Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5E55EE41C9F11F0AE2940E9DAE4EC9C.roa
File: B5E55EE41C9F11F0AE2940E9DAE4EC9C.roa (raw, json)
Hash identifier: ELRkOJZO062X/onoY7LPBa2j748s2KvcyCBKU57QIXo=
Subject key identifier: DF:D5:BC:A8:BA:AF:2C:11:51:62:95:1D:92:05:62:0F:72:A3:41:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5E55EE41C9F11F0AE2940E9DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 21:54:33 +0000
ROA not before: Fri 18 Apr 2025 21:54:28 +0000
ROA not after: Sat 31 May 2025 21:54:28 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96754 (0x179f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 21:54:28 2025 GMT
Not After : May 31 21:54:28 2025 GMT
Subject: CN=6802ca19-2bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:e9:05:75:47:1b:ef:49:77:b0:fb:50:da:
36:39:5b:0b:64:97:e7:af:cb:7e:92:86:b0:79:f0:
c6:f1:97:01:29:d0:21:bf:0c:92:4d:e1:25:35:9d:
03:fb:ce:a0:4e:d1:f1:86:2b:e2:01:68:a0:c0:ac:
6e:6b:60:5c:5a:2f:40:c3:0b:19:38:9e:2a:fc:a2:
21:71:32:be:a5:7e:be:56:1b:fa:a3:95:93:af:f4:
66:ba:c3:be:11:95:a0:e0:33:3f:bb:20:d3:0f:b2:
d5:8e:4f:e5:70:2b:d0:bc:92:3a:e7:35:24:74:e2:
5c:a2:1e:20:9f:a3:60:c3:db:80:7c:1e:8b:e1:28:
80:8a:7c:05:1e:32:07:a9:ed:04:35:59:2e:02:ab:
0d:9f:07:97:35:e2:15:d2:bd:dc:4f:71:fa:86:c3:
56:9b:27:6d:4d:2f:66:02:0c:94:d4:cf:eb:92:15:
4d:b7:51:e0:20:5a:8b:89:66:bd:bc:a4:99:ee:dd:
58:1a:18:1e:77:f9:fb:38:8c:cd:16:ea:d8:49:48:
65:4e:67:04:91:b3:cc:df:f1:ea:ee:a8:c6:a2:32:
4d:4a:bd:b6:01:4b:fd:77:a7:b0:bb:f4:a0:38:43:
ae:25:85:01:25:69:18:5b:25:8b:a2:d8:85:57:c2:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D5:BC:A8:BA:AF:2C:11:51:62:95:1D:92:05:62:0F:72:A3:41:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5E55EE41C9F11F0AE2940E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.233.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
ae:85:39:a8:22:f4:29:c9:3e:e6:9a:b4:5a:aa:97:ef:1e:47:
74:5a:52:d1:d7:aa:59:97:a5:90:88:bb:33:50:69:9c:88:4b:
7b:14:cf:43:c6:0c:9e:a8:16:1e:b7:be:d3:e5:a2:ce:91:0f:
d2:91:9e:6c:68:c5:e7:b5:4d:f4:7c:d5:54:e6:cb:f4:69:8d:
e0:db:5d:ba:c7:d6:d3:ca:9e:ca:3d:fc:f0:bf:5b:19:fa:30:
18:6f:c4:b5:8f:9c:51:36:39:48:39:0e:c9:05:e2:5a:ea:3e:
b6:6c:cf:84:05:2b:e2:36:c6:99:0c:a0:af:03:b5:d0:43:84:
3a:2f:5b:c0:be:e7:5f:c7:7c:47:59:b4:78:b7:4c:0d:0d:2b:
0f:fb:a0:96:7c:90:d5:82:80:5e:b4:9f:8b:7f:fd:33:cc:73:
52:92:df:22:9d:c4:80:a7:1a:56:f9:91:e7:75:06:e2:ba:25:
b8:09:99:28:d2:ec:30:ca:e4:4f:cb:00:50:96:bc:53:ce:2e:
9c:41:2b:3b:69:17:11:91:ed:3f:2e:46:c1:75:4d:f4:7c:79:
99:16:6d:3a:6e:16:21:3f:3e:fa:ed:62:28:4d:bf:bf:32:98:
2e:43:35:dc:f5:c1:cf:2b:73:a1:f7:4d:d1:c5:01:47:d3:dd:
7f:48:cb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:40:20 2025 by rpki-client on console.sobornost.net