Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF7AE7CC201C11F0A03317CFDAE4EC9C.roa
File: CF7AE7CC201C11F0A03317CFDAE4EC9C.roa (raw, json)
Hash identifier: l7diV8H1psrP57GAlfN4e52IZRBRWzprAjA2SZqO6DA=
Subject key identifier: CC:B5:70:C0:0E:0B:D4:05:AF:F1:E2:ED:68:9C:5C:DD:DA:91:4F:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017AB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF7AE7CC201C11F0A03317CFDAE4EC9C.roa
Signing time: Wed 23 Apr 2025 08:27:36 +0000
ROA not before: Wed 23 Apr 2025 08:27:32 +0000
ROA not after: Fri 02 May 2025 08:27:32 +0000
asID: 5065
IP address blocks: 154.82.10.0/24 maxlen: 24
154.83.225.0/24 maxlen: 24
154.83.229.0/24 maxlen: 24
154.83.231.0/24 maxlen: 24
154.83.251.0/24 maxlen: 24
154.84.182.0/24 maxlen: 24
154.84.183.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.120.0/22 maxlen: 24
154.93.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96945 (0x17ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:27:32 2025 GMT
Not After : May 2 08:27:32 2025 GMT
Subject: CN=6808a478-aaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:d9:8f:8b:7b:86:b1:5e:8a:45:09:0c:3b:
1d:c8:eb:d1:80:f3:93:99:3f:f3:d7:de:26:d1:07:
61:7b:b0:ef:cd:33:01:3a:46:69:d6:8e:ee:19:48:
ed:9a:01:3b:a2:ef:2d:f1:a0:fa:6a:0c:f7:88:a7:
4a:4d:a4:7c:89:f2:ea:0b:0c:44:4d:88:5c:91:30:
c2:ec:c6:80:13:ad:7c:d4:f1:f4:c5:ad:dd:85:b7:
18:25:b6:4b:eb:1b:51:ce:f5:3c:ad:83:fe:8a:cf:
a4:99:9c:8c:e0:27:02:89:f8:f5:63:60:95:37:d4:
e5:83:a7:cd:c9:01:8e:cd:ce:df:49:a2:f5:b0:b9:
2d:fd:41:79:f2:5a:4e:30:b8:6f:aa:09:71:6e:2c:
be:73:c7:e6:85:64:11:02:3d:bf:f2:d9:03:b8:d6:
8e:e5:9c:00:67:d7:b4:cb:70:10:17:1a:15:6b:f7:
b2:c7:f1:ba:37:45:8d:60:7e:ff:0a:f1:d1:70:0a:
1b:a1:f5:92:30:fa:3c:ce:e0:92:a8:51:cb:75:07:
be:57:c9:2a:93:f9:c9:f6:49:5f:b2:e8:27:03:7a:
6b:fc:68:e8:b7:9c:2e:79:b9:a5:3e:d1:9a:95:40:
65:c6:66:6a:71:5b:9f:54:cf:c7:4a:0e:5c:b7:25:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B5:70:C0:0E:0B:D4:05:AF:F1:E2:ED:68:9C:5C:DD:DA:91:4F:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF7AE7CC201C11F0A03317CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.10.0/24
154.83.225.0/24
154.83.229.0/24
154.83.231.0/24
154.83.251.0/24
154.84.182.0/23
154.85.110.0/24
154.85.120.0/22
154.93.16.0/22
Signature Algorithm: sha256WithRSAEncryption
80:f1:d9:1a:13:5d:f0:a9:8e:07:27:5a:5e:c7:43:ab:42:79:
72:82:2e:38:54:1e:6a:6e:b7:f0:8c:68:dc:ae:1b:3b:d2:fb:
3b:aa:bd:a9:1b:f7:6b:ce:53:1e:6d:28:79:0d:8d:d3:cc:0a:
b2:2f:ee:7a:27:d2:51:58:af:f1:df:f7:e6:96:6f:04:41:c2:
ea:1e:7e:22:2b:52:a2:8f:91:07:11:23:8f:95:6d:3a:24:41:
ed:ab:35:12:95:f6:dc:fb:2b:27:7c:7a:a7:ae:c1:21:0a:a7:
69:31:ca:04:9b:84:53:43:ba:42:58:e4:c9:0a:bf:3f:c9:83:
ff:f8:6b:2e:5f:9b:e5:5e:76:55:ae:3e:97:49:35:5d:4d:93:
b5:cd:7e:7a:8a:92:f3:79:7e:39:bb:de:74:39:35:83:03:1e:
a8:de:42:33:92:7f:83:55:db:71:35:24:72:01:63:fd:7e:49:
d8:a6:e6:2b:30:29:9b:4a:0f:2f:c6:c1:57:cd:83:a1:91:c3:
8a:67:42:70:3a:69:7a:ea:05:cd:a4:e9:ea:0b:f4:60:53:d8:
9b:49:74:99:c8:7c:05:84:a7:08:67:8a:9c:18:7f:6c:5c:3f:
8d:2a:19:b3:53:75:a8:69:7f:0a:ee:79:d2:e6:af:8d:57:4e:
ff:89:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:04:35 2025 by rpki-client on console.sobornost.net