Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAD6D2F21EB611F0B58256EBDAE4EC9C.roa
File: BAD6D2F21EB611F0B58256EBDAE4EC9C.roa (raw, json)
Hash identifier: bCSLGyTW6WA8nDmfHIC20bDjqQPSxQZcmukZkBshn8E=
Subject key identifier: 4E:0B:9B:9E:B0:69:D2:95:F6:40:FC:A4:5A:1E:A5:8F:BB:A0:1E:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAD6D2F21EB611F0B58256EBDAE4EC9C.roa
Signing time: Mon 21 Apr 2025 13:44:22 +0000
ROA not before: Mon 21 Apr 2025 13:44:17 +0000
ROA not after: Tue 29 Apr 2025 13:44:17 +0000
asID: 39600
IP address blocks: 154.94.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96851 (0x17a53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 13:44:17 2025 GMT
Not After : Apr 29 13:44:17 2025 GMT
Subject: CN=68064bb6-99e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:a2:db:d3:5f:62:ce:cf:c1:7a:b7:10:30:
ea:f5:72:a3:90:fd:f8:ba:3a:22:84:2b:e1:b0:9c:
25:1e:31:5b:4e:69:9c:d4:7b:cf:95:80:65:4d:21:
07:eb:85:1e:51:2e:b8:3e:0c:3e:77:95:b0:38:30:
42:32:ca:64:65:39:8f:1a:ed:01:40:cd:06:2d:8f:
99:ee:ef:ef:39:3d:22:86:8c:e5:dd:96:8a:43:b6:
0d:a3:f8:15:ba:dc:e7:cd:a8:ef:90:72:d2:d8:92:
5e:f4:10:05:79:92:d2:79:dd:c8:d1:30:9f:15:9a:
a8:06:f3:56:7e:2b:e9:9e:7a:2c:3f:1d:c7:26:b7:
46:16:14:d1:36:b6:2e:1c:a7:7f:bc:e4:ea:0e:c5:
c7:26:02:f2:10:0e:52:38:6d:63:33:81:fb:a3:79:
f1:c0:02:dd:5e:4c:82:8b:02:fc:58:8e:b2:ae:4e:
1a:3a:cf:bb:d7:c1:f0:96:e0:a8:dd:28:71:6b:09:
3e:99:0f:43:95:30:b0:c5:70:36:40:af:59:23:9a:
79:65:8f:7c:de:84:0b:43:e3:10:68:13:89:b7:4f:
20:b4:e5:a1:07:35:34:bd:9a:b2:bd:d5:b4:f8:fc:
3f:aa:aa:f7:4b:36:a3:f9:6e:3c:8a:11:28:64:6c:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0B:9B:9E:B0:69:D2:95:F6:40:FC:A4:5A:1E:A5:8F:BB:A0:1E:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAD6D2F21EB611F0B58256EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:10:de:91:38:75:5b:9a:8b:5e:ec:f9:9c:75:7c:6a:3f:f6:
59:26:79:40:39:d2:f4:3e:54:9f:65:7f:78:57:2d:98:19:33:
71:02:c5:7f:8e:c0:d8:e5:d2:33:16:a2:8b:5c:76:56:05:0e:
9a:72:68:c7:ca:70:8c:79:c9:fc:ae:8d:ad:89:1c:72:53:d5:
cf:6b:a0:db:02:8c:a7:9b:0b:45:64:14:ef:39:3c:49:d4:a8:
c7:ec:d1:56:c3:66:67:33:78:f6:79:be:ef:9f:77:f0:cb:18:
9a:d3:5d:ff:0e:3e:2e:e6:45:c9:a8:fb:dd:63:8e:16:4c:b7:
d6:08:e6:86:ac:76:cb:a4:42:cd:1a:49:00:b9:15:d2:5a:90:
7d:46:9c:4d:4f:00:3a:a9:5e:9e:8e:fa:0c:e3:f4:6c:6a:fa:
54:a3:b1:05:95:20:9d:2f:86:33:a1:53:be:ab:7a:28:f6:ea:
c6:ef:43:02:e1:b5:f8:af:29:b3:be:c0:cb:7a:1e:ef:c2:71:
62:3f:cb:21:66:6b:a8:68:e9:cc:9b:0e:ea:0f:e6:c6:2e:1c:
cb:11:3d:ef:a9:85:45:30:d9:1e:5e:29:9a:9a:64:ee:19:4c:
9a:c6:b1:7f:4b:5f:40:28:08:d2:95:98:8f:54:98:91:68:5a:
89:34:1c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:27:48 2025 by rpki-client on console.sobornost.net