Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D03E76EA1C6311F0945ED1E0DAE4EC9C.roa
File: D03E76EA1C6311F0945ED1E0DAE4EC9C.roa (raw, json)
Hash identifier: +cKnC79ny9tXIqGp71kzEer1lZLQhrwZp7G1yzep/SI=
Subject key identifier: 30:CA:36:EA:A7:C3:11:7D:D6:62:BD:DA:74:9B:65:38:16:CE:9F:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D03E76EA1C6311F0945ED1E0DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:45:47 +0000
ROA not before: Fri 18 Apr 2025 14:45:43 +0000
ROA not after: Sat 24 May 2025 14:45:43 +0000
asID: 400619
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96695 (0x179b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 14:45:43 2025 GMT
Not After : May 24 14:45:43 2025 GMT
Subject: CN=6802659b-c5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:7b:29:6e:cf:03:c6:d3:34:9a:78:50:52:
d9:b3:6c:12:bd:8d:c1:e8:dd:60:40:04:e8:88:35:
bc:cd:66:99:22:36:98:a2:8d:73:d7:7c:d8:36:3d:
63:8d:2a:d8:25:8a:ce:cb:a6:5b:22:af:6d:de:20:
7a:6f:6f:c2:a7:7e:54:0a:06:ab:ff:28:eb:41:1b:
3c:68:4c:95:97:d2:2e:77:88:28:f8:46:67:ff:e9:
4f:3d:d3:f3:ed:3a:c4:c7:67:78:ff:6e:1c:2c:66:
39:96:8f:5b:62:fb:03:fb:a5:cb:cf:69:0f:61:43:
97:28:df:0e:8d:f6:e8:2c:15:ea:00:34:7c:58:ad:
0b:e8:9f:af:48:9f:02:e9:4e:24:25:48:2c:a9:c8:
9a:14:be:29:9c:47:53:fd:87:05:2d:9d:a2:87:d0:
e5:b0:2d:fc:19:db:6a:11:f1:d4:3b:d0:b6:d7:6d:
d0:18:29:09:c5:5c:35:fb:fd:b2:c5:30:7c:44:7a:
b1:85:70:e5:99:42:27:5c:e1:fc:42:8d:37:ea:21:
db:51:a5:20:63:4f:a1:ff:4e:bb:3d:04:11:ae:db:
51:53:f2:ff:43:ec:73:34:bf:87:ac:cb:1c:0b:ee:
5d:09:18:dc:2c:36:ae:97:0f:36:1c:37:4b:64:65:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CA:36:EA:A7:C3:11:7D:D6:62:BD:DA:74:9B:65:38:16:CE:9F:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D03E76EA1C6311F0945ED1E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7f:6c:42:85:50:f0:48:4a:9e:10:35:cd:b8:4f:09:b5:0a:
8c:35:81:cc:15:bc:8c:dd:52:8a:ee:55:bf:4d:ad:70:f9:f8:
57:16:54:1c:51:88:60:53:59:5c:81:cd:e1:32:0e:4e:0e:f2:
2f:3b:dc:f0:8a:75:d6:7e:d8:bb:da:aa:8a:25:e3:83:4f:be:
1a:09:8a:90:af:87:79:10:85:4d:a5:84:96:ed:bb:cd:4b:d2:
a2:54:49:91:39:6a:b4:05:13:d0:92:68:34:b8:2c:d2:6d:29:
70:1d:1b:dd:80:07:0a:44:20:b0:aa:7f:54:f2:dc:33:32:32:
f9:f7:74:c9:a4:85:b8:4c:16:58:10:d9:16:93:16:8c:3a:21:
e2:0a:09:8c:d6:80:42:eb:c6:9a:95:f8:09:23:d1:8a:96:80:
83:54:25:4a:9f:53:76:eb:df:9a:94:84:fd:76:1e:a9:d3:79:
fe:d3:8a:c0:f4:b1:c3:51:6d:3e:28:98:03:70:d4:da:95:ce:
09:5d:82:95:2b:61:62:e4:b5:13:75:cc:cd:df:9a:b2:f9:ef:
51:f9:bc:f5:52:33:71:8c:c3:9c:f2:2f:10:e5:99:9f:a6:2d:
7f:46:a2:b5:b6:5a:b2:dd:74:df:1a:79:86:36:37:44:0b:e1:
8a:2a:8d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:18:37 2025 by rpki-client on console.sobornost.net