Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D462B442201511F0A2F8EBA1DAE4EC9C.roa
File: D462B442201511F0A2F8EBA1DAE4EC9C.roa (raw, json)
Hash identifier: DRQ0D7xOu0xvPU5bLihopz9dKkIlBRlFYiCyhEjUklY=
Subject key identifier: DE:93:D5:AC:19:CB:04:61:6B:F0:D9:6E:1D:E9:9D:21:BB:A1:C8:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D462B442201511F0A2F8EBA1DAE4EC9C.roa
Signing time: Wed 23 Apr 2025 07:37:38 +0000
ROA not before: Wed 23 Apr 2025 07:37:33 +0000
ROA not after: Wed 25 Mar 2026 07:37:33 +0000
asID: 211392
IP address blocks: 154.83.22.0/24 maxlen: 24
154.83.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96923 (0x17a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:37:33 2025 GMT
Not After : Mar 25 07:37:33 2026 GMT
Subject: CN=680898c2-c40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5c:fe:75:13:10:5d:69:c3:e9:28:d9:79:a1:
67:3e:35:3d:0a:aa:86:f1:99:b9:c1:c1:a9:51:77:
4a:68:0f:67:e7:f0:50:4d:72:10:1b:fc:91:49:0e:
39:10:78:12:a0:64:9b:21:cc:cc:ff:d5:98:4a:1e:
eb:ca:2a:c4:0f:2e:36:44:5b:51:cf:72:f2:9a:45:
93:34:87:da:8e:d9:34:9d:f1:74:75:0c:36:0d:e6:
df:38:e3:81:ff:fa:cf:fc:e8:70:91:6b:ab:4f:2e:
49:45:04:02:e1:2a:e7:8d:84:83:71:48:71:d0:76:
fa:d9:06:0b:5e:69:df:62:25:79:0a:ec:42:88:a5:
b9:fa:bd:05:d9:f2:ba:6f:b5:ac:f7:ad:fb:e1:05:
14:66:db:47:7c:fe:15:31:a2:d8:f8:42:2a:b7:e4:
7a:43:3f:a0:47:67:dd:a4:cb:75:76:ee:fd:b7:c1:
d4:63:4b:52:82:26:a1:86:78:d7:b3:53:41:b6:2e:
0e:e5:9d:5e:5b:57:6a:0c:0b:46:57:37:c7:9f:bd:
0f:be:b0:6e:92:31:85:6a:a6:f2:f1:ef:a8:1e:a7:
e7:83:77:2a:cb:31:91:9e:8a:16:c2:f9:14:6b:d1:
99:52:36:18:76:6c:5e:cd:32:0e:15:b2:c2:1a:02:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:93:D5:AC:19:CB:04:61:6B:F0:D9:6E:1D:E9:9D:21:BB:A1:C8:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D462B442201511F0A2F8EBA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.22.0/23
Signature Algorithm: sha256WithRSAEncryption
06:97:0a:6a:9c:ca:f6:c4:47:29:11:43:30:82:20:b6:62:b0:
32:16:14:51:45:76:b8:cf:53:d3:27:19:ea:84:ab:f9:3b:c1:
e7:ff:74:7a:5f:7d:46:6c:fc:a5:aa:3f:67:a8:12:64:bb:81:
e2:56:8e:a9:b7:2e:0e:13:bb:9d:31:02:ec:e3:06:ae:2f:3a:
c7:78:e3:88:0e:cb:8c:a4:66:9e:50:9a:91:b6:66:ac:d3:41:
8e:e9:29:1c:15:6d:3c:28:b6:84:7c:90:80:59:22:e5:fe:be:
9a:23:c1:50:29:76:bf:a4:c2:87:89:ea:57:a8:c6:ed:d7:1e:
7e:e4:28:ba:7b:c7:85:63:08:74:10:3b:36:73:34:31:70:1f:
b9:1a:25:0c:18:83:41:73:bc:2e:23:92:99:84:7c:02:6d:44:
2c:2b:ec:af:4d:b1:9d:85:6a:ed:2d:39:76:94:82:16:3a:05:
ab:eb:fa:17:b2:cf:33:03:79:bb:5a:22:bd:e6:f5:33:36:d3:
f8:43:b9:be:73:e1:ac:80:2c:6d:19:44:aa:c9:de:9e:e0:28:
2c:f1:ba:d3:e4:fa:7f:dd:cf:9e:b8:1d:f0:ff:d4:be:c9:4e:
04:1f:60:d0:ea:af:10:80:a4:17:10:29:69:0d:b0:64:ea:2e:
e0:9f:86:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:18:51 2025 by rpki-client on console.sobornost.net