Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0E4FF7EBE9011EF8B424690762E951A.roa
File: C0E4FF7EBE9011EF8B424690762E951A.roa (raw, json)
Hash identifier: XA/fbU0oP+mPymPpsGLk73HquVBwFYpMN9v9oQpxsgw=
Subject key identifier: 3D:2C:FD:A4:F0:4B:42:FC:37:63:6E:86:8E:10:30:6E:3C:14:B1:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0E4FF7EBE9011EF8B424690762E951A.roa
Signing time: Fri 20 Dec 2024 05:10:39 +0000
ROA not before: Fri 20 Dec 2024 05:10:36 +0000
ROA not after: Wed 10 Dec 2025 05:10:36 +0000
asID: 984
IP address blocks: 154.82.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72712 (0x11c08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 05:10:36 2024 GMT
Not After : Dec 10 05:10:36 2025 GMT
Subject: CN=6764fc4f-653a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:85:d5:4c:2c:4a:85:ad:08:48:91:e1:82:
18:34:9d:79:f2:a3:52:bc:8c:1e:6e:4a:a3:4e:ed:
94:8e:0f:04:38:80:3c:aa:da:05:3a:1d:9b:00:cd:
ca:b3:d7:bf:a4:c6:f8:e8:ff:39:89:00:70:60:aa:
d4:d0:23:86:1a:c9:51:25:14:25:66:33:5b:b6:b3:
99:f4:35:87:39:41:3d:c3:26:dc:d1:bc:fe:dc:b6:
e1:8c:bd:1a:2f:94:03:1b:46:ca:fd:cf:ff:71:d5:
81:69:7b:31:62:0d:e1:f3:69:12:ca:41:57:30:f1:
ef:49:19:95:6a:65:c6:36:02:89:40:c9:28:7f:3f:
25:43:c0:51:a8:04:1b:0e:9b:1a:f8:60:8f:65:c8:
e2:04:85:7b:34:c3:84:33:f0:6b:49:39:b8:fc:32:
e8:d2:29:6a:c2:bc:9a:10:be:24:5f:7c:4e:32:62:
05:5c:08:e0:f3:a5:e9:00:8c:fb:16:21:96:8c:c3:
70:c8:81:2b:99:15:61:b2:93:02:37:33:8f:53:d2:
37:ad:82:0a:17:9d:6e:2e:63:18:b9:f3:3a:a6:e6:
02:ee:48:e2:74:bb:15:de:19:7b:d8:ab:6a:ef:87:
e0:c1:b1:ed:cd:75:8e:a8:25:68:6a:4d:89:4a:a8:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2C:FD:A4:F0:4B:42:FC:37:63:6E:86:8E:10:30:6E:3C:14:B1:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0E4FF7EBE9011EF8B424690762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.177.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d4:d2:2e:33:ab:c2:f5:62:a8:4e:5c:cd:3a:f1:39:be:76:
8d:21:91:af:f2:32:54:e0:31:6e:21:41:ef:bc:53:8c:f6:80:
34:bb:7e:ab:09:d7:2f:17:89:32:cc:c2:94:bf:7d:dc:38:98:
87:44:6e:db:ea:88:f1:38:3c:3c:3c:2f:dc:5f:8f:e0:9a:52:
8e:9e:e7:2c:f6:f7:f8:ab:cb:a6:65:cd:dc:d7:e5:c9:f2:5a:
30:c3:a2:51:e0:56:59:17:30:61:20:63:91:db:63:78:46:81:
28:06:da:5e:bd:4d:ed:47:be:1b:9a:cd:c0:36:8f:f0:13:9d:
c3:31:c3:5f:1e:bd:7d:33:52:ad:96:e7:d9:46:db:e8:11:ec:
0a:14:f0:c8:8b:2f:0d:c5:41:01:fb:1c:4a:3b:cf:28:a3:24:
e8:b1:d8:34:00:8d:85:a2:5b:23:01:5f:d4:ae:d0:06:2a:5a:
86:96:55:13:0a:1b:79:20:fc:fb:96:7b:45:ed:37:f1:f7:00:
b0:b4:51:7d:08:41:4a:b9:07:2c:40:ef:bb:70:ae:fd:d8:26:
84:4e:67:95:26:5e:4f:40:e3:cb:8f:7e:ae:68:3b:e9:76:9c:
77:a7:8b:42:a2:63:6a:6a:37:21:62:da:ed:b8:74:eb:ce:7f:
c9:be:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:52 2025 by rpki-client on console.sobornost.net