 +0000
asID: 45194
IP address blocks: 154.84.207.0/24 maxlen: 24
154.84.209.0/24 maxlen: 24
154.84.210.0/24 maxlen: 24
154.84.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96383 (0x1787f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 07:53:16 2025 GMT
Not After : May 8 07:53:16 2025 GMT
Subject: CN=67f62770-9ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:f9:05:4f:20:ed:18:ae:55:1a:7f:40:07:
f2:41:e8:a3:f2:9a:a7:98:9a:6e:c4:a2:7c:c7:a0:
75:06:dc:ef:b4:9f:bb:aa:c8:33:34:06:70:9a:50:
da:f1:78:e9:27:f7:ba:6d:90:e0:c7:e5:f5:f7:8c:
16:ae:b6:7a:67:cb:c7:52:65:e3:b8:3b:12:f7:ad:
89:80:62:83:a2:cd:5a:a5:b9:b4:76:ee:39:ca:dd:
9c:04:af:ef:d8:6c:2a:39:c6:bf:ff:d8:51:94:8c:
87:fc:3c:55:12:a8:7e:f0:1c:98:0c:51:f8:c4:11:
90:e5:f5:ce:fc:48:30:66:7c:a1:07:1c:68:8b:3e:
ac:1c:67:b2:30:7c:0c:a5:cd:58:11:96:c3:8a:d6:
38:d4:ec:4a:c8:1a:c0:f4:45:36:16:f2:92:0a:31:
f0:88:ef:0f:63:da:b3:69:14:56:4b:d2:1f:05:32:
64:1c:8b:a8:b7:70:30:32:50:18:b3:8b:c4:ef:64:
0a:2b:02:ee:78:00:bb:d6:06:73:3d:9c:ec:1b:16:
d9:df:da:a1:4f:3f:17:97:58:75:a6:5e:a0:3d:ff:
aa:c9:38:9e:77:14:a6:1b:69:56:cd:64:e5:74:42:
11:80:39:f1:bd:d1:06:3a:c2:52:12:4b:65:76:a9:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BA:E3:59:9C:9B:8E:4B:2F:BB:D5:B1:BD:FF:19:45:64:32:2B:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4337CFA151711F08783E4C56DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.207.0/24
154.84.209.0-154.84.210.255
154.84.246.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:86:9d:00:5a:8f:ca:85:13:15:89:2e:9b:eb:1e:69:72:78:
4c:38:ad:26:27:26:a3:0b:bc:07:29:c9:0f:bd:ae:db:6f:7d:
43:8f:9f:e5:ca:8e:85:25:b4:1d:88:d3:33:34:05:dc:3b:18:
eb:b4:09:b1:ab:b9:92:8f:5b:1d:7f:7c:ac:ae:1f:e7:ab:2e:
06:3e:e1:9a:9a:0b:d3:bf:63:a0:c5:d1:a6:94:a1:fd:92:b8:
b1:49:62:59:30:8e:69:01:73:41:d1:df:36:64:fc:84:37:e3:
cf:3f:b3:f3:f3:33:0b:76:06:4f:96:69:5f:d0:11:ea:5a:b8:
16:db:29:2c:2e:bc:e5:27:31:e0:60:12:94:37:e1:de:99:93:
a6:f7:3d:57:d2:9c:eb:05:36:99:46:89:6a:35:74:3d:df:aa:
b3:16:4a:5e:18:b8:a8:9f:9d:42:a4:28:a8:49:d7:53:19:3f:
03:d8:36:40:40:bb:7b:8e:40:bb:6a:17:0c:7a:b5:3e:5e:15:
10:95:59:a7:f0:15:e5:f8:e2:b4:c7:62:2e:4f:51:e1:42:12:
57:df:35:b5:cb:66:32:95:6f:db:3b:5c:52:b6:3a:7c:93:97:
80:d7:ed:50:77:0b:a5:10:88:d9:e7:3f:3f:6a:b3:9c:eb:44:
02:63:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:57:10 2025 by rpki-client on console.sobornost.net