Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD18252C114911F0B052F1B7762E951A.roa
File: BD18252C114911F0B052F1B7762E951A.roa (raw, json)
Hash identifier: elMh7q5itjApCArfqJYjchmCgJje2zoha8m+RbFs/XQ=
Subject key identifier: D6:61:01:7B:EB:AF:02:D4:C9:71:6F:4A:32:79:EE:B8:EE:58:67:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD18252C114911F0B052F1B7762E951A.roa
Signing time: Fri 04 Apr 2025 11:41:25 +0000
ROA not before: Fri 04 Apr 2025 11:41:21 +0000
ROA not after: Sat 10 May 2025 11:41:21 +0000
asID: 395793
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96198 (0x177c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 11:41:21 2025 GMT
Not After : May 10 11:41:21 2025 GMT
Subject: CN=67efc565-8dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:9d:7c:dd:f5:62:b1:7b:2d:25:90:c2:bc:
62:93:fc:ff:29:42:35:5f:e1:37:67:57:4d:28:81:
0f:3e:0f:b3:29:b0:d3:9b:bd:41:96:6c:dc:29:32:
cd:5c:eb:a9:69:21:89:2d:4c:09:e7:99:f2:94:b8:
07:28:af:cb:72:c6:bf:28:e9:36:c9:3d:c5:68:54:
21:be:d2:5d:a9:45:6c:97:3f:04:9b:73:21:30:ac:
cc:e1:ea:f8:dc:ca:9c:dd:99:c7:4b:36:32:96:4d:
38:1f:b4:06:8c:8a:ed:b3:53:16:c8:d2:bc:96:33:
bc:81:37:96:d1:19:91:9d:56:af:dc:94:34:c5:87:
7d:74:e5:92:06:4d:2f:11:26:6d:6a:4b:8b:07:08:
0a:25:0c:df:3a:45:bd:40:75:b5:9b:02:3d:63:0f:
59:61:00:90:84:95:d6:19:6d:8f:8e:9c:a9:77:6f:
b3:79:6d:da:9e:62:4d:8e:26:44:3a:56:58:df:96:
f3:75:c2:42:14:ee:95:0d:b5:7d:81:2d:48:1f:25:
90:f9:64:a8:da:36:25:5b:3f:c2:0f:69:e5:f9:5a:
11:49:9a:26:53:e0:60:8d:2f:2d:c9:23:be:0a:62:
81:32:42:9c:80:8f:2d:bf:40:68:eb:fe:de:ea:05:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:61:01:7B:EB:AF:02:D4:C9:71:6F:4A:32:79:EE:B8:EE:58:67:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD18252C114911F0B052F1B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
Signature Algorithm: sha256WithRSAEncryption
37:34:75:5f:c0:e8:7a:56:33:2d:d7:99:77:96:06:07:91:01:
31:fb:e1:eb:94:fb:7d:92:f6:31:d3:3b:a4:f9:97:3d:52:da:
43:e8:5c:52:2d:e2:ff:2c:57:dc:e3:84:bd:27:74:79:b9:4d:
61:1a:08:1b:0d:ea:01:c0:05:d1:ab:c2:fe:24:b7:62:29:b1:
3f:a8:82:2d:fc:0e:b3:46:0a:e9:23:e1:9e:dc:ea:d8:49:72:
42:1d:83:74:25:e2:ad:19:e1:c3:d1:5a:43:7d:07:19:ff:c1:
9f:c0:75:73:c3:dc:31:0b:33:36:19:96:41:83:34:5d:30:13:
d2:b3:70:45:18:90:3f:d4:da:01:e7:76:06:30:70:86:fe:2a:
5d:69:84:32:84:9b:ef:30:27:31:1e:ee:b0:5b:cf:5a:3e:31:
36:c7:29:58:3f:c7:51:12:c0:fa:9f:67:13:06:8a:0a:ef:85:
ce:87:9f:62:af:6f:df:83:66:68:d7:94:bc:93:3d:0c:4c:f5:
9b:83:c8:09:56:7a:b8:66:64:a2:5b:c0:e7:1d:7a:2a:83:93:
c7:25:76:d1:59:de:72:22:bc:fe:9f:07:52:62:b3:f0:55:97:
c4:ef:c2:03:63:e7:a8:cf:d8:d1:06:2e:05:f6:7f:83:80:ac:
b7:a9:ae:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:28 2025 by rpki-client on console.sobornost.net