Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C917CB14190711F0A3D385166EB8BCC6.roa
File: C917CB14190711F0A3D385166EB8BCC6.roa (raw, json)
Hash identifier: Mod2aK8Zwr1V5BmWvnKGMkVHY+xeXbSqDA0dde+lM0Y=
Subject key identifier: 12:82:D0:18:CD:9C:86:FE:EF:90:80:3C:39:5D:89:ED:72:B7:05:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017919
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C917CB14190711F0A3D385166EB8BCC6.roa
Signing time: Mon 14 Apr 2025 08:09:28 +0000
ROA not before: Mon 14 Apr 2025 08:09:24 +0000
ROA not after: Mon 19 May 2025 08:09:24 +0000
asID: 136501
IP address blocks: 154.92.205.0/24 maxlen: 24
154.92.206.0/24 maxlen: 24
154.92.207.0/24 maxlen: 24
154.92.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96537 (0x17919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 14 08:09:24 2025 GMT
Not After : May 19 08:09:24 2025 GMT
Subject: CN=67fcc2b8-4c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:45:72:45:c2:e5:63:20:41:95:c6:32:9b:
2e:19:d3:56:7e:c2:7f:40:5d:1b:1f:d2:9c:5c:d1:
8d:0b:37:b7:20:eb:af:73:fa:a8:6b:e9:e2:19:49:
34:7f:25:de:d7:94:24:3e:76:aa:a9:52:4a:b2:3b:
c8:e4:30:3c:9c:16:88:21:35:fb:43:b7:9c:c8:27:
2f:f3:a8:0a:a4:09:71:32:8d:85:d7:d6:54:9b:fe:
2e:ae:cb:37:f0:aa:16:ed:61:47:29:bc:50:46:70:
89:93:d3:06:1e:28:48:52:4a:0a:81:47:72:d2:49:
fe:50:d6:c1:88:21:a4:f0:2e:0c:bd:61:0b:a0:e0:
ad:0b:0a:0b:c4:7f:f5:db:48:68:a4:1d:b1:03:1b:
4f:73:ea:f5:68:be:6a:12:ae:cb:72:3b:f8:eb:d2:
16:42:f9:7b:97:50:18:8d:f1:5b:b7:7c:65:b9:aa:
73:b8:0f:b2:d2:d5:61:3e:5b:94:fb:e7:be:4f:b2:
33:52:2a:0a:e8:de:30:dd:de:df:1a:d8:0e:a1:a5:
76:19:9a:e6:6b:09:60:c6:c4:60:46:c2:9a:69:87:
65:08:6d:b4:ed:eb:32:ca:ab:9e:af:4b:36:aa:cd:
38:bb:5d:1c:52:39:51:2e:04:e0:a7:d8:7b:3b:d4:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:82:D0:18:CD:9C:86:FE:EF:90:80:3C:39:5D:89:ED:72:B7:05:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C917CB14190711F0A3D385166EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.205.0-154.92.208.255
Signature Algorithm: sha256WithRSAEncryption
0e:2a:f5:ab:38:2c:a8:f1:b9:8a:25:b0:36:d7:0c:f3:31:b9:
32:ba:72:2d:cc:07:3d:55:c9:83:c1:64:87:19:8a:b1:5a:67:
e4:93:14:0e:9a:f2:e4:b0:5c:27:62:5b:a3:1d:96:81:15:52:
75:bd:e3:00:6f:bb:72:e1:62:ff:26:89:6c:c5:2a:c3:1b:4b:
b1:6a:4f:82:3b:92:69:4f:52:c6:15:dc:e4:7a:bd:11:67:4e:
3f:f8:77:20:c6:80:cb:7c:d7:7b:86:3c:c2:9f:a7:15:88:c9:
4a:c8:fb:19:0a:e1:14:5a:8b:fe:90:24:95:8c:04:51:27:da:
e3:dc:e1:36:a3:bf:17:20:68:03:c1:d3:ab:f4:30:85:e4:01:
f2:ed:23:8b:24:3c:d3:5b:01:e3:ef:4f:6a:49:af:f9:96:16:
b9:b2:24:9b:10:6f:ff:dd:c5:13:1d:2a:d4:37:1f:2e:e9:9b:
f0:ee:f9:78:68:fa:cf:69:50:3c:40:50:fa:83:e6:18:b8:e3:
55:da:c1:a4:3b:f5:fe:91:d7:68:02:ed:1c:e1:5a:cc:79:8f:
b3:53:32:c4:49:6c:32:a0:93:17:13:80:1b:6f:28:4d:52:46:
ad:8a:1a:8d:92:68:1a:b8:9b:9f:7d:45:64:86:d8:47:56:c3:
75:20:79:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:32 2025 by rpki-client on console.sobornost.net