Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E8BB66144911F093BBD777762E951A.roa
File: B4E8BB66144911F093BBD777762E951A.roa (raw, json)
Hash identifier: 4elzuK4TtvuLm1h5REnYhv5kGqipKsXeuI9b6wt/KJw=
Subject key identifier: 9D:9F:F5:A9:65:86:F3:57:B9:A7:F5:5E:FA:78:61:ED:4B:F5:E7:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017850
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E8BB66144911F093BBD777762E951A.roa
Signing time: Tue 08 Apr 2025 07:18:45 +0000
ROA not before: Tue 08 Apr 2025 07:18:41 +0000
ROA not after: Tue 13 May 2025 07:18:41 +0000
asID: 272854
IP address blocks: 154.194.44.0/24 maxlen: 24
154.197.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96336 (0x17850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 8 07:18:41 2025 GMT
Not After : May 13 07:18:41 2025 GMT
Subject: CN=67f4cdd5-8cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:b6:46:b0:99:5a:14:42:81:57:2c:fb:ab:
3e:56:6e:19:b0:0e:a7:c6:b1:08:c1:0d:ec:06:07:
36:d0:57:9b:81:af:a1:61:8e:9d:07:97:14:df:c1:
95:61:47:84:38:ed:e8:70:c7:46:6a:cc:f8:32:33:
58:f3:65:e2:88:55:b9:38:1b:c1:08:b4:30:db:40:
9c:d5:9d:bc:20:4b:af:ed:07:69:d9:37:e8:68:db:
40:cc:66:0d:1b:60:c9:19:01:43:b0:28:36:eb:12:
ab:44:b3:ea:db:9a:d0:96:60:b3:48:71:8e:2b:b4:
7c:24:fe:09:1a:b3:e2:a7:2b:03:da:94:d9:59:d9:
43:fd:69:c8:28:02:28:cb:12:0d:fa:00:81:a2:c4:
64:90:58:8a:6c:61:3d:7c:33:01:9b:3c:25:a4:f6:
29:58:5e:28:4d:4c:42:98:17:22:a8:2c:10:c7:11:
fa:3c:6c:f6:84:6a:c5:ee:4e:3d:44:8e:da:98:46:
74:d7:a6:e9:2e:83:76:50:59:ec:26:04:48:5f:6a:
58:aa:b5:44:2d:f3:51:d9:59:2d:cf:54:35:bd:be:
7a:b0:e3:2a:5b:5c:90:05:12:93:cf:d8:61:b0:57:
aa:bc:d7:eb:6a:89:2b:5f:e9:ca:f5:58:f8:d4:5e:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9F:F5:A9:65:86:F3:57:B9:A7:F5:5E:FA:78:61:ED:4B:F5:E7:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E8BB66144911F093BBD777762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.44.0/24
154.197.1.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:60:34:96:54:59:55:9a:a3:2e:c0:bd:06:af:7f:4a:04:9a:
62:8a:9d:19:b8:07:74:d0:67:56:81:0b:63:0d:8b:9d:89:ea:
7c:68:97:81:78:3b:d1:d7:f0:4e:64:7d:04:aa:a0:25:9d:4a:
61:22:b8:50:f1:d8:e7:b3:fa:63:c5:b8:46:14:ff:fb:86:a1:
f0:12:7c:90:fc:c4:76:c4:91:9a:81:47:f2:da:0c:ac:d1:71:
91:09:83:68:b6:4d:88:68:6f:cd:df:f9:53:77:fd:1e:a0:3c:
5f:2e:22:c3:25:4a:e9:2f:84:53:1c:c3:bf:8c:c9:21:17:41:
e4:f2:15:9e:c3:ad:fb:eb:3c:64:01:37:86:24:e5:cb:18:8b:
3a:31:e9:c2:4b:59:d9:90:89:0e:72:56:66:35:1c:e4:4f:a4:
29:9a:60:3e:ff:54:62:91:1c:65:6f:e1:67:d2:17:a2:cc:a6:
01:67:50:04:ef:0a:b2:75:ad:9f:4c:7a:42:4e:83:98:d3:82:
ad:4f:ba:dd:91:a3:e5:e6:55:7d:9c:5c:d0:1b:4f:c7:f5:66:
6d:17:e1:24:21:74:2f:c5:5c:e4:be:80:d2:a6:33:c1:f4:7c:
8d:04:34:26:8e:19:3a:99:91:7b:ef:35:99:fb:e0:5b:d5:74:
47:9d:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:53:05 2025 by rpki-client on console.sobornost.net