Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE72A1BC19FB11F087F871F36DB8BCC6.roa
File: BE72A1BC19FB11F087F871F36DB8BCC6.roa (raw, json)
Hash identifier: 0QroKf1TY2LPXw+PdqiPyXzC0cvPghZZU5dK7U8llkQ=
Subject key identifier: 0D:01:46:85:BE:12:3D:9E:0E:02:60:0A:6F:40:07:12:D4:BA:8D:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017943
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE72A1BC19FB11F087F871F36DB8BCC6.roa
Signing time: Tue 15 Apr 2025 13:15:47 +0000
ROA not before: Tue 15 Apr 2025 13:15:43 +0000
ROA not after: Thu 03 Jul 2025 13:15:43 +0000
asID: 9304
IP address blocks: 154.223.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96579 (0x17943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 13:15:43 2025 GMT
Not After : Jul 3 13:15:43 2025 GMT
Subject: CN=67fe5c03-4a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:e5:e5:c2:e3:f9:b1:b3:14:2e:d9:84:29:
65:46:7d:1c:d3:c7:59:2a:ab:ea:d2:56:26:ff:09:
39:73:1a:37:09:ad:b4:f8:a8:e6:3d:77:50:e4:88:
a0:25:d1:2f:cd:78:9e:09:bc:c5:0f:03:16:15:aa:
b3:b3:d3:8d:67:67:82:45:ae:24:dd:8a:4d:88:af:
94:e8:1f:45:8a:aa:7a:29:a4:24:b3:2a:eb:dc:69:
d4:be:b3:07:32:e5:11:ab:8d:3f:99:42:5f:80:9a:
da:10:4b:6e:13:6c:e6:b0:d4:66:69:8e:03:16:f8:
21:26:1b:0e:98:b8:2b:53:e9:1c:e3:6d:7f:65:f8:
19:c6:41:2c:5b:78:9c:37:89:41:8e:a4:1b:49:9e:
db:ce:a2:05:f7:ff:98:9f:4a:84:df:58:da:a2:4b:
59:73:e5:78:c3:7f:70:2e:47:5e:16:c9:14:4f:3f:
8f:71:9f:68:1a:1e:45:39:41:a3:04:ef:5d:bd:c1:
e7:25:e1:7e:ce:fd:96:ee:30:79:85:50:80:6c:72:
c1:dc:1c:7a:c8:7f:80:d8:e4:d3:75:0e:e9:25:39:
58:2f:ac:2a:56:66:1b:25:33:34:b5:95:b6:6d:1e:
0e:7d:8c:0f:d5:be:a3:b3:ac:3b:e5:73:80:75:b5:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:46:85:BE:12:3D:9E:0E:02:60:0A:6F:40:07:12:D4:BA:8D:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE72A1BC19FB11F087F871F36DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.0.0/24
Signature Algorithm: sha256WithRSAEncryption
32:79:99:e3:35:5f:c1:48:05:b2:21:37:7e:a5:ff:46:da:15:
01:fa:df:7a:73:43:3c:94:be:98:ca:b0:8f:06:bc:93:09:cb:
06:c6:42:11:b6:30:6a:51:ce:c4:ed:fb:12:a9:71:0d:56:0a:
97:03:4f:d5:a5:61:2f:da:81:6e:86:21:1a:ec:80:ae:59:e2:
f5:d5:a8:93:05:15:9e:72:b9:ed:5c:71:74:ee:04:ad:11:26:
d4:25:a4:d9:d6:74:c7:c9:05:43:d7:99:a0:f0:21:80:7f:e0:
a1:e9:f7:be:a6:23:e0:25:22:8e:12:98:33:6b:8f:5e:89:d9:
0e:81:7b:48:35:b9:75:37:6a:ac:52:0a:c7:80:ac:0e:45:b0:
94:08:6b:9a:a7:6f:e1:22:9d:c1:cc:8a:12:81:9f:56:35:e7:
7c:f1:85:55:50:c5:04:08:7b:67:2c:2d:ae:ce:e1:6f:af:80:
4f:c7:62:a5:32:61:ab:e9:ab:6d:cf:d3:f0:3d:f6:d8:2e:c9:
7e:79:d5:b2:9d:ad:31:87:3c:46:4b:6d:7d:36:eb:32:c8:3c:
4f:c8:0c:94:cf:3c:50:20:95:88:40:49:ff:d7:c5:44:6d:27:
b2:6d:1b:10:da:03:08:e5:41:83:c8:6c:98:8b:f8:90:54:a2:
d2:b1:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:28 2025 by rpki-client on console.sobornost.net