Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB197D6A179D11F09866861E6EB8BCC6.roa
File: CB197D6A179D11F09866861E6EB8BCC6.roa (raw, json)
Hash identifier: IDtki5oWPSnUYP55YJT6uO5zjyisEDkZozwYhR8VRRQ=
Subject key identifier: D1:5C:17:1C:B7:08:8D:34:82:48:2B:72:5D:9D:EB:83:24:9E:00:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB197D6A179D11F09866861E6EB8BCC6.roa
Signing time: Sat 12 Apr 2025 12:58:13 +0000
ROA not before: Sat 12 Apr 2025 12:58:09 +0000
ROA not after: Sat 17 May 2025 12:58:09 +0000
asID: 6079
IP address blocks: 154.210.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96507 (0x178fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 12:58:09 2025 GMT
Not After : May 17 12:58:09 2025 GMT
Subject: CN=67fa6365-37a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:a2:ac:e2:c1:6e:67:bc:f0:b6:96:0a:fa:
c5:f7:c0:ba:e0:97:23:ad:1b:cb:58:a2:65:72:b3:
88:f1:ce:28:0c:69:2f:36:c5:4f:d8:40:29:13:61:
0c:a0:00:c4:a0:38:70:8a:17:eb:c5:01:52:61:e9:
72:0f:8a:31:50:9d:0a:ff:d0:c1:aa:ba:dc:15:c3:
7a:90:14:59:fa:dc:cf:65:d6:e0:43:e8:6b:5f:cc:
79:00:11:16:1b:f4:cc:6c:ec:8a:33:6e:3a:2e:d7:
db:04:62:15:db:32:5c:5a:58:2c:1a:fb:dd:91:b8:
f5:f6:76:83:7e:77:9c:ac:b7:41:aa:00:62:4f:ef:
68:f1:25:f6:7d:ac:78:37:08:f4:ad:9a:f2:27:9a:
1f:25:fc:48:58:41:93:10:03:cc:3b:18:53:0c:48:
d0:a7:d2:83:65:2f:25:6e:52:99:23:c6:0f:99:47:
2c:06:fc:39:7f:20:07:bc:fd:24:a8:da:6b:7b:ee:
87:39:11:1f:4d:05:77:d3:91:73:92:8b:8f:11:20:
aa:79:81:c0:ac:8b:89:46:11:c5:8e:0d:1e:2e:e9:
01:0e:85:29:fe:84:8b:7c:ed:32:f8:f6:9b:76:f2:
26:8d:d9:8b:ed:4b:e0:81:35:e8:54:92:bd:ad:ca:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5C:17:1C:B7:08:8D:34:82:48:2B:72:5D:9D:EB:83:24:9E:00:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB197D6A179D11F09866861E6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.96.0/19
Signature Algorithm: sha256WithRSAEncryption
32:24:9a:17:24:1e:78:4b:87:91:73:f9:2e:ba:f5:90:d0:1f:
5e:e5:c4:74:dd:78:09:51:32:67:23:8b:51:ca:b4:09:09:38:
0f:96:23:42:29:4c:a4:aa:a2:28:a2:0a:1d:c6:ea:b5:c7:b0:
b7:67:24:a9:b0:5f:1f:41:ee:5c:66:97:30:1c:f1:45:29:e1:
3b:f1:8c:6a:39:f9:f9:a1:16:13:4b:23:4c:ae:0b:82:c3:b6:
fa:15:30:9c:8d:3e:bc:78:4f:6d:94:de:5f:39:87:e6:e3:03:
76:12:80:61:a1:53:33:03:60:52:ac:4b:82:81:f1:2f:6c:25:
37:1c:03:bf:7c:c1:7c:8c:e8:12:f0:88:5d:3f:d0:4b:e9:d4:
7e:80:d5:dd:58:8d:41:83:cd:76:43:68:b0:47:12:2f:da:ba:
62:46:64:ff:86:76:a2:aa:3c:64:e7:56:b4:45:7d:5f:c1:0d:
af:5a:9e:5d:29:a6:48:96:1d:75:37:6d:87:76:6b:ac:31:12:
6d:68:fc:cf:24:d8:09:a9:87:43:c6:a9:8a:28:43:88:f6:ce:
0a:cf:67:9c:f4:17:87:14:5a:3c:95:0b:ea:14:b7:35:52:0e:
49:0a:ce:8e:74:32:87:5e:33:cc:6e:c5:78:9a:72:68:d7:da:
ab:1b:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:33 2025 by rpki-client on console.sobornost.net