Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEDFD57E106E11F084017F89762E951A.roa
File: CEDFD57E106E11F084017F89762E951A.roa (raw, json)
Hash identifier: YxoBtgDztJmXCHIYUEdJ1MSvUIOjz70pQW8wfd34Adc=
Subject key identifier: 19:81:45:56:F3:45:78:BD:E1:93:15:72:FF:21:5A:DE:66:53:ED:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01775B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEDFD57E106E11F084017F89762E951A.roa
Signing time: Thu 03 Apr 2025 09:34:15 +0000
ROA not before: Thu 03 Apr 2025 09:34:11 +0000
ROA not after: Thu 08 May 2025 09:34:11 +0000
asID: 61112
IP address blocks: 154.83.83.0/24 maxlen: 24
154.83.84.0/22 maxlen: 24
154.83.88.0/21 maxlen: 24
154.83.96.0/23 maxlen: 24
154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96091 (0x1775b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 09:34:11 2025 GMT
Not After : May 8 09:34:11 2025 GMT
Subject: CN=67ee5617-8262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:51:e5:f1:ee:d7:7a:e7:da:f8:fb:68:c8:
a3:c8:e1:9f:72:b3:e2:8f:4d:1b:e6:14:38:44:fd:
12:d0:7e:ea:65:82:57:0b:07:7b:36:45:16:31:15:
d6:d1:8e:ef:6f:d6:7a:b8:97:a0:2b:ed:3e:ad:f4:
06:7b:1f:60:65:c4:61:06:68:4e:2a:52:c5:67:9f:
49:81:88:77:61:93:73:ed:e6:49:79:6b:92:b9:85:
1a:61:10:b0:54:7e:d0:4b:f0:49:cf:26:34:2d:bb:
24:5b:71:7c:dc:cb:72:4b:4f:16:96:1d:a2:09:83:
14:f1:30:47:82:04:6c:ab:c8:04:12:c2:70:78:42:
22:1e:b3:b4:d8:2e:7e:bd:cb:91:cb:3e:95:3c:ad:
5e:ab:57:d8:d7:c4:73:05:7c:93:19:a8:66:17:5b:
8f:58:6e:c6:d3:bf:83:e1:61:a3:e9:de:b1:44:bd:
86:f9:e0:d3:a6:bb:a5:4c:93:b1:d5:55:2c:54:ab:
fd:8b:21:69:ce:d2:85:b1:45:01:d1:0e:5e:c2:bd:
a0:f9:6f:cf:b4:72:c0:ab:c9:3c:80:2b:ce:3a:5c:
36:5a:cc:45:9e:f4:55:27:53:03:11:45:a1:a1:e9:
b2:4c:82:cf:45:87:55:1c:4a:6a:5e:90:06:a3:1f:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:81:45:56:F3:45:78:BD:E1:93:15:72:FF:21:5A:DE:66:53:ED:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEDFD57E106E11F084017F89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.83.0-154.83.98.255
Signature Algorithm: sha256WithRSAEncryption
87:02:64:b0:bb:2f:fa:09:79:29:3b:41:40:bc:9d:67:bb:06:
8c:a2:bc:fd:94:32:09:1c:de:19:c4:20:e2:43:7f:62:21:0a:
6b:fc:47:c5:4d:a8:c7:5a:3e:81:9f:a3:e6:87:89:70:d9:1d:
9f:e1:dc:8e:ff:d6:de:04:20:9f:bc:81:af:1a:7d:d1:72:32:
37:88:d8:eb:60:48:7a:8a:d6:df:7c:13:a6:ef:62:83:a1:66:
bf:0f:7a:b8:be:26:27:0a:df:0c:f0:29:70:8e:e1:97:ca:d7:
8f:32:4e:b3:68:e6:8a:aa:29:23:b9:8c:ac:48:26:74:f8:92:
02:a5:8a:f5:13:7f:46:77:10:57:00:ff:21:1e:bb:8f:61:59:
41:75:63:23:03:45:5c:fe:47:08:bc:6e:b1:a1:be:0a:a0:03:
05:80:82:4f:53:6b:31:9b:a3:7c:c9:81:70:3c:6f:16:9f:f3:
bb:c7:69:a7:00:64:3f:f4:97:4b:d0:ae:d5:06:a2:12:8a:e6:
db:52:d2:52:4b:c7:e5:cb:99:6e:0d:d3:2b:44:d5:73:50:a5:
ba:e0:f4:ec:87:d1:af:6e:4f:83:fa:46:d8:7d:71:0a:95:9b:
b4:a3:1c:f5:f1:75:67:b0:4b:b1:4d:f8:32:2e:ea:a7:d2:f6:
e5:e8:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:36 2025 by rpki-client on console.sobornost.net